$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa File: f0c78555-959f-3406-a67f-c1b8b75f63c0.roa (raw, json) Hash identifier: SOmA0B0ZYDQolGot533QDLQjI+e0M+XtPW3rX5X1nwM= Subject key identifier: 77:A6:36:BC:CB:24:3D:25:53:A4:4E:DA:39:82:89:2E:09:93:FA:C1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DADAAE7A56E0886AC972FB480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 8069 IP address blocks: 20.157.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:e7:a5:6e:08:86:ac:97:2f:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=34ad971a-f572-4a63-9408-2c4fb9046d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4c:56:8f:08:85:21:be:3a:77:9c:09:b9:a2: 08:93:7d:d8:92:21:19:bb:3b:22:34:38:c2:9a:bf: 3c:82:83:8b:f8:6d:f1:f7:d7:49:95:56:5b:09:59: ba:60:76:60:6d:c2:97:f2:76:76:cf:87:f6:30:32: c9:ad:96:f3:16:2c:4f:5d:26:3c:20:e3:82:ae:65: 7b:7a:d8:65:51:7b:84:36:42:f0:62:60:64:ad:40: 4d:c0:b5:fd:30:98:8b:9c:82:a2:6e:2f:dd:16:2f: 95:64:1e:23:d0:65:3f:69:2d:fd:72:ae:dd:b8:16: 8f:f7:f4:02:5e:93:17:12:ed:5c:c6:b0:d3:14:6e: 25:9c:86:07:df:7f:e9:0c:4b:e0:23:1d:c7:27:87: c2:e0:74:fb:1b:75:df:14:64:96:ab:8d:b4:5a:2c: 56:e8:11:ad:d7:29:e8:63:ce:1d:1f:29:85:2d:e1: 47:50:f9:6d:b2:43:7e:83:1b:e1:69:f8:a5:d5:5b: c0:64:5a:eb:3e:45:2f:b6:13:28:77:fc:6d:4e:3e: 84:e6:79:41:e6:0e:d3:ed:94:a8:84:1d:f2:59:82: d3:25:2e:d5:5e:02:be:7e:48:0c:c5:5f:21:69:58: 8c:43:a5:39:f4:e5:96:56:8e:85:56:2d:62:a6:de: 6c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A6:36:BC:CB:24:3D:25:53:A4:4E:DA:39:82:89:2E:09:93:FA:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f2:4a:ea:67:96:f7:03:f3:52:f4:73:d3:01:49:ca:db:8c: 45:df:23:f5:3c:75:6c:ab:db:3e:55:48:e8:56:21:2a:e9:0d: a3:2d:9d:fb:09:4c:c3:56:45:cc:6b:01:ed:d7:da:19:de:1c: 7b:33:af:b5:3c:06:98:86:88:5d:ad:a2:ae:a6:45:9d:38:36: 18:48:0e:41:02:00:90:09:2e:c9:68:aa:97:bd:4c:40:65:90: fd:55:fe:ad:fa:a1:5f:90:7e:92:fb:22:f4:cd:de:2e:a2:84: 3a:18:51:53:71:e0:f9:2a:9a:ed:69:40:76:d2:43:28:d6:aa: dd:8c:49:63:7e:6a:21:cf:ac:6b:3e:b9:b1:00:22:17:01:5c: d3:18:92:10:96:41:c3:c9:f0:c1:70:7b:8b:f5:36:de:12:72: 3c:44:db:bd:94:f6:3b:7b:f6:68:dd:a5:d5:c8:dc:96:b2:34: 46:b0:1d:cd:35:0b:ec:01:a3:9f:37:d6:31:61:bd:83:f4:da: 75:27:17:5b:94:84:58:78:ed:92:37:6a:c2:52:db:8e:57:de: d2:c2:4a:9c:c6:02:e1:e6:15:94:7f:be:57:4d:12:89:fa:4d: 05:01:ce:dc:d2:03:89:a0:0a:63:e5:35:bb:35:ac:c8:34:af: 8f:9c:a9:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tquelbgiGrJcvtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk MzRhZDk3MWEtZjU3Mi00YTYzLTk0MDgtMmM0ZmI5MDQ2ZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkxWjwiFIb46d5wJuaIIk33YkiEZuzsiNDjC mr88goOL+G3x99dJlVZbCVm6YHZgbcKX8nZ2z4f2MDLJrZbzFixPXSY8IOOCrmV7 ethlUXuENkLwYmBkrUBNwLX9MJiLnIKibi/dFi+VZB4j0GU/aS39cq7duBaP9/QC XpMXEu1cxrDTFG4lnIYH33/pDEvgIx3HJ4fC4HT7G3XfFGSWq420WixW6BGt1yno Y84dHymFLeFHUPltskN+gxvhafil1VvAZFrrPkUvthMod/xtTj6E5nlB5g7T7ZSo hB3yWYLTJS7VXgK+fkgMxV8haViMQ6U59OWWVo6FVi1ipt5sWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHemNrzLJD0lU6RO2jmCiS4Jk/rBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjBjNzg1NTUtOTU5Zi0z NDA2LWE2N2YtYzFiOGI3NWY2M2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHySupnlvcD81L0c9MBScrbjEXfI/U8dWyr2z5VSOhWISrpDaMtnfsJ TMNWRcxrAe3X2hneHHszr7U8BpiGiF2toq6mRZ04NhhIDkECAJAJLsloqpe9TEBl kP1V/q36oV+QfpL7IvTN3i6ihDoYUVNx4Pkqmu1pQHbSQyjWqt2MSWN+aiHPrGs+ ubEAIhcBXNMYkhCWQcPJ8MFwe4v1Nt4ScjxE272U9jt79mjdpdXI3JayNEawHc01 C+wBo5831jFhvYP02nUnF1uUhFh47ZI3asJS245X3tLCSpzGAuHmFZR/vldNEon6 TQUBztzSA4mgCmPlNbs1rMg0r4+cqUw= -----END CERTIFICATE-----Generated at Wed May 13 10:48:54 2026 by rpki-client