$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa File: abad3fc4-19f2-378b-b7e4-8ec84d750389.roa (raw, json) Hash identifier: hmVW62yfmrl4krj4ieSQWDHE0/qapj/I9+zv2J5H7kg= Subject key identifier: 9A:6E:11:E8:E4:16:2A:CA:F6:FA:59:97:38:D1:A5:88:9A:31:CA:2C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F62930BC1BD7DF032826E83C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.33.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0b:c1:bd:7d:f0:32:82:6e:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=d00a9f01-f8b8-45a3-b78c-4ca442dfa336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:43:10:4c:d7:08:4b:89:df:39:d5:69:87:96: 39:37:5d:a8:0d:66:85:85:c3:f7:a7:35:dc:cf:b3: d5:eb:ec:57:7a:04:6b:43:af:a8:96:55:6d:68:98: 16:fe:b7:ac:16:a0:77:25:f8:7e:22:6f:51:9f:20: b5:82:f2:c0:43:1f:3a:49:68:97:eb:bf:7a:1e:f0: 80:10:39:56:68:97:40:10:5f:e1:16:8a:d8:16:6c: b5:ee:b6:71:14:0c:dc:83:15:a7:57:24:6c:87:0b: 50:ba:a6:6b:1c:2f:04:59:6a:69:fa:47:2e:ff:70: 6d:24:39:7d:40:ec:6e:7f:fc:42:bb:e5:c1:10:d7: 9f:2c:cb:43:11:36:21:93:2d:ac:ee:49:5a:0e:42: b6:ce:56:04:d5:87:ac:b0:7f:67:a5:35:6c:c9:5b: 7e:bb:be:c5:a2:fa:5f:b8:c7:73:ca:68:62:d0:9f: 36:1b:f4:42:9c:f4:18:b1:8e:df:bd:bd:ad:15:4f: b8:4d:89:d8:56:93:74:b7:09:7c:84:77:28:ae:ae: 2e:3b:27:c5:6a:69:71:8d:a1:8b:33:1b:77:41:34: 8a:25:1c:b3:d8:06:e2:a5:8c:93:79:60:dd:15:78: 84:c2:b2:8a:10:3a:75:5c:9b:ef:ff:d5:2b:e2:74: 2f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6E:11:E8:E4:16:2A:CA:F6:FA:59:97:38:D1:A5:88:9A:31:CA:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:78:4c:ea:ed:9e:29:1d:7c:4a:de:38:a6:5f:e8:b0:d9:fe: 9b:8a:70:2a:97:fd:6a:9e:fe:86:af:c8:aa:38:3d:eb:d9:47: 42:c0:13:a1:0c:e0:d8:c0:89:d8:33:9b:06:ec:eb:3d:6b:35: bf:ff:98:c5:58:22:a5:f7:b7:2b:97:8f:ca:9c:ad:bd:48:6d: 2b:1b:ae:3d:1e:b3:f3:25:70:2e:66:8a:6c:25:fa:25:af:d3: 57:50:df:ca:1e:bc:e5:87:b4:90:8f:e7:b0:b3:7d:92:3d:5b: 64:5d:28:e6:78:77:cd:53:19:75:33:07:f8:2e:18:65:7c:9a: 93:f7:71:b6:6d:14:21:5c:88:6d:61:a1:dd:57:a1:98:68:77: 0a:c4:ea:16:6f:f8:bf:29:6e:9a:fc:7b:2c:a8:63:f8:91:40: d6:d4:b6:93:03:ed:7b:4f:49:23:74:9d:c1:48:59:9b:3e:b4: 4d:cb:f0:fa:af:4d:51:22:e2:d5:6e:05:38:85:86:42:35:60: a4:bf:cb:f0:9b:e8:0d:10:dc:bf:83:1a:40:7f:e5:07:a9:1e: 24:74:84:15:c6:d1:0d:7b:2d:75:1a:85:f0:c6:a4:5e:22:a7: 78:79:98:2b:6b:b8:16:f5:0c:b6:cb:6e:ed:19:ae:03:39:be: 35:10:be:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwvBvX3wMoJug8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDAwYTlmMDEtZjhiOC00NWEzLWI3OGMtNGNhNDQyZGZhMzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEMQTNcIS4nfOdVph5Y5N12oDWaFhcP3pzXc z7PV6+xXegRrQ6+ollVtaJgW/resFqB3Jfh+Im9RnyC1gvLAQx86SWiX6796HvCA EDlWaJdAEF/hForYFmy17rZxFAzcgxWnVyRshwtQuqZrHC8EWWpp+kcu/3BtJDl9 QOxuf/xCu+XBENefLMtDETYhky2s7klaDkK2zlYE1YessH9npTVsyVt+u77Fovpf uMdzymhi0J82G/RCnPQYsY7fvb2tFU+4TYnYVpN0twl8hHcorq4uOyfFamlxjaGL Mxt3QTSKJRyz2AbipYyTeWDdFXiEwrKKEDp1XJvv/9Ur4nQvfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpuEejkFirK9vpZlzjRpYiaMcosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWJhZDNmYzQtMTlmMi0z NzhiLWI3ZTQtOGVjODRkNzUwMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHR4TOrtnikdfEreOKZf6LDZ/puKcCqX/Wqe/oavyKo4PevZR0LAE6EM 4NjAidgzmwbs6z1rNb//mMVYIqX3tyuXj8qcrb1IbSsbrj0es/MlcC5mimwl+iWv 01dQ38oevOWHtJCP57CzfZI9W2RdKOZ4d81TGXUzB/guGGV8mpP3cbZtFCFciG1h od1XoZhodwrE6hZv+L8pbpr8eyyoY/iRQNbUtpMD7XtPSSN0ncFIWZs+tE3L8Pqv TVEi4tVuBTiFhkI1YKS/y/Cb6A0Q3L+DGkB/5QepHiR0hBXG0Q17LXUahfDGpF4i p3h5mCtruBb1DLbLbu0ZrgM5vjUQvjY= -----END CERTIFICATE-----Generated at Tue Oct 6 15:56:59 2026 by rpki-client