$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abe29d06-94cb-33bf-b8fd-20f50b0715db.roa File: abe29d06-94cb-33bf-b8fd-20f50b0715db.roa (raw, json) Hash identifier: JzUZ+NL3/UtGMoRxhDA4NifcXHwLVIfKUUwxfkCARyM= Subject key identifier: 79:B3:1A:2D:CB:11:2B:01:DC:B4:45:F9:F7:2F:02:73:87:42:F7:67 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DC40056A286AD66586C7F3940 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abe29d06-94cb-33bf-b8fd-20f50b0715db.roa Signing time: Fri 08 May 2026 13:00:30 +0000 ROA not before: Fri 08 May 2026 13:00:30 +0000 ROA not after: Thu 06 Aug 2026 13:00:30 +0000 asID: 8069 IP address blocks: 20.33.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:56:a2:86:ad:66:58:6c:7f:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 8 13:00:30 2026 GMT Not After : Aug 6 13:00:30 2026 GMT Subject: CN=e6ecb8d7-6ab6-458c-b785-c5b344631198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:3d:3d:20:32:21:66:bd:28:ce:df:82:10: b4:01:3c:9b:a2:06:1a:8a:91:52:54:54:91:60:b2: a6:1e:97:7c:e5:78:23:f9:1a:20:b0:6e:d2:b0:a9: f7:04:7a:37:36:73:3f:06:1c:d0:24:b6:14:82:85: 1c:20:5f:9a:50:81:a4:e7:77:c8:d7:2e:39:90:8e: 9a:57:6d:1e:0a:a5:e3:38:5e:f2:2c:9d:36:e1:1d: 0f:5a:df:22:e7:88:55:f6:bb:2e:5b:e7:94:a8:ec: fe:71:37:dc:b0:e1:5e:8a:be:3b:0f:dc:11:55:b4: 5f:f3:a3:6c:b0:80:b7:7d:a9:21:02:80:dc:a0:27: 8d:b7:c6:c9:42:86:32:aa:c8:50:7f:80:7d:3e:86: 0e:db:5b:d6:d1:05:74:52:1f:60:5c:17:66:68:e6: 2a:62:70:8e:8c:6d:55:37:7e:75:8e:20:2c:e8:b7: 65:57:33:ec:82:2b:30:ee:14:7a:d5:97:0e:b4:2c: 6a:95:59:a0:db:eb:3e:e3:ef:82:5b:e6:a9:cd:f3: e3:dd:1f:6a:ec:a9:7a:4d:48:80:52:8f:95:f3:32: e0:05:b8:89:57:03:17:8e:39:eb:f7:4f:33:69:fa: dd:19:f0:7c:f7:c9:11:ad:56:18:04:70:84:f5:a7: aa:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B3:1A:2D:CB:11:2B:01:DC:B4:45:F9:F7:2F:02:73:87:42:F7:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abe29d06-94cb-33bf-b8fd-20f50b0715db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:12:f8:0e:16:66:06:40:b9:25:7b:d7:ef:8b:8c:fc:f2:33: c2:75:59:b9:82:38:38:16:52:2b:87:fc:ef:58:f3:bf:7a:22: be:44:1d:fe:a2:95:92:5a:27:a5:de:31:0d:3b:c6:15:89:5b: ae:f4:f1:64:f4:e1:e7:75:28:e6:07:e3:03:12:4c:ea:40:77: d8:83:d6:3a:eb:34:a7:5b:1f:f4:68:ae:28:47:2e:a0:61:3b: a0:7b:7d:19:aa:25:4a:8f:4a:e2:e6:04:00:82:ef:91:cc:ff: d5:ff:99:62:53:a9:53:af:5d:85:be:15:b9:9d:90:db:7f:b7: 72:e0:3d:22:8b:4a:e7:ad:ef:e9:0a:ad:07:78:8f:03:36:9d: 9a:dc:3f:40:ce:11:9b:3b:cc:dc:77:67:a6:5e:6a:2c:1a:27: 4f:23:1d:42:a2:bf:04:8d:c4:66:dd:18:b8:cd:55:fd:c9:0a: 19:22:64:fb:70:c5:a1:1f:b4:20:c8:bf:44:39:bc:3b:95:42: dd:00:79:13:51:f9:1a:d8:a0:af:f2:25:af:6d:d7:a6:a4:3a: c2:3d:e8:36:80:ed:95:72:14:e8:45:51:40:6c:3e:e9:c4:b2: b5:e2:47:7f:cb:e1:7a:c9:8b:d2:f1:b7:b1:25:0a:01:45:80: a5:c1:2e:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAFaihq1mWGx/OUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk ZTZlY2I4ZDctNmFiNi00NThjLWI3ODUtYzViMzQ0NjMxMTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz89PSAyIWa9KM7fghC0ATybogYaipFSVFSR YLKmHpd85Xgj+RogsG7SsKn3BHo3NnM/BhzQJLYUgoUcIF+aUIGk53fI1y45kI6a V20eCqXjOF7yLJ024R0PWt8i54hV9rsuW+eUqOz+cTfcsOFeir47D9wRVbRf86Ns sIC3fakhAoDcoCeNt8bJQoYyqshQf4B9PoYO21vW0QV0Uh9gXBdmaOYqYnCOjG1V N351jiAs6LdlVzPsgisw7hR61ZcOtCxqlVmg2+s+4++CW+apzfPj3R9q7Kl6TUiA Uo+V8zLgBbiJVwMXjjnr908zafrdGfB898kRrVYYBHCE9aeqswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmzGi3LESsB3LRF+fcvAnOHQvdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWJlMjlkMDYtOTRjYi0z M2JmLWI4ZmQtMjBmNTBiMDcxNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQS+A4WZgZAuSV71++LjPzyM8J1WbmCODgWUiuH/O9Y8796Ir5EHf6i lZJaJ6XeMQ07xhWJW6708WT04ed1KOYH4wMSTOpAd9iD1jrrNKdbH/RorihHLqBh O6B7fRmqJUqPSuLmBACC75HM/9X/mWJTqVOvXYW+FbmdkNt/t3LgPSKLSuet7+kK rQd4jwM2nZrcP0DOEZs7zNx3Z6ZeaiwaJ08jHUKivwSNxGbdGLjNVf3JChkiZPtw xaEftCDIv0Q5vDuVQt0AeRNR+RrYoK/yJa9t16akOsI96DaA7ZVyFOhFUUBsPunE srXiR3/L4XrJi9Lxt7ElCgFFgKXBLsY= -----END CERTIFICATE-----Generated at Wed May 13 11:05:05 2026 by rpki-client