$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6899acbd-6cc1-305a-bac0-08fe09d5e3f1.roa File: 6899acbd-6cc1-305a-bac0-08fe09d5e3f1.roa (raw, json) Hash identifier: 3vvISf57Q3t70fqvADOqwWpz8kLmn8/mVIUdDxCVFxI= Subject key identifier: 21:77:D0:02:F7:DB:FE:75:2B:31:30:C3:3B:4B:A4:51:6D:FF:D9:A4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F49775AF80938892B0D9EB140 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6899acbd-6cc1-305a-bac0-08fe09d5e3f1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.157.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:5a:f8:09:38:89:2b:0d:9e:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ae0254c4-d273-485f-8bfe-2d13b43974f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f5:b9:58:1f:a9:44:e1:b4:08:b1:0c:d4:96: f4:a2:5b:27:82:f9:3d:d0:3e:1b:bf:54:e0:bd:5f: b7:92:51:ee:94:ae:2f:1a:c2:54:06:29:c8:9e:45: 7c:94:79:36:80:c9:a1:d3:13:27:f2:86:6b:8f:0b: ca:d5:73:22:6c:4e:45:58:11:0d:aa:9b:42:ea:8f: 9a:01:98:08:65:d1:1b:f8:d0:f8:5e:88:5d:96:8f: 7b:ab:3f:d6:03:ec:bc:66:39:ef:a9:fc:4f:a1:e8: 00:a7:a9:1d:5f:a2:06:ee:b8:2b:d7:3c:d1:2f:d6: fe:68:fb:27:df:3b:7d:3a:42:c1:16:e4:36:05:6a: 70:28:fd:cc:d4:da:8b:56:dc:88:c3:fb:18:66:36: 07:5f:31:0d:35:29:a1:f1:44:6a:c8:d0:1e:19:3c: 6b:5a:02:cb:c0:e2:0a:b4:40:cf:7d:b5:fa:c3:55: 5c:99:a5:86:d8:b4:30:63:39:63:de:db:84:73:9c: 72:e9:df:e1:2e:6c:71:e7:32:42:a0:8c:9a:56:85: 14:3f:ce:56:12:77:a0:14:6d:b1:d6:7c:45:97:b9: e7:db:bd:37:36:b7:64:85:f5:23:ce:10:46:f2:00: 85:e1:25:58:a5:34:c0:9b:8d:28:a7:7a:fd:3a:b1: 1c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:77:D0:02:F7:DB:FE:75:2B:31:30:C3:3B:4B:A4:51:6D:FF:D9:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6899acbd-6cc1-305a-bac0-08fe09d5e3f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b4:81:07:24:66:25:d0:d4:78:73:fe:f0:eb:9e:df:b5:cf: d7:ee:75:ed:00:17:60:12:23:d9:31:d2:41:b5:64:e1:67:e0: ba:a4:81:74:00:e1:d4:3f:51:7a:29:0a:5c:3f:3c:fd:9c:27: 72:b4:86:4d:39:e5:c5:15:d6:eb:67:b0:32:52:7e:e5:12:80: e9:fa:04:fb:32:39:c8:6e:83:88:42:ef:67:6b:f0:e8:be:d5: 16:c1:80:e2:34:3b:b5:05:d2:1e:b9:c4:09:22:b0:eb:2e:24: ea:fd:72:2d:d9:77:88:fc:eb:35:9d:35:9f:2b:a2:1d:16:5a: f1:97:d6:a9:33:46:91:d3:7c:a9:21:da:c6:1b:a9:0a:82:2f: 98:bd:f6:92:73:5c:77:2c:11:d9:bb:bf:11:3f:f0:8f:33:cc: 65:ee:a9:20:2c:7e:f6:0b:76:15:2a:43:c1:ae:0e:7c:cb:68: 0f:c4:04:5e:22:91:ac:2b:a3:fe:ea:c1:a7:3c:e4:61:52:9c: 88:51:bb:a5:8a:67:18:48:6f:2d:3d:58:bb:72:3b:61:54:66: 7d:ba:d0:a6:ae:09:01:2d:d8:46:5f:8c:6f:b4:ba:75:00:93: 09:de:54:5c:38:fd:df:80:b2:fe:f0:8a:51:05:f5:ff:0f:2c: 0e:34:f5:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1r4CTiJKw2esUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWUwMjU0YzQtZDI3My00ODVmLThiZmUtMmQxM2I0Mzk3NGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPW5WB+pROG0CLEM1Jb0olsngvk90D4bv1Tg vV+3klHulK4vGsJUBinInkV8lHk2gMmh0xMn8oZrjwvK1XMibE5FWBENqptC6o+a AZgIZdEb+ND4Xohdlo97qz/WA+y8ZjnvqfxPoegAp6kdX6IG7rgr1zzRL9b+aPsn 3zt9OkLBFuQ2BWpwKP3M1NqLVtyIw/sYZjYHXzENNSmh8URqyNAeGTxrWgLLwOIK tEDPfbX6w1VcmaWG2LQwYzlj3tuEc5xy6d/hLmxx5zJCoIyaVoUUP85WEnegFG2x 1nxFl7nn2703NrdkhfUjzhBG8gCF4SVYpTTAm40op3r9OrEcFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCF30AL32/51KzEwwztLpFFt/9mkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjg5OWFjYmQtNmNjMS0z MDVhLWJhYzAtMDhmZTA5ZDVlM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIG0gQckZiXQ1Hhz/vDrnt+1z9fude0AF2ASI9kx0kG1ZOFn4LqkgXQA 4dQ/UXopClw/PP2cJ3K0hk055cUV1utnsDJSfuUSgOn6BPsyOchug4hC72dr8Oi+ 1RbBgOI0O7UF0h65xAkisOsuJOr9ci3Zd4j86zWdNZ8roh0WWvGX1qkzRpHTfKkh 2sYbqQqCL5i99pJzXHcsEdm7vxE/8I8zzGXuqSAsfvYLdhUqQ8GuDnzLaA/EBF4i kawro/7qwac85GFSnIhRu6WKZxhIby09WLtyO2FUZn260KauCQEt2EZfjG+0unUA kwneVFw4/d+Asv7wilEF9f8PLA409fs= -----END CERTIFICATE-----Generated at Mon Oct 5 15:51:04 2026 by rpki-client