$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa File: abad3fc4-19f2-378b-b7e4-8ec84d750389.roa (raw, json) Hash identifier: gezBwh1M8uYb/zkdkZ8hypBeWdC8tpumKWka14KTC7I= Subject key identifier: 05:E4:B7:CA:9D:D5:D9:59:AB:0E:4B:33:FD:D4:59:4E:03:9C:01:C0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E1E44922AA8292E35350CB480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.33.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:92:2a:a8:29:2e:35:35:0c:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=76ad071f-bc4a-432e-9d90-4b9b5dbefe1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7b:3e:4c:ae:a0:bf:c8:95:42:5d:cb:11:22: 4c:91:b8:d0:47:49:ca:bf:99:1d:8e:95:b6:a4:7e: f1:45:3c:1c:db:6c:cd:d6:62:77:d5:54:82:44:bf: ed:42:08:e1:24:dc:05:5d:4c:39:8c:82:90:d5:19: 85:de:65:d2:61:94:84:37:9d:e3:ad:c3:b6:2a:54: 7c:29:85:24:f5:5e:97:83:de:a9:19:33:6e:cc:6a: 9d:30:3e:5a:69:b0:18:88:8c:69:0a:a6:03:17:8f: a7:70:07:38:87:1e:99:2f:78:50:46:30:15:c5:33: c4:02:e3:21:c3:65:12:6e:d9:99:58:2f:e2:7a:d7: ea:d0:fa:3e:ad:cb:e1:35:9b:05:a9:28:77:e5:0b: 69:3d:bc:75:3d:bc:e1:24:c0:92:72:b5:09:3b:a3: 6e:7d:d9:37:de:31:ea:ce:5d:d0:77:1c:d7:9d:4b: 04:a0:e9:3c:8f:bb:01:c2:f3:4b:69:47:fc:91:e7: 44:55:bc:a3:a0:4d:21:5c:93:e2:98:77:88:b4:24: 12:69:eb:ba:1d:4c:bb:3b:cd:7b:de:5c:23:6c:df: 9b:9c:58:3b:4f:c8:b5:6b:0f:5d:c4:16:64:2c:3a: db:39:b0:1c:8e:d3:97:05:c3:4b:4e:33:4b:cd:61: 5d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E4:B7:CA:9D:D5:D9:59:AB:0E:4B:33:FD:D4:59:4E:03:9C:01:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:5c:c7:52:86:69:87:e1:0f:85:8f:d8:74:1f:07:d7:6a:f8: ce:bd:fe:b5:00:7b:ba:52:3f:b8:bb:d6:95:42:9a:04:b2:3d: 13:20:6e:33:b4:2c:1e:8e:76:87:97:1b:58:67:88:a5:f6:63: a2:44:d9:16:9b:8f:ac:87:3d:ed:99:d8:ce:92:99:26:d5:ec: 86:c1:4b:35:41:79:cd:3f:d5:fb:93:ef:e4:59:5e:8d:b8:17: 4e:48:ee:ae:a1:58:e7:be:37:df:07:c7:74:bd:24:2c:45:e7: 1b:c7:64:d7:aa:6f:5d:d3:90:25:7d:2e:3d:f4:36:19:b7:23: e0:59:71:fb:49:7a:ad:b0:d5:a4:b8:81:76:d7:38:ac:55:57: 93:28:c1:05:74:33:02:3a:9c:21:c1:22:3f:7d:f4:00:d8:6b: 34:6d:94:da:ce:62:46:9a:0a:16:dc:1a:27:ab:a1:78:21:61: ab:56:cf:10:4e:e6:f5:eb:90:9d:d4:5f:64:24:d6:e6:25:aa: 72:e7:56:35:d5:82:ec:12:2f:43:d9:2a:d0:d0:b7:7e:6e:c6: 5b:e9:e1:aa:e8:4e:c8:67:4a:59:4e:a1:e5:c2:a3:e5:2b:51: 12:39:c7:fe:13:d7:ac:69:bf:b5:18:48:07:e4:62:d9:a3:21: 97:c1:2f:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRJIqqCkuNTUMtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk NzZhZDA3MWYtYmM0YS00MzJlLTlkOTAtNGI5YjVkYmVmZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqns+TK6gv8iVQl3LESJMkbjQR0nKv5kdjpW2 pH7xRTwc22zN1mJ31VSCRL/tQgjhJNwFXUw5jIKQ1RmF3mXSYZSEN53jrcO2KlR8 KYUk9V6Xg96pGTNuzGqdMD5aabAYiIxpCqYDF4+ncAc4hx6ZL3hQRjAVxTPEAuMh w2USbtmZWC/ietfq0Po+rcvhNZsFqSh35QtpPbx1PbzhJMCScrUJO6Nufdk33jHq zl3QdxzXnUsEoOk8j7sBwvNLaUf8kedEVbyjoE0hXJPimHeItCQSaeu6HUy7O817 3lwjbN+bnFg7T8i1aw9dxBZkLDrbObAcjtOXBcNLTjNLzWFdvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXkt8qd1dlZqw5LM/3UWU4DnAHAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWJhZDNmYzQtMTlmMi0z NzhiLWI3ZTQtOGVjODRkNzUwMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9cx1KGaYfhD4WP2HQfB9dq+M69/rUAe7pSP7i71pVCmgSyPRMgbjO0 LB6OdoeXG1hniKX2Y6JE2Rabj6yHPe2Z2M6SmSbV7IbBSzVBec0/1fuT7+RZXo24 F05I7q6hWOe+N98Hx3S9JCxF5xvHZNeqb13TkCV9Lj30Nhm3I+BZcftJeq2w1aS4 gXbXOKxVV5MowQV0MwI6nCHBIj999ADYazRtlNrOYkaaChbcGieroXghYatWzxBO 5vXrkJ3UX2Qk1uYlqnLnVjXVguwSL0PZKtDQt35uxlvp4aroTshnSllOoeXCo+Ur URI5x/4T16xpv7UYSAfkYtmjIZfBL50= -----END CERTIFICATE-----Generated at Sun Jun 14 03:07:00 2026 by rpki-client