$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa File: 7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa (raw, json) Hash identifier: I5qlmXUlZL1x2mkbMqA2R1FL70ZSGiL894X8pV3LJlI= Subject key identifier: 69:27:25:B0:2F:FF:42:26:3E:3E:68:9F:02:67:A7:76:2A:DE:BE:11 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E7634E37C55E85B258D4A3480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 8069 IP address blocks: 20.157.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:e3:7c:55:e8:5b:25:8d:4a:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=f06fa583-0041-46d7-a5e6-bfdae5a5ccef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d3:db:2d:24:04:d9:d2:15:74:6a:63:e8:5d: 0f:0b:5a:88:06:0d:8a:f3:17:90:2c:b3:47:22:03: 70:e6:46:06:f0:c6:6c:c6:58:2e:40:22:bc:20:47: 69:df:16:3e:54:5c:0b:8a:29:11:63:db:68:e2:81: 3f:5b:5a:3b:ba:39:0c:81:f2:17:a5:66:03:6c:0c: 8d:9b:7f:29:7d:8c:ec:5b:cc:61:4f:f9:45:93:a0: 4b:02:0a:62:fd:e1:61:20:9a:f7:30:56:d5:b3:b2: 91:65:78:7a:a2:39:ae:0a:81:01:c6:dd:2b:9f:26: 18:e5:e1:1f:2e:a0:5a:50:51:23:58:d5:a8:ac:d7: 5c:ed:39:9a:2a:20:94:3f:95:43:7c:a2:8e:09:50: 60:ef:1a:da:7e:a9:48:69:f0:64:06:33:a4:21:68: e6:67:92:c6:c5:3f:3f:5f:cf:db:cd:4b:5e:8a:ae: e5:c4:6c:c6:17:a0:31:6f:74:10:f4:96:ea:75:02: b6:6d:d2:73:52:32:28:24:68:62:d8:f5:de:33:62: 70:25:e9:28:94:ec:69:c0:ac:16:dd:68:e6:04:20: 9e:5d:8c:47:a2:f2:33:3c:08:3a:68:39:45:e9:f5: ff:62:17:34:5d:4a:e5:01:37:1f:a8:2b:1f:b1:eb: 0d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:27:25:B0:2F:FF:42:26:3E:3E:68:9F:02:67:A7:76:2A:DE:BE:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f3bb12b-7691-3244-85b0-12d5ab6db9f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:51:a9:62:9c:a9:ca:15:ff:ae:e0:97:43:08:f9:24:0f:ce: 0d:bf:56:71:14:de:a8:63:d2:b8:19:f8:a2:fc:b0:3b:fe:19: 90:d7:a7:b2:1e:76:38:c9:97:2b:64:f9:4d:f2:da:46:01:6f: 7f:f8:90:b7:96:dd:89:8a:a5:3e:15:8d:85:f0:f3:89:93:60: 93:a0:14:7b:63:5d:49:9f:07:63:70:d9:38:2f:03:f4:be:87: 1e:f2:7f:fb:87:b2:79:56:a9:c0:dd:1b:6c:a7:6a:31:da:bb: ce:23:e4:5e:bb:ea:42:5a:6a:cb:58:d1:3b:5c:28:3b:52:08: c6:05:8c:1c:19:bb:86:62:82:b2:b3:52:40:83:6f:65:b0:b8: 0c:de:e0:55:b8:b2:e6:2b:0f:d0:8c:0b:9a:82:14:72:d0:18: fa:98:fe:2c:bd:4f:37:48:14:44:c6:4a:07:c1:61:38:fb:80: c0:59:a8:30:3f:cd:a4:ab:6f:04:25:b6:ee:11:55:57:cc:f2: f6:88:c1:de:7e:18:23:9b:f0:42:2a:5d:de:35:83:ff:03:80: db:37:29:4d:1e:ba:2d:fa:b0:04:9a:b8:a3:bd:ca:dd:07:3d: 2d:16:2f:d2:93:64:2d:e5:24:1f:3a:59:0d:44:eb:b8:f2:48: cd:2e:f5:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NON8VehbJY1KNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk ZjA2ZmE1ODMtMDA0MS00NmQ3LWE1ZTYtYmZkYWU1YTVjY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtPbLSQE2dIVdGpj6F0PC1qIBg2K8xeQLLNH IgNw5kYG8MZsxlguQCK8IEdp3xY+VFwLiikRY9to4oE/W1o7ujkMgfIXpWYDbAyN m38pfYzsW8xhT/lFk6BLAgpi/eFhIJr3MFbVs7KRZXh6ojmuCoEBxt0rnyYY5eEf LqBaUFEjWNWorNdc7TmaKiCUP5VDfKKOCVBg7xrafqlIafBkBjOkIWjmZ5LGxT8/ X8/bzUteiq7lxGzGF6Axb3QQ9JbqdQK2bdJzUjIoJGhi2PXeM2JwJekolOxpwKwW 3WjmBCCeXYxHovIzPAg6aDlF6fX/Yhc0XUrlATcfqCsfsesNTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGknJbAv/0ImPj5onwJnp3Yq3r4RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2YzYmIxMmItNzY5MS0z MjQ0LTg1YjAtMTJkNWFiNmRiOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ33MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZRqWKcqcoV/67gl0MI+SQPzg2/VnEU3qhj0rgZ+KL8sDv+GZDXp7Ie djjJlytk+U3y2kYBb3/4kLeW3YmKpT4VjYXw84mTYJOgFHtjXUmfB2Nw2TgvA/S+ hx7yf/uHsnlWqcDdG2ynajHau84j5F676kJaastY0TtcKDtSCMYFjBwZu4ZigrKz UkCDb2WwuAze4FW4suYrD9CMC5qCFHLQGPqY/iy9TzdIFETGSgfBYTj7gMBZqDA/ zaSrbwQltu4RVVfM8vaIwd5+GCOb8EIqXd41g/8DgNs3KU0eui36sASauKO9yt0H PS0WL9KTZC3lJB86WQ1E67jySM0u9UQ= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:58 2026 by rpki-client