$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa File: bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa (raw, json) Hash identifier: DmKzuJN/BqF2Z+KvtrOXRgeoNMsKAyyC6e/M/zbYr84= Subject key identifier: 59:2F:0E:13:75:47:EF:6D:C4:1C:D3:F1:E1:56:F9:1E:38:38:51:D1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D95EFF9D05A06A52701C4CE80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 8069 IP address blocks: 20.157.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:f9:d0:5a:06:a5:27:01:c4:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=67a98c38-7fb9-4743-8f1e-1ac6d3875461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f9:5e:07:c8:69:6f:80:c9:3d:76:70:92:6f: eb:75:c0:46:58:3b:21:df:5c:a7:f2:cd:3c:13:b7: 23:21:ad:a6:d8:15:d8:20:b6:31:6f:df:26:99:35: cc:5f:dd:f8:5f:37:80:54:d0:34:08:67:07:ac:55: f8:98:27:00:16:c3:24:dc:4c:62:2d:9c:d5:3f:70: 3a:be:cb:66:5e:9d:ba:58:91:31:55:65:bb:ed:46: d3:92:25:d5:ba:c1:52:59:57:2f:d4:3b:d0:45:88: 3f:58:03:a9:c4:b3:0e:bf:01:49:47:9d:90:05:91: bb:37:4b:2a:44:54:3d:b1:57:03:89:66:61:7a:b1: ac:1c:b5:a7:79:9d:21:9e:df:e4:13:4a:fd:e3:a1: 23:63:b6:ab:63:7c:83:ef:43:fc:e1:72:1b:21:93: e7:e8:bd:0d:36:a2:93:f4:9b:c4:60:c2:6c:e7:9b: 85:29:68:a0:a9:94:bd:b6:31:6d:09:e9:73:2a:d2: 48:19:e2:b7:2c:39:b2:18:dc:5b:dd:ae:76:3e:12: 76:1f:78:c2:9e:81:2a:23:93:ac:44:e7:68:4f:36: 91:e0:5b:ce:0f:33:3f:ee:7f:2a:4c:71:95:59:db: 69:9a:54:30:09:58:c2:8c:34:b2:eb:42:fd:f3:bf: 66:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2F:0E:13:75:47:EF:6D:C4:1C:D3:F1:E1:56:F9:1E:38:38:51:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:1d:16:ca:56:d9:9d:8b:bf:79:0e:a4:08:a5:f7:76:bc:a7: 90:cf:f4:a2:bf:56:c5:bc:03:87:9c:d5:5c:61:df:c7:29:01: 8c:90:4f:6f:53:ed:d6:8a:57:84:ce:60:d8:7d:30:ee:58:65: df:d5:69:ff:44:ee:a5:a6:a1:3c:66:c8:f5:91:ee:b5:4a:e7: 00:6e:5d:94:b4:d7:30:47:b7:7c:73:e8:d1:0e:03:0c:5b:93: ef:86:ac:4f:d0:d7:80:9e:5b:4f:bd:f5:d7:ac:76:d0:72:e6: e8:68:d1:e6:64:3d:cf:1e:d3:6e:3f:8e:61:2f:41:da:22:49: 7b:1f:23:0a:43:8b:8c:89:cf:8b:2b:89:ae:fd:20:09:8b:6e: bf:52:9c:70:6e:cd:d4:3b:0a:14:ea:65:ab:69:51:d6:17:f2: e5:4c:9b:bc:0d:f4:fe:2c:c7:db:cb:4e:42:ae:d2:ea:2f:a3: 16:2a:1e:83:a0:59:bc:2c:6b:45:84:8f:39:f8:bc:8e:61:d7: 47:f3:bb:48:56:1d:69:da:07:77:3f:83:58:e4:67:59:3b:38: 8f:1c:ee:d7:ef:d2:80:8c:c8:ed:87:60:ca:89:0e:e1:7f:5c: 57:2b:14:ab:96:5a:51:fd:4c:c7:da:0c:3b:b5:66:be:f6:a9: 5f:f4:b2:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V7/nQWgalJwHEzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NjdhOThjMzgtN2ZiOS00NzQzLThmMWUtMWFjNmQzODc1NDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvleB8hpb4DJPXZwkm/rdcBGWDsh31yn8s08 E7cjIa2m2BXYILYxb98mmTXMX934XzeAVNA0CGcHrFX4mCcAFsMk3ExiLZzVP3A6 vstmXp26WJExVWW77UbTkiXVusFSWVcv1DvQRYg/WAOpxLMOvwFJR52QBZG7N0sq RFQ9sVcDiWZherGsHLWneZ0hnt/kE0r946EjY7arY3yD70P84XIbIZPn6L0NNqKT 9JvEYMJs55uFKWigqZS9tjFtCelzKtJIGeK3LDmyGNxb3a52PhJ2H3jCnoEqI5Os ROdoTzaR4FvODzM/7n8qTHGVWdtpmlQwCVjCjDSy60L9879mXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkvDhN1R+9txBzT8eFW+R44OFHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYmY0NmQxOTQtMGRkMi0z NmNjLWFlNGEtN2JjZmZhNTBlYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQdFspW2Z2Lv3kOpAil93a8p5DP9KK/VsW8A4ec1Vxh38cpAYyQT29T 7daKV4TOYNh9MO5YZd/Vaf9E7qWmoTxmyPWR7rVK5wBuXZS01zBHt3xz6NEOAwxb k++GrE/Q14CeW0+99desdtBy5uho0eZkPc8e024/jmEvQdoiSXsfIwpDi4yJz4sr ia79IAmLbr9SnHBuzdQ7ChTqZatpUdYX8uVMm7wN9P4sx9vLTkKu0uovoxYqHoOg Wbwsa0WEjzn4vI5h10fzu0hWHWnaB3c/g1jkZ1k7OI8c7tfv0oCMyO2HYMqJDuF/ XFcrFKuWWlH9TMfaDDu1Zr72qV/0svk= -----END CERTIFICATE-----Generated at Wed May 13 09:09:52 2026 by rpki-client