$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa File: 3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa (raw, json) Hash identifier: Nvw9ySjck0gbRgYpnhQjQqUxMXc3SPP1J3fbmVKC8aY= Subject key identifier: A2:2E:24:98:CA:2B:90:39:8B:D3:B6:11:DF:7C:A8:F5:99:9A:2F:AC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F4977569C61BEF682F8F4CC78 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.157.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:56:9c:61:be:f6:82:f8:f4:cc:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f0d04553-7471-4143-a07e-2eafab46bb6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c5:92:25:53:d5:54:15:28:d9:af:50:c3:3a: b5:26:d5:df:e0:4a:65:64:95:07:d0:ed:69:c5:65: 43:cb:92:61:3e:fe:48:a1:57:ae:b0:60:72:f5:f3: c1:f3:e2:58:29:15:02:4b:ad:62:a7:02:63:98:f4: e2:9b:7e:d8:6f:b9:1e:07:e4:cc:50:08:b2:40:a4: 89:ee:fb:a3:64:39:de:9e:e9:06:20:5b:a6:fe:a9: 7f:70:55:ee:0d:07:cc:9d:76:2c:54:0a:fc:75:f6: 4e:45:d2:98:01:59:eb:b1:92:29:05:2c:ed:b8:01: 44:8a:9e:f7:14:08:54:67:a7:b0:75:c4:79:5d:bb: ed:6e:4c:75:a6:62:00:1b:44:37:4b:cf:e5:29:39: ef:8d:d0:ea:9f:b2:e5:cc:be:e1:14:24:6b:10:23: d1:4f:5f:8c:1c:e0:c0:08:18:63:fa:75:e8:c7:30: b9:6c:39:4c:04:06:de:33:49:b5:a6:7a:31:b8:0f: cd:63:ea:71:7c:e8:bf:3a:49:39:ee:12:9a:20:8d: fe:3f:85:e1:24:81:75:55:68:14:01:f3:75:8a:d6: 60:93:e8:c4:51:fe:44:0f:a1:4f:30:51:10:c8:be: f6:f0:94:6d:c2:6f:0d:0f:69:74:c9:98:66:85:e3: ca:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2E:24:98:CA:2B:90:39:8B:D3:B6:11:DF:7C:A8:F5:99:9A:2F:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:78:e2:d4:02:a7:d1:9d:82:7a:5e:84:99:19:03:ab:62:35: b2:45:95:4e:bb:95:ef:a4:16:49:a7:35:30:99:e5:3b:95:7d: 2d:d8:5f:01:ca:19:70:50:cc:82:ff:3d:2a:c0:86:72:20:21: 6c:c8:24:25:8e:3e:f8:af:0d:f2:77:01:29:34:95:61:d3:07: 9f:6e:f6:5b:bb:33:51:7c:a3:8e:ab:35:7e:43:a5:24:81:69: 25:59:a1:50:46:12:07:ff:9c:6c:fc:ef:60:0e:2d:18:2f:b2: cc:49:63:c4:d8:a8:77:09:13:82:ec:9d:10:b0:0a:e5:53:76: 59:bb:fa:d1:e4:2e:91:99:77:c7:7b:4e:b2:7e:a4:82:03:42: 28:3f:d8:22:1a:3c:5d:d3:e4:bd:6f:71:95:3e:c8:4c:8b:e2: 78:e3:3f:0d:c8:f5:e4:00:3f:03:c5:3c:24:ca:d3:46:f2:0c: e0:a4:7c:cb:28:e3:34:07:e4:90:93:c0:10:c6:5f:8a:1a:fb: 42:e4:ed:48:81:8f:9d:57:27:a0:42:46:b6:04:cc:e9:cc:46: b1:65:7b:f3:fe:48:29:a8:dc:d9:85:a6:51:54:a7:45:67:fe: 32:d5:b3:e1:81:a5:74:9b:fe:06:4e:b5:60:67:8f:6f:67:8c: ec:70:55:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1acYb72gvj0zHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjBkMDQ1NTMtNzQ3MS00MTQzLWEwN2UtMmVhZmFiNDZiYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsWSJVPVVBUo2a9Qwzq1JtXf4EplZJUH0O1p xWVDy5JhPv5IoVeusGBy9fPB8+JYKRUCS61ipwJjmPTim37Yb7keB+TMUAiyQKSJ 7vujZDnenukGIFum/ql/cFXuDQfMnXYsVAr8dfZORdKYAVnrsZIpBSztuAFEip73 FAhUZ6ewdcR5Xbvtbkx1pmIAG0Q3S8/lKTnvjdDqn7LlzL7hFCRrECPRT1+MHODA CBhj+nXoxzC5bDlMBAbeM0m1pnoxuA/NY+pxfOi/Okk57hKaII3+P4XhJIF1VWgU AfN1itZgk+jEUf5ED6FPMFEQyL728JRtwm8ND2l0yZhmhePKPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIuJJjKK5A5i9O2Ed98qPWZmi+sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2I1YjNmZGMtNjEwZC0z NjM0LWFhMWEtNmY1NzUyNjI0YmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIh44tQCp9GdgnpehJkZA6tiNbJFlU67le+kFkmnNTCZ5TuVfS3YXwHK GXBQzIL/PSrAhnIgIWzIJCWOPvivDfJ3ASk0lWHTB59u9lu7M1F8o46rNX5DpSSB aSVZoVBGEgf/nGz872AOLRgvssxJY8TYqHcJE4LsnRCwCuVTdlm7+tHkLpGZd8d7 TrJ+pIIDQig/2CIaPF3T5L1vcZU+yEyL4njjPw3I9eQAPwPFPCTK00byDOCkfMso 4zQH5JCTwBDGX4oa+0Lk7UiBj51XJ6BCRrYEzOnMRrFle/P+SCmo3NmFplFUp0Vn /jLVs+GBpXSb/gZOtWBnj29njOxwVTI= -----END CERTIFICATE-----Generated at Mon Sep 28 21:15:52 2026 by rpki-client