$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65df7823-ba47-3444-b05e-486205632b0f.roa File: 65df7823-ba47-3444-b05e-486205632b0f.roa (raw, json) Hash identifier: 8XNbWB/E4oI3Ob82kuSDxoyweUL67Tw8h5ZpuJWAw+c= Subject key identifier: 4B:07:ED:DD:C3:DF:01:92:4C:0C:81:88:2D:BA:19:AD:ED:8D:81:54 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E779A28B7F07EC6A9D3E77500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65df7823-ba47-3444-b05e-486205632b0f.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 8069 IP address blocks: 20.157.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:28:b7:f0:7e:c6:a9:d3:e7:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=4716bb8d-83f0-460f-8f49-e2698becde00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9a:64:83:66:6f:12:18:88:5b:9c:06:98:3d: 5c:20:c0:9a:a5:ea:9f:d2:7d:4b:49:30:4a:c0:27: 9f:d1:90:b5:10:04:50:d6:44:52:dc:c1:dd:0f:af: 58:9d:02:17:96:98:4d:c2:89:c8:c9:38:70:aa:0e: d2:9c:66:cb:2e:4a:ac:e4:23:90:46:9f:ed:49:ff: db:1d:69:1e:7f:51:ae:ca:8d:60:f5:f6:05:2f:f0: e2:84:16:3b:43:76:b5:f5:96:e2:1e:97:ee:3f:1f: 2d:e9:f9:e7:82:47:da:47:24:82:8d:13:9e:5d:ff: 46:85:cb:fa:cb:b5:74:a4:92:1d:00:09:a6:bb:47: da:1f:6b:d9:19:38:05:d6:2b:8a:2c:a3:5f:de:e9: df:39:58:00:80:80:33:4e:2f:50:ee:74:7f:8f:01: 9c:ab:54:14:06:27:cd:af:02:1b:f7:76:1f:9d:65: 9a:c3:81:5b:a4:38:b4:ff:32:ab:6a:dd:78:f7:f6: 39:d5:e8:cd:c5:59:03:89:61:22:3b:33:68:ef:9b: 13:fd:d5:4b:4a:c3:87:c5:65:a2:ec:df:d3:2e:63: af:b3:ca:44:fe:37:1f:55:c6:61:40:29:14:d1:44: c3:d4:a1:c1:cf:c0:0c:c8:43:87:3d:4c:18:19:2f: f0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:07:ED:DD:C3:DF:01:92:4C:0C:81:88:2D:BA:19:AD:ED:8D:81:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65df7823-ba47-3444-b05e-486205632b0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:4a:dd:ed:75:16:ed:f2:a7:e1:1d:84:9c:0d:ef:88:d7:a1: ad:15:97:18:d9:e8:0f:b8:73:df:e4:c1:7e:d7:b8:80:90:56: b3:fe:1d:d5:06:1b:ac:e6:fa:75:a0:b1:1b:ab:9f:e2:89:4a: 62:c1:9e:26:55:a8:ad:71:b4:95:5e:d0:4c:0e:b5:d4:3e:75: 6e:da:50:ac:e9:21:bd:53:cb:8b:18:51:ab:7f:a4:f9:96:e3: a0:be:93:bb:c4:55:07:93:a6:cc:ad:c5:f8:17:25:53:20:7d: 39:fe:6c:0b:c7:6b:d6:28:10:ad:53:d9:8a:89:35:ae:1a:2f: 89:75:e2:68:f8:2a:25:46:68:af:7b:7f:45:9e:46:64:34:06: 05:cf:76:e7:53:44:83:59:6f:d2:3f:b7:df:61:14:9e:4b:e5: e8:f1:b7:91:6b:f8:22:60:73:e1:84:a5:76:ba:a4:7e:c2:da: 73:85:33:bb:27:86:d3:51:7f:7a:71:c3:9d:5b:ff:64:cb:bb: 67:08:4c:2d:05:f4:9b:11:39:4d:bf:6d:05:9d:40:77:77:eb: cc:db:65:bd:d2:b6:34:8e:b2:35:cf:c6:7d:ef:4f:90:7d:35: 68:56:ed:3e:d0:b7:61:51:de:22:09:f6:8e:a3:cd:6f:11:08: 48:2b:07:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53mii38H7GqdPndQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk NDcxNmJiOGQtODNmMC00NjBmLThmNDktZTI2OThiZWNkZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJpkg2ZvEhiIW5wGmD1cIMCapeqf0n1LSTBK wCef0ZC1EARQ1kRS3MHdD69YnQIXlphNwonIyThwqg7SnGbLLkqs5COQRp/tSf/b HWkef1Guyo1g9fYFL/DihBY7Q3a19ZbiHpfuPx8t6fnngkfaRySCjROeXf9Ghcv6 y7V0pJIdAAmmu0faH2vZGTgF1iuKLKNf3unfOVgAgIAzTi9Q7nR/jwGcq1QUBifN rwIb93YfnWWaw4FbpDi0/zKrat149/Y51ejNxVkDiWEiOzNo75sT/dVLSsOHxWWi 7N/TLmOvs8pE/jcfVcZhQCkU0UTD1KHBz8AMyEOHPUwYGS/wKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsH7d3D3wGSTAyBiC26Ga3tjYFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjVkZjc4MjMtYmE0Ny0z NDQ0LWIwNWUtNDg2MjA1NjMyYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1K3e11Fu3yp+EdhJwN74jXoa0VlxjZ6A+4c9/kwX7XuICQVrP+HdUG G6zm+nWgsRurn+KJSmLBniZVqK1xtJVe0EwOtdQ+dW7aUKzpIb1Ty4sYUat/pPmW 46C+k7vEVQeTpsytxfgXJVMgfTn+bAvHa9YoEK1T2YqJNa4aL4l14mj4KiVGaK97 f0WeRmQ0BgXPdudTRINZb9I/t99hFJ5L5ejxt5Fr+CJgc+GEpXa6pH7C2nOFM7sn htNRf3pxw51b/2TLu2cITC0F9JsROU2/bQWdQHd368zbZb3StjSOsjXPxn3vT5B9 NWhW7T7Qt2FR3iIJ9o6jzW8RCEgrB5o= -----END CERTIFICATE-----Generated at Tue Jul 21 21:09:19 2026 by rpki-client