$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa File: 3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa (raw, json) Hash identifier: izSj7HNjkyg2HuZlXTBs0UZt4X9KY8k7SVMCBe85gcc= Subject key identifier: 52:28:4B:3C:1C:C0:04:6C:D1:BB:55:16:5A:EC:6A:BA:E7:CE:DF:58 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DCAFB0CC7291B2297D5304080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.157.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:0c:c7:29:1b:22:97:d5:30:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=348cd361-828b-45a2-8789-f32868ce3c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:38:a3:11:05:ab:2e:28:eb:3c:52:f9:5c:3b: 88:43:b2:41:ff:0e:5a:24:bb:26:60:f8:01:16:e3: 48:d9:5f:cc:a2:f1:7b:dc:8b:81:dd:ab:79:7a:df: 36:d3:a1:bb:e8:65:2c:54:b8:ad:55:19:3e:e1:a4: 6b:ab:e5:7b:47:9b:c7:cb:b9:49:ff:76:b4:f6:6a: 3e:01:cd:9c:6e:25:6e:9e:72:24:11:cd:29:20:ff: e4:6f:47:1a:25:fd:87:a6:66:e0:e6:bc:65:f1:43: b0:d5:23:d3:ec:99:1a:17:86:b5:2a:51:14:63:4c: 52:28:87:71:95:82:87:a0:22:ce:f8:00:73:06:1b: 88:dc:9d:ca:97:3b:cf:45:95:98:46:15:ab:c2:ef: ef:d9:6d:bf:24:2c:8e:3c:ec:f9:8f:31:af:1a:5c: f0:c1:2c:57:43:73:e4:0d:de:06:73:c2:7c:33:7a: 63:69:62:2c:52:3c:b8:90:aa:7d:9d:30:1c:bd:3a: d7:02:b1:42:66:42:38:da:73:82:16:72:af:8f:12: 1e:d0:0d:28:13:66:65:ec:b4:20:80:80:1f:cd:43: 73:a5:3b:8e:a4:1e:47:e9:e4:24:ef:1b:9b:26:b1: 81:bd:3e:77:04:1c:b0:33:d4:be:0c:3b:1d:3c:93: 21:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:28:4B:3C:1C:C0:04:6C:D1:BB:55:16:5A:EC:6A:BA:E7:CE:DF:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:6f:61:8f:2d:0f:85:8a:96:13:fb:50:47:47:f0:78:6f:52: d2:91:41:14:ef:84:62:37:b9:86:64:76:d0:13:2b:13:13:c3: 3e:40:40:3e:f9:35:3b:f8:de:22:b8:2c:a4:5a:72:8c:ea:0f: c5:fe:da:5f:e6:ad:90:8b:8d:97:79:7a:3a:76:32:a2:17:81: 08:af:b4:66:0e:ca:46:56:ba:c1:10:c6:19:f2:98:1a:09:be: 5d:8d:1d:01:45:d4:21:92:70:9a:d5:94:cc:5e:bf:27:8b:b0: ae:90:84:6f:38:cc:4d:8c:7c:09:d3:95:ea:eb:60:38:d0:d3: 88:e3:ec:71:5f:d2:b9:d1:21:0b:9a:97:3e:c7:e8:8b:57:b5: 94:2d:98:e6:08:e3:4c:cb:7f:ca:1a:f3:b5:8a:ad:42:6a:31: 69:ac:d4:7c:46:d3:b1:35:4d:60:47:ee:be:67:3c:16:95:24: 96:c4:e0:98:bb:8c:93:a9:b3:85:6d:5c:6a:ce:cf:d1:01:82: 29:65:d0:ff:fd:c8:d5:4c:01:17:96:33:1d:73:20:4d:d5:bc: 8a:c3:23:0b:88:76:d9:5a:1f:d7:6b:ea:b0:48:88:b9:35:ef: f2:2e:1f:f7:8f:e1:3b:1b:29:ac:73:0c:c1:97:1b:db:86:f8: e2:9a:1f:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+wzHKRsil9UwQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk MzQ4Y2QzNjEtODI4Yi00NWEyLTg3ODktZjMyODY4Y2UzYzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojijEQWrLijrPFL5XDuIQ7JB/w5aJLsmYPgB FuNI2V/MovF73IuB3at5et8206G76GUsVLitVRk+4aRrq+V7R5vHy7lJ/3a09mo+ Ac2cbiVunnIkEc0pIP/kb0caJf2Hpmbg5rxl8UOw1SPT7JkaF4a1KlEUY0xSKIdx lYKHoCLO+ABzBhuI3J3KlzvPRZWYRhWrwu/v2W2/JCyOPOz5jzGvGlzwwSxXQ3Pk Dd4Gc8J8M3pjaWIsUjy4kKp9nTAcvTrXArFCZkI42nOCFnKvjxIe0A0oE2Zl7LQg gIAfzUNzpTuOpB5H6eQk7xubJrGBvT53BBywM9S+DDsdPJMhWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIoSzwcwARs0btVFlrsarrnzt9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2I1YjNmZGMtNjEwZC0z NjM0LWFhMWEtNmY1NzUyNjI0YmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJvYY8tD4WKlhP7UEdH8HhvUtKRQRTvhGI3uYZkdtATKxMTwz5AQD75 NTv43iK4LKRacozqD8X+2l/mrZCLjZd5ejp2MqIXgQivtGYOykZWusEQxhnymBoJ vl2NHQFF1CGScJrVlMxevyeLsK6QhG84zE2MfAnTlerrYDjQ04jj7HFf0rnRIQua lz7H6ItXtZQtmOYI40zLf8oa87WKrUJqMWms1HxG07E1TWBH7r5nPBaVJJbE4Ji7 jJOps4VtXGrOz9EBgill0P/9yNVMAReWMx1zIE3VvIrDIwuIdtlaH9dr6rBIiLk1 7/IuH/eP4TsbKaxzDMGXG9uG+OKaH+A= -----END CERTIFICATE-----Generated at Wed May 13 14:00:48 2026 by rpki-client