$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec270492-bce7-38b7-be61-15cd9d627fa4.roa File: ec270492-bce7-38b7-be61-15cd9d627fa4.roa (raw, json) Hash identifier: Y3RDEol/XR8mLPAc25cM0aM88wYVzn8azuMtwseVLOE= Subject key identifier: 97:F6:12:E2:E0:6B:FA:50:10:F1:2E:61:68:A1:66:89:91:DB:11:49 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F268D0BDC0178B3326271D800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec270492-bce7-38b7-be61-15cd9d627fa4.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 8069 IP address blocks: 20.157.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:0b:dc:01:78:b3:32:62:71:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=97195f19-e77b-4d14-8e01-45ffa6a11464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:24:41:d1:ba:93:9f:2d:fe:69:d1:a0:71:6a: ea:09:d0:98:9f:e8:99:3c:e9:6a:f1:29:6e:4c:ad: 90:c1:c5:f6:5e:3e:b9:9d:16:80:9c:45:27:fc:d5: 82:e1:aa:88:04:7d:48:a9:cf:00:d8:a6:81:91:47: a4:aa:4a:3a:35:0e:01:10:cc:6e:b4:50:1e:62:75: 5b:c5:69:23:ea:b9:2c:94:ab:e2:50:cc:87:90:17: 19:1e:c1:9e:95:d0:7d:13:0f:e2:f7:e9:4a:33:8d: 1f:c5:11:83:fc:28:bd:8e:22:e3:35:37:ad:d2:f1: c4:1c:a6:0a:bc:df:01:db:df:80:33:a7:fb:e8:c7: 26:0d:43:50:d0:54:b8:1f:c5:e6:48:51:35:53:6f: 14:59:d1:62:e3:9a:3e:c4:59:9a:e6:ea:07:5e:80: 79:76:58:ff:b4:3f:39:6f:a0:17:1f:8b:0b:a1:15: bb:37:8b:65:aa:90:c7:26:f8:fb:6c:13:b0:ae:1b: ca:4e:87:1c:61:13:14:a1:91:1d:7c:3d:90:ce:7c: e7:88:45:a5:65:0f:00:06:af:75:c4:14:8a:82:4b: 92:3c:f6:e1:45:aa:70:f0:36:b9:46:47:f9:2a:54: 48:15:d8:61:d1:29:e6:27:e4:30:f2:da:28:ff:8c: d8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F6:12:E2:E0:6B:FA:50:10:F1:2E:61:68:A1:66:89:91:DB:11:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec270492-bce7-38b7-be61-15cd9d627fa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:f1:93:24:42:80:13:92:1f:98:78:c5:35:cb:4b:ce:9b:e2: 1e:6b:d0:e2:81:47:73:11:23:2b:ae:db:7c:bd:73:8d:76:5c: ac:e0:02:85:0b:5a:e5:11:3d:0b:fb:85:63:48:63:67:98:f4: c8:61:99:e3:41:d4:74:7e:e1:1e:4a:46:a9:5f:40:55:e4:f1: 15:cf:b5:a9:3f:64:8b:5d:b5:3f:e4:82:4d:53:18:53:40:f5: 6a:30:56:8f:33:eb:f9:b4:10:ca:cf:9a:e2:d1:83:03:83:9a: 07:cf:30:4b:d2:7b:3c:23:b5:c8:2a:f7:ac:5e:e8:7a:59:ee: f3:57:fd:4d:be:b5:d2:67:a4:7d:7b:77:30:b7:32:e7:d4:18: e7:bd:be:a1:c3:70:9e:19:9c:6b:b8:47:4c:39:81:d1:40:4e: f2:7d:9d:86:87:4b:2f:dd:5d:50:1f:1d:5e:25:98:f6:ac:fb: 83:df:66:7f:53:f1:42:6e:60:ea:9c:bc:6e:17:2c:53:81:9e: 07:0a:d8:f6:2c:58:f3:18:5b:1d:f7:ce:85:6a:7c:9d:53:0a: 0d:01:b5:07:b7:7c:11:a3:87:c5:5a:42:7e:0d:71:5c:a0:81: 62:f0:d6:e5:91:43:d0:db:e4:33:f4:d8:32:96:09:dd:84:ef: ee:e8:e4:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQvcAXizMmJx2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk OTcxOTVmMTktZTc3Yi00ZDE0LThlMDEtNDVmZmE2YTExNDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiRB0bqTny3+adGgcWrqCdCYn+iZPOlq8Slu TK2QwcX2Xj65nRaAnEUn/NWC4aqIBH1Iqc8A2KaBkUekqko6NQ4BEMxutFAeYnVb xWkj6rkslKviUMyHkBcZHsGeldB9Ew/i9+lKM40fxRGD/Ci9jiLjNTet0vHEHKYK vN8B29+AM6f76McmDUNQ0FS4H8XmSFE1U28UWdFi45o+xFma5uoHXoB5dlj/tD85 b6AXH4sLoRW7N4tlqpDHJvj7bBOwrhvKToccYRMUoZEdfD2QznzniEWlZQ8ABq91 xBSKgkuSPPbhRapw8Da5Rkf5KlRIFdhh0SnmJ+Qw8too/4zYLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJf2EuLga/pQEPEuYWihZomR2xFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWMyNzA0OTItYmNlNy0z OGI3LWJlNjEtMTVjZDlkNjI3ZmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ27MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLxkyRCgBOSH5h4xTXLS86b4h5r0OKBR3MRIyuu23y9c412XKzgAoUL WuURPQv7hWNIY2eY9MhhmeNB1HR+4R5KRqlfQFXk8RXPtak/ZItdtT/kgk1TGFNA 9WowVo8z6/m0EMrPmuLRgwODmgfPMEvSezwjtcgq96xe6HpZ7vNX/U2+tdJnpH17 dzC3MufUGOe9vqHDcJ4ZnGu4R0w5gdFATvJ9nYaHSy/dXVAfHV4lmPas+4PfZn9T 8UJuYOqcvG4XLFOBngcK2PYsWPMYWx33zoVqfJ1TCg0BtQe3fBGjh8VaQn4NcVyg gWLw1uWRQ9Db5DP02DKWCd2E7+7o5Pk= -----END CERTIFICATE-----Generated at Mon Sep 28 23:14:18 2026 by rpki-client