$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa File: abad3fc4-19f2-378b-b7e4-8ec84d750389.roa (raw, json) Hash identifier: 8IApDgr2DH5e/jacp6gKLfEEl52tw2oeMJZtj1O7bvI= Subject key identifier: 46:37:6F:EC:C9:2C:4D:3E:41:33:B4:68:9D:7F:9B:79:97:68:2D:B8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B7F525D18728A2D8D900DC500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.33.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:5d:18:72:8a:2d:8d:90:0d:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=0191f26f-b674-41f3-8e23-abdb784c2f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:09:d7:1a:4a:36:f3:98:76:62:da:c9:ae:b2: 73:4b:40:a3:0a:b3:20:74:0a:98:21:59:2f:a2:13: c7:a7:39:6f:b3:ce:f7:98:18:86:ce:a8:10:c8:34: b6:49:4d:34:ed:5c:1a:c5:3e:9d:8b:5b:2f:4a:a4: e5:13:22:5d:ca:6a:d1:a9:f4:b0:84:f8:dc:99:ae: 38:e7:56:89:9e:de:da:b6:75:f6:b4:77:91:82:1c: 8b:9a:2b:98:cb:ff:77:92:d6:23:e1:80:12:af:46: 63:e2:d6:ea:dc:c6:d3:91:d7:3f:ce:2a:a5:4a:f9: 7f:c4:b8:e5:67:1c:ab:fe:a4:de:55:65:28:7a:19: 90:74:e1:af:98:f2:07:44:69:cb:c4:8f:e6:53:4f: fc:fb:7a:8e:97:84:aa:4e:ba:7e:5d:ea:9e:e9:18: 64:33:dd:a8:65:75:04:00:ff:61:13:10:a1:11:4e: a1:21:0e:33:72:11:b8:45:21:43:4e:d7:81:fd:48: 85:da:91:a9:02:6f:35:0a:e2:35:b3:3b:3f:18:92: a9:2c:72:d7:68:aa:5c:48:bf:d3:25:e0:01:21:25: 0b:74:10:eb:c8:eb:53:d8:71:0d:7b:21:49:92:8f: b0:47:11:f7:de:a8:a1:5a:57:51:67:51:da:3d:f4: c2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:37:6F:EC:C9:2C:4D:3E:41:33:B4:68:9D:7F:9B:79:97:68:2D:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ff:38:64:3b:ef:39:2a:5f:ff:98:f9:d5:25:e8:74:ed:6b: f2:b5:5e:93:6b:03:5f:eb:5e:32:90:52:4a:15:7c:71:3f:b0: 15:32:52:fb:65:dd:66:73:9f:bd:d0:f6:c3:26:eb:fb:27:39: d4:dd:6e:e7:36:75:83:c3:64:57:6c:dd:8e:4a:b2:f5:8f:ba: 21:91:88:8b:02:cd:c1:83:c0:c2:0e:76:c6:c5:80:42:5b:7c: 36:f7:b8:5c:ba:b5:6d:f0:67:0f:c4:ee:f8:29:4b:25:31:d0: bf:5b:bc:7b:95:a7:84:f2:81:ae:e3:14:40:da:9f:db:6a:b4: d1:2e:a0:18:a0:88:db:14:38:18:95:24:86:b4:ba:3a:6e:52: a6:17:b7:fe:9f:9b:a4:d6:96:c9:21:e4:d0:de:02:dd:77:58: 2b:9f:4c:ca:83:96:bb:cb:09:a5:5d:4c:cf:27:24:7c:8b:64: bc:0e:48:dc:c0:ea:9a:83:60:20:48:d7:87:04:6e:60:e7:b1: 43:21:af:8c:46:05:7a:f5:d9:c4:e7:ee:6b:7a:e2:ba:bc:5c: c8:af:7b:f4:4a:cb:93:a4:93:e2:13:43:8e:cb:a9:44:a0:c6: 11:72:4c:4e:bd:24:e2:37:e1:bd:ff:9b:da:a8:9c:8b:be:c2: 87:82:28:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ul0YcootjZANxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MDE5MWYyNmYtYjY3NC00MWYzLThlMjMtYWJkYjc4NGMyZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQnXGko285h2YtrJrrJzS0CjCrMgdAqYIVkv ohPHpzlvs873mBiGzqgQyDS2SU007VwaxT6di1svSqTlEyJdymrRqfSwhPjcma44 51aJnt7atnX2tHeRghyLmiuYy/93ktYj4YASr0Zj4tbq3MbTkdc/ziqlSvl/xLjl Zxyr/qTeVWUoehmQdOGvmPIHRGnLxI/mU0/8+3qOl4SqTrp+Xeqe6RhkM92oZXUE AP9hExChEU6hIQ4zchG4RSFDTteB/UiF2pGpAm81CuI1szs/GJKpLHLXaKpcSL/T JeABISULdBDryOtT2HENeyFJko+wRxH33qihWldRZ1HaPfTCIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEY3b+zJLE0+QTO0aJ1/m3mXaC24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWJhZDNmYzQtMTlmMi0z NzhiLWI3ZTQtOGVjODRkNzUwMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH/OGQ77zkqX/+Y+dUl6HTta/K1XpNrA1/rXjKQUkoVfHE/sBUyUvtl 3WZzn73Q9sMm6/snOdTdbuc2dYPDZFds3Y5KsvWPuiGRiIsCzcGDwMIOdsbFgEJb fDb3uFy6tW3wZw/E7vgpSyUx0L9bvHuVp4Tyga7jFEDan9tqtNEuoBigiNsUOBiV JIa0ujpuUqYXt/6fm6TWlskh5NDeAt13WCufTMqDlrvLCaVdTM8nJHyLZLwOSNzA 6pqDYCBI14cEbmDnsUMhr4xGBXr12cTn7mt64rq8XMive/RKy5Okk+ITQ47LqUSg xhFyTE69JOI34b3/m9qonIu+woeCKHc= -----END CERTIFICATE-----Generated at Mon Oct 20 18:36:21 2025 by rpki-client