$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa File: cd786728-d6f2-3414-abfc-112e58503c9a.roa (raw, json) Hash identifier: bf/8Xs1HOKY6RYcwRxzPFah+2v+UKHCAiII/PLnytxs= Subject key identifier: 8A:D2:67:C6:32:45:BF:48:68:66:14:28:C0:4F:48:0D:07:B4:48:62 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D95F00D382A3E3C1DFC99E980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 8069 IP address blocks: 20.157.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:0d:38:2a:3e:3c:1d:fc:99:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=84acf1d4-df5f-4ae2-a3a3-dce51c937084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1a:0f:7c:af:e6:f0:7b:90:45:56:b3:3a:09: e2:2f:2c:bf:72:fc:21:1f:64:27:a6:ba:54:7c:4d: ef:f5:63:fa:b0:a6:07:16:82:c6:21:85:c2:b0:b0: 88:44:e5:e6:6e:ed:5f:ba:7d:30:a6:bc:9b:d6:39: c9:25:c9:4b:23:91:bb:21:77:cb:bf:44:f4:78:1b: cc:8d:5d:94:b0:79:93:60:d1:14:e7:2c:fd:eb:e1: 13:da:8e:5b:1d:65:0b:ea:bb:9a:c1:9a:e8:ec:66: d3:f4:e0:44:90:35:29:54:de:b1:4a:8c:f1:88:05: 6e:9d:90:5a:b3:75:28:33:23:f7:13:b1:4a:44:66: a6:ab:5e:6f:cb:f9:f2:42:79:92:17:4e:28:b9:8b: c0:77:9f:01:67:c1:2c:58:78:93:b0:13:17:d2:01: de:0e:db:65:63:70:b7:d4:68:15:55:71:fa:5c:f4: 3c:d1:c0:67:20:11:55:44:93:b6:7f:91:42:1c:67: d2:aa:4d:da:f6:08:86:6f:2c:08:d8:37:9d:d0:00: f0:63:b2:89:7a:94:47:2a:36:9c:7a:99:36:e3:26: 14:34:0f:a6:82:9d:0e:8c:29:53:d8:e5:af:0f:45: a2:35:89:98:85:2a:da:bb:dc:1c:8f:2c:61:8a:3c: 96:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D2:67:C6:32:45:BF:48:68:66:14:28:C0:4F:48:0D:07:B4:48:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:77:64:00:ff:77:f1:bd:cf:9a:cd:21:99:71:a9:45:ac:f9: c6:88:e9:cb:47:f0:f0:74:97:de:6f:05:2b:79:05:72:52:8c: 5a:a3:59:76:33:5f:6c:7a:31:81:d3:1d:12:01:5f:bd:a7:8a: ac:95:a9:06:da:6c:4d:a8:c5:84:84:16:39:f3:50:d1:5d:04: 48:d7:bc:b0:4c:ca:4c:8a:3f:dc:c2:f0:a1:be:8e:9d:08:33: 5f:96:c2:0e:1c:12:e6:52:9c:a9:c3:01:ff:ac:ac:77:e0:18: a8:f4:4e:65:13:3b:b0:0c:c2:36:63:51:81:a5:2e:92:0f:12: 87:66:cd:67:af:de:f8:7e:30:a2:6d:1f:34:be:e8:97:ac:e3: 25:04:4d:5e:e9:a9:76:83:03:0d:be:c6:d4:5c:91:53:55:c4: 4d:0d:36:2e:68:02:f7:17:ff:fe:c0:a0:3a:eb:60:d3:03:1e: 46:7d:a8:ca:73:ee:1e:3d:3b:f9:88:b3:4f:8d:ce:a1:d3:7d: db:4d:c5:58:fd:2c:62:34:9b:cf:b4:f6:45:84:57:aa:ca:3c: 68:1c:59:58:3c:2a:88:f4:b0:3e:a2:7c:41:c1:b4:47:39:a8: bb:0c:6c:cd:4d:fa:46:f4:56:e9:8f:84:d9:c4:37:01:b2:dd: 4b:71:3f:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8A04Kj48HfyZ6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk ODRhY2YxZDQtZGY1Zi00YWUyLWEzYTMtZGNlNTFjOTM3MDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBoPfK/m8HuQRVazOgniLyy/cvwhH2QnprpU fE3v9WP6sKYHFoLGIYXCsLCIROXmbu1fun0wpryb1jnJJclLI5G7IXfLv0T0eBvM jV2UsHmTYNEU5yz96+ET2o5bHWUL6ruawZro7GbT9OBEkDUpVN6xSozxiAVunZBa s3UoMyP3E7FKRGamq15vy/nyQnmSF04ouYvAd58BZ8EsWHiTsBMX0gHeDttlY3C3 1GgVVXH6XPQ80cBnIBFVRJO2f5FCHGfSqk3a9giGbywI2Ded0ADwY7KJepRHKjac epk24yYUNA+mgp0OjClT2OWvD0WiNYmYhSrau9wcjyxhijyW7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrSZ8YyRb9IaGYUKMBPSA0HtEhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2Q3ODY3MjgtZDZmMi0z NDE0LWFiZmMtMTEyZTU4NTAzYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl3ZAD/d/G9z5rNIZlxqUWs+caI6ctH8PB0l95vBSt5BXJSjFqjWXYz X2x6MYHTHRIBX72niqyVqQbabE2oxYSEFjnzUNFdBEjXvLBMykyKP9zC8KG+jp0I M1+Wwg4cEuZSnKnDAf+srHfgGKj0TmUTO7AMwjZjUYGlLpIPEodmzWev3vh+MKJt HzS+6Jes4yUETV7pqXaDAw2+xtRckVNVxE0NNi5oAvcX//7AoDrrYNMDHkZ9qMpz 7h49O/mIs0+NzqHTfdtNxVj9LGI0m8+09kWEV6rKPGgcWVg8Koj0sD6ifEHBtEc5 qLsMbM1N+kb0VumPhNnENwGy3UtxP5k= -----END CERTIFICATE-----Generated at Wed May 13 11:29:36 2026 by rpki-client