$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3aea2d5a-a0be-3cd0-b9a3-8eec3a150793.roa File: 3aea2d5a-a0be-3cd0-b9a3-8eec3a150793.roa (raw, json) Hash identifier: h1RTk+t9TpbgWY5bfOh8OYPlo+C5XTaAuKBcQqcDcVo= Subject key identifier: 95:F5:E3:80:1F:31:FE:BA:59:03:9E:55:9D:E7:66:90:FF:09:60:9C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E8DEFAE58A35034F59AB72300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3aea2d5a-a0be-3cd0-b9a3-8eec3a150793.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.157.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:ae:58:a3:50:34:f5:9a:b7:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=aab0d605-0fa2-412c-bffb-09a0963ae4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:58:eb:59:0e:66:d6:da:b9:81:15:fa:1a:bc: d1:fb:34:3a:73:cc:02:bd:34:02:58:71:29:63:3c: c4:d7:a9:18:7e:02:03:b5:37:ae:49:0b:e6:01:23: 88:a1:34:f7:5f:88:67:06:7f:07:a4:ed:06:4f:67: 6f:1f:08:9d:e2:6d:3c:ea:4d:45:6c:a2:25:87:e6: 4c:f8:a4:44:0d:f0:f2:c8:fb:95:94:f2:02:e0:6e: fb:f4:3f:22:43:c6:14:84:d4:83:c2:b8:bb:72:dd: 06:ac:8f:86:bd:26:ee:58:20:81:bd:a4:cd:8d:ca: 6a:21:b0:c0:f4:22:99:ed:22:23:34:55:80:56:90: fe:db:d0:f7:91:9f:7f:05:26:45:61:5d:3f:18:c2: c9:97:f2:49:a9:98:07:d6:89:b8:0c:87:d2:bd:98: 8c:28:94:bf:f7:16:f7:cd:35:e7:e9:bb:e9:be:fc: 9e:61:f4:3f:5e:6f:1f:e4:32:16:10:99:ea:4c:d5: f1:83:2c:5e:25:b3:2e:31:65:03:b6:26:3d:bb:6d: 07:be:a0:cd:58:33:d7:75:ba:e1:b1:37:33:14:db: 51:46:e4:44:ec:35:cf:db:f6:ee:fd:b6:00:33:e0: f4:e9:b8:db:50:d3:8b:f1:04:5c:35:7b:3a:05:05: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F5:E3:80:1F:31:FE:BA:59:03:9E:55:9D:E7:66:90:FF:09:60:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3aea2d5a-a0be-3cd0-b9a3-8eec3a150793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:7d:7c:e5:bb:7e:8c:d2:cb:88:9a:07:a2:67:db:fb:71:09: fc:77:8f:42:fc:67:4c:be:50:3c:3e:6c:ad:72:61:0b:ac:bf: 10:8a:ac:fa:42:78:db:da:5f:65:a4:fb:e8:8b:20:d0:b0:5d: 78:03:53:fa:6a:76:3d:f6:b3:02:c4:50:af:12:9b:bb:fe:26: c6:85:75:e2:5e:22:bc:be:6e:e4:7d:02:47:9a:62:e7:cd:16: 25:21:f3:e0:ca:93:5f:cf:8b:5a:ec:39:1d:39:c8:94:88:b5: 74:09:43:4c:de:ae:2d:2b:a9:33:bf:85:be:f7:a5:ff:6f:b5: 95:bf:dc:c3:ea:74:7b:9c:7e:2e:d1:d8:7a:60:08:c4:f3:e0: e4:5d:0f:d6:e6:b4:1d:44:b9:1a:fd:8d:05:78:28:cf:fd:29: da:db:d2:6d:88:45:78:80:94:4a:af:d4:85:e1:26:71:42:e2: e1:58:5e:52:1b:53:e6:ac:15:c2:3b:e2:9a:73:e1:b9:04:0f: be:c5:dc:77:51:d4:0f:30:1a:f4:77:f1:f6:e0:7a:a0:19:92: d1:51:b0:0f:77:c3:92:59:7b:48:f4:6b:cd:e6:47:75:fb:cd: 3e:b7:c5:e9:8d:80:d4:ef:19:be:cd:5c:1e:55:07:08:21:43: 7c:62:78:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N765Yo1A09Zq3IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk YWFiMGQ2MDUtMGZhMi00MTJjLWJmZmItMDlhMDk2M2FlNGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnljrWQ5m1tq5gRX6GrzR+zQ6c8wCvTQCWHEp YzzE16kYfgIDtTeuSQvmASOIoTT3X4hnBn8HpO0GT2dvHwid4m086k1FbKIlh+ZM +KREDfDyyPuVlPIC4G779D8iQ8YUhNSDwri7ct0GrI+GvSbuWCCBvaTNjcpqIbDA 9CKZ7SIjNFWAVpD+29D3kZ9/BSZFYV0/GMLJl/JJqZgH1om4DIfSvZiMKJS/9xb3 zTXn6bvpvvyeYfQ/Xm8f5DIWEJnqTNXxgyxeJbMuMWUDtiY9u20HvqDNWDPXdbrh sTczFNtRRuRE7DXP2/bu/bYAM+D06bjbUNOL8QRcNXs6BQVeNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJX144AfMf66WQOeVZ3nZpD/CWCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2FlYTJkNWEtYTBiZS0z Y2QwLWI5YTMtOGVlYzNhMTUwNzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKN9fOW7fozSy4iaB6Jn2/txCfx3j0L8Z0y+UDw+bK1yYQusvxCKrPpC eNvaX2Wk++iLINCwXXgDU/pqdj32swLEUK8Sm7v+JsaFdeJeIry+buR9AkeaYufN FiUh8+DKk1/Pi1rsOR05yJSItXQJQ0zeri0rqTO/hb73pf9vtZW/3MPqdHucfi7R 2HpgCMTz4ORdD9bmtB1EuRr9jQV4KM/9Kdrb0m2IRXiAlEqv1IXhJnFC4uFYXlIb U+asFcI74ppz4bkED77F3HdR1A8wGvR38fbgeqAZktFRsA93w5JZe0j0a83mR3X7 zT63xemNgNTvGb7NXB5VBwghQ3xieBE= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:08 2026 by rpki-client