$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa File: 7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa (raw, json) Hash identifier: wJbW3xFTxiuhAkYmVrpzVmr8Jt0GDEFv+qjViskQeT4= Subject key identifier: CE:FD:25:A9:79:83:B7:B8:9D:92:CC:04:7F:0F:4B:55:F0:48:28:65 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F1897AF289CBA3A5C75137AD0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.157.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:af:28:9c:ba:3a:5c:75:13:7a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=cf78102a-034e-4e88-8798-c94708809bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:03:4c:03:00:95:6a:41:9d:7b:34:c7:6f:ea: c2:40:2f:40:43:29:88:2e:1b:5e:e4:b7:63:5d:69: f0:aa:db:7b:8a:ec:df:52:04:86:9f:3f:b2:9a:23: 4c:74:2e:c2:67:39:c7:90:9e:cc:3f:15:0a:27:70: f9:2c:14:a7:20:b1:34:67:fe:ce:55:30:43:08:c6: 39:24:b3:14:1f:e3:42:62:43:27:31:ec:91:e6:55: c4:a3:a5:0d:86:b5:bd:5d:f0:9f:a3:ad:d7:3c:b3: e9:77:d2:df:97:c3:a3:46:0f:be:c1:b5:94:a3:d0: 72:fd:31:ef:29:db:38:fb:cf:36:32:42:bd:e3:53: d0:a7:9b:90:e6:e2:a0:be:df:8a:08:6f:2a:ae:f0: f5:d2:f0:f0:99:12:91:12:6f:6f:10:68:8d:81:e5: 2e:57:fe:a0:25:28:2f:ab:83:73:13:c1:73:32:4e: 89:4b:36:62:38:ba:c3:11:58:67:e7:28:15:e8:bd: 18:99:80:fb:9f:a8:58:a1:51:ea:00:90:89:b5:7a: 5d:f0:a7:f4:9e:80:42:51:7f:6e:b9:69:af:88:62: 3b:60:03:6f:c2:42:cb:b1:6f:0f:99:0f:30:a5:f5: ad:4c:7d:5b:8a:c8:19:f6:94:53:ac:f6:4a:4b:50: 22:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FD:25:A9:79:83:B7:B8:9D:92:CC:04:7F:0F:4B:55:F0:48:28:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f9:ca:f8:79:30:16:0b:e4:13:be:a6:41:30:1d:54:76:cd: 5e:0e:ff:83:a4:58:8b:ee:bd:8a:3d:73:fe:46:27:a1:10:f8: 98:7c:db:98:d2:f3:df:12:cf:02:03:48:95:ce:55:d4:06:0e: 33:7a:ff:38:d0:3d:93:bc:8b:03:a9:a4:92:b4:e9:97:0d:14: 4c:f9:71:4e:6d:d1:c2:7a:de:e6:de:70:ba:0a:22:43:45:82: 54:e1:56:45:7c:8a:74:63:2e:b9:26:05:77:2a:d8:40:81:f3: b1:af:ef:83:59:c6:48:a1:23:b4:33:4b:b6:c1:db:74:d1:91: 2c:f8:3e:43:c4:1d:61:f9:e0:49:ed:4c:72:f6:d7:e2:5b:8b: ea:45:1d:c1:a8:10:76:f3:fa:72:88:a0:43:e9:9c:e7:80:53: f1:1f:7a:97:b9:21:65:50:6f:a2:ba:42:28:8d:e7:82:7d:16: 08:53:e2:53:9c:34:ab:e7:be:dc:8c:d5:59:be:91:71:38:01: 8f:4f:a5:36:fc:42:f5:4c:08:bd:3c:a1:ea:e5:68:12:fc:a2: 6a:4b:f8:54:dc:c0:fd:ba:62:99:a4:dd:fc:41:c4:c6:23:6a: 3c:63:d1:3d:9b:75:b4:26:b6:3b:55:9c:cb:f7:e4:3f:ff:00: 1f:93:23:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl68onLo6XHUTetAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk Y2Y3ODEwMmEtMDM0ZS00ZTg4LTg3OTgtYzk0NzA4ODA5YmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowNMAwCVakGdezTHb+rCQC9AQymILhte5Ldj XWnwqtt7iuzfUgSGnz+ymiNMdC7CZznHkJ7MPxUKJ3D5LBSnILE0Z/7OVTBDCMY5 JLMUH+NCYkMnMeyR5lXEo6UNhrW9XfCfo63XPLPpd9Lfl8OjRg++wbWUo9By/THv Kds4+882MkK941PQp5uQ5uKgvt+KCG8qrvD10vDwmRKREm9vEGiNgeUuV/6gJSgv q4NzE8FzMk6JSzZiOLrDEVhn5ygV6L0YmYD7n6hYoVHqAJCJtXpd8Kf0noBCUX9u uWmviGI7YANvwkLLsW8PmQ8wpfWtTH1bisgZ9pRTrPZKS1Ai2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM79Jal5g7e4nZLMBH8PS1XwSChlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2YzYmIxMmItNzY5MS0z MjQ0LTg1YjAtMTJkNWFiNmRiOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ33MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn5yvh5MBYL5BO+pkEwHVR2zV4O/4OkWIvuvYo9c/5GJ6EQ+Jh825jS 898SzwIDSJXOVdQGDjN6/zjQPZO8iwOppJK06ZcNFEz5cU5t0cJ63ubecLoKIkNF glThVkV8inRjLrkmBXcq2ECB87Gv74NZxkihI7QzS7bB23TRkSz4PkPEHWH54Ent THL21+Jbi+pFHcGoEHbz+nKIoEPpnOeAU/Efepe5IWVQb6K6QiiN54J9FghT4lOc NKvnvtyM1Vm+kXE4AY9PpTb8QvVMCL08oerlaBL8ompL+FTcwP26Ypmk3fxBxMYj ajxj0T2bdbQmtjtVnMv35D//AB+TIzw= -----END CERTIFICATE-----Generated at Mon Sep 28 21:15:55 2026 by rpki-client