$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa File: abad3fc4-19f2-378b-b7e4-8ec84d750389.roa (raw, json) Hash identifier: /acDwrGPHvVQIplQ757EYR62FKk3M28P/n8Swe6rOrI= Subject key identifier: 51:2A:5F:35:6B:AB:F5:38:73:40:4F:F3:A0:36:2C:FE:67:8A:82:BC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D3E000B11FD8179F95BBD2100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 8069 IP address blocks: 20.33.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:0b:11:fd:81:79:f9:5b:bd:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=15ffd44a-74dd-4034-a6c9-f910704a513c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:53:05:77:84:a9:d2:f1:f4:d0:ae:5d:3f:6b: de:d6:55:8e:12:d0:3c:a4:02:78:2e:e1:86:86:48: 2c:0f:6e:15:5d:30:d7:bc:a8:38:d7:55:2f:8c:26: 02:74:88:1c:85:67:26:42:b2:e2:8e:e2:26:90:54: 0b:51:43:e6:cb:ad:01:49:c4:c6:b8:53:b1:7d:2c: 8a:5e:ab:a3:28:ea:46:8c:f7:0a:de:fe:56:19:e0: bb:a3:4d:4c:42:6f:cc:df:f7:85:d2:94:3d:ca:63: e9:cd:ef:5c:1a:22:12:99:92:a6:00:e8:0b:14:0d: 64:c5:90:44:6a:07:d9:b9:00:a7:a7:5d:06:cf:01: 04:ef:7f:6a:43:7d:e8:00:02:e8:d1:aa:b2:0f:bc: 52:c0:d9:5c:b2:08:e9:04:9c:21:02:da:34:8a:d3: 7a:1f:ca:23:c2:48:94:85:b9:df:96:cf:72:4a:31: e2:35:45:53:fe:c1:a3:9a:02:1b:ca:27:26:1a:ab: ce:b7:80:dc:0b:0b:e3:0e:03:57:69:31:9f:f6:37: 8a:67:3a:22:f4:24:54:bd:53:da:9b:75:8f:ea:75: ad:b3:dd:a9:0a:6d:28:8c:bc:8d:a9:3d:c1:c7:e5: 3b:9f:ca:9c:72:c7:4b:b0:dc:7d:38:98:7e:f1:51: 30:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2A:5F:35:6B:AB:F5:38:73:40:4F:F3:A0:36:2C:FE:67:8A:82:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f1:c5:df:6f:1a:95:4f:0f:8f:98:e8:b0:ba:0a:a3:6c:82: 7b:27:b4:f7:b8:39:3b:09:f9:58:6a:0b:4c:df:b9:8d:f5:6f: 91:3f:32:32:d8:83:48:d7:fd:c0:b7:00:31:e2:6b:8c:59:be: bd:4c:e3:30:a0:f7:78:3f:50:c7:e8:fb:00:fd:75:c2:39:9c: 91:10:0d:e5:c7:86:a9:4d:6b:15:ff:ac:08:51:a0:4d:55:10: 43:95:fe:0c:fe:8d:e1:18:95:3e:3b:41:e4:85:9c:5a:fe:2d: 86:8d:13:46:f8:b1:e1:93:dd:67:53:41:f6:02:e4:c8:d1:db: a3:ed:f3:6b:16:a2:4a:ac:e1:19:22:49:aa:57:71:c2:91:b3: 4d:f5:0c:5f:67:67:21:94:59:3b:4a:bb:b2:ae:a1:3c:e3:70: 9a:50:01:e6:55:77:87:bd:a3:7e:4a:67:7c:8e:db:80:19:3f: 63:fe:a4:de:10:ab:4b:a1:1d:2d:eb:43:05:32:dd:f4:32:4f: 7f:41:b7:b6:00:4b:a2:51:d8:cd:4f:51:fc:98:94:95:b0:8e: 0c:04:20:ea:26:e0:aa:f0:cf:d6:6e:6b:b2:a7:d0:ba:9c:3b: 6f:5e:24:fe:88:a7:04:b0:45:e4:16:91:01:98:e1:72:43:05: df:60:39:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAsR/YF5+Vu9IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MTVmZmQ0NGEtNzRkZC00MDM0LWE2YzktZjkxMDcwNGE1MTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVMFd4Sp0vH00K5dP2ve1lWOEtA8pAJ4LuGG hkgsD24VXTDXvKg411UvjCYCdIgchWcmQrLijuImkFQLUUPmy60BScTGuFOxfSyK XqujKOpGjPcK3v5WGeC7o01MQm/M3/eF0pQ9ymPpze9cGiISmZKmAOgLFA1kxZBE agfZuQCnp10GzwEE739qQ33oAALo0aqyD7xSwNlcsgjpBJwhAto0itN6H8ojwkiU hbnfls9ySjHiNUVT/sGjmgIbyicmGqvOt4DcCwvjDgNXaTGf9jeKZzoi9CRUvVPa m3WP6nWts92pCm0ojLyNqT3Bx+U7n8qccsdLsNx9OJh+8VEwVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEqXzVrq/U4c0BP86A2LP5nioK8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWJhZDNmYzQtMTlmMi0z NzhiLWI3ZTQtOGVjODRkNzUwMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHxxd9vGpVPD4+Y6LC6CqNsgnsntPe4OTsJ+VhqC0zfuY31b5E/MjLY g0jX/cC3ADHia4xZvr1M4zCg93g/UMfo+wD9dcI5nJEQDeXHhqlNaxX/rAhRoE1V EEOV/gz+jeEYlT47QeSFnFr+LYaNE0b4seGT3WdTQfYC5MjR26Pt82sWokqs4Rki SapXccKRs031DF9nZyGUWTtKu7KuoTzjcJpQAeZVd4e9o35KZ3yO24AZP2P+pN4Q q0uhHS3rQwUy3fQyT39Bt7YAS6JR2M1PUfyYlJWwjgwEIOom4Krwz9Zua7Kn0Lqc O29eJP6IpwSwReQWkQGY4XJDBd9gOQE= -----END CERTIFICATE-----Generated at Thu Mar 26 22:13:48 2026 by rpki-client