$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa File: 8dea440f-3599-3031-bd25-4f82936b64f4.roa (raw, json) Hash identifier: +C9z8SxB1DHYz4oD7bXN+7NZ6mzWx5sVO5Im3tgdRsw= Subject key identifier: 4A:7F:8A:88:D4:A6:55:E2:91:4C:90:AC:83:DE:85:E0:07:89:64:A3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D95F00D67511E95A7F56C44C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 8069 IP address blocks: 20.157.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:0d:67:51:1e:95:a7:f5:6c:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=833b394a-b98f-4151-b8d8-3c21e6d45f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d1:78:1a:33:cc:c8:bb:9c:0b:7b:aa:e7:ff: 78:cf:2f:28:96:e6:42:73:46:66:cb:5c:b0:a5:66: db:f4:e3:cc:e5:9c:c5:35:76:8c:39:92:c9:c2:72: c8:6b:44:84:f7:03:8a:e0:b7:dc:a4:b4:ab:d9:75: 3e:70:71:7b:86:b4:3c:94:e9:ff:e4:9b:e9:cb:8e: 4a:14:c7:23:c0:11:8f:62:30:cc:25:72:0f:71:2a: 60:1e:5e:ff:f3:97:e5:00:9f:60:28:df:49:16:be: 53:c1:8a:66:bb:5b:b6:df:41:5a:90:7f:6f:53:01: 22:e2:cf:45:2d:96:51:86:f1:ba:6d:aa:2f:fb:26: 9d:ed:ee:b8:6e:02:ae:0f:dd:34:de:46:f0:6b:aa: ac:66:f6:db:f8:f4:a2:e1:45:03:02:46:e2:61:8d: a7:67:20:f4:74:5b:9f:2c:0b:be:38:74:74:27:e4: 58:0c:2b:96:b0:4c:dd:ff:c5:22:12:d0:24:f6:0a: 20:ee:41:30:c7:4a:d8:83:bb:f7:6b:47:3f:f2:c1: f2:4c:0c:d0:53:6c:9d:bf:d7:f7:c6:4c:bb:05:6b: 19:0b:fd:37:c5:25:a7:b8:6c:78:d4:3e:97:7b:2b: 61:98:ff:34:b7:ab:6d:d1:a4:0b:6e:e5:cf:80:21: 04:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7F:8A:88:D4:A6:55:E2:91:4C:90:AC:83:DE:85:E0:07:89:64:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a5:66:da:79:af:13:3e:90:43:12:2b:56:95:33:66:52:15: ba:33:a2:69:c1:d1:96:cf:d3:b0:06:a7:67:3d:2b:6a:cb:2f: d7:14:ef:07:a7:c2:5d:aa:7e:d8:06:62:14:44:52:4d:39:94: fe:db:1f:ad:77:3a:70:cc:38:92:76:02:ed:b1:93:1b:71:5f: 9d:f3:4d:09:4e:45:a2:70:11:f9:d5:c8:1f:d8:c2:c0:eb:d3: 91:fd:25:1f:3e:f6:44:81:4d:2b:39:26:46:3e:6d:4f:73:1a: 4e:84:b5:57:2e:56:78:5f:6a:35:db:e3:7d:57:22:95:7a:23: 16:cb:c3:97:f8:32:fb:16:8c:84:ec:48:1a:e5:01:ae:df:74: a4:29:2e:14:f8:94:20:79:c9:7e:18:57:c0:90:54:99:a7:f8: eb:bd:3f:00:c9:46:76:07:0a:bf:34:2a:be:ac:41:e4:71:6c: ae:22:ec:64:4a:b0:cf:65:1a:07:c1:d3:6c:38:f0:10:e1:75: e2:61:3c:e2:7c:ad:1d:03:f7:00:8d:2c:80:4d:d8:bf:d2:15: 06:b5:71:9f:fd:7e:ec:31:61:0a:9e:f4:d0:ea:30:75:7c:7b: 96:37:f3:d6:83:71:76:c9:ab:93:8f:a2:5b:cc:f4:71:15:01: 44:32:37:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8A1nUR6Vp/VsRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk ODMzYjM5NGEtYjk4Zi00MTUxLWI4ZDgtM2MyMWU2ZDQ1ZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldF4GjPMyLucC3uq5/94zy8oluZCc0Zmy1yw pWbb9OPM5ZzFNXaMOZLJwnLIa0SE9wOK4LfcpLSr2XU+cHF7hrQ8lOn/5Jvpy45K FMcjwBGPYjDMJXIPcSpgHl7/85flAJ9gKN9JFr5TwYpmu1u230FakH9vUwEi4s9F LZZRhvG6baov+yad7e64bgKuD9003kbwa6qsZvbb+PSi4UUDAkbiYY2nZyD0dFuf LAu+OHR0J+RYDCuWsEzd/8UiEtAk9gog7kEwx0rYg7v3a0c/8sHyTAzQU2ydv9f3 xky7BWsZC/03xSWnuGx41D6XeythmP80t6tt0aQLbuXPgCEEyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp/iojUplXikUyQrIPeheAHiWSjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGRlYTQ0MGYtMzU5OS0z MDMxLWJkMjUtNGY4MjkzNmI2NGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKlZtp5rxM+kEMSK1aVM2ZSFbozomnB0ZbP07AGp2c9K2rLL9cU7wen wl2qftgGYhREUk05lP7bH613OnDMOJJ2Au2xkxtxX53zTQlORaJwEfnVyB/YwsDr 05H9JR8+9kSBTSs5JkY+bU9zGk6EtVcuVnhfajXb431XIpV6IxbLw5f4MvsWjITs SBrlAa7fdKQpLhT4lCB5yX4YV8CQVJmn+Ou9PwDJRnYHCr80Kr6sQeRxbK4i7GRK sM9lGgfB02w48BDhdeJhPOJ8rR0D9wCNLIBN2L/SFQa1cZ/9fuwxYQqe9NDqMHV8 e5Y389aDcXbJq5OPolvM9HEVAUQyNyM= -----END CERTIFICATE-----Generated at Wed May 13 14:39:02 2026 by rpki-client