$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa File: bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa (raw, json) Hash identifier: AMiLGgVffIfN4IittiLajTRnw7TS0FIVSz7pnGXx/5o= Subject key identifier: D3:2A:E4:91:EC:C6:6F:51:F9:9C:AF:A0:8D:BB:5B:62:9E:E0:B9:7B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E7634D27A304F3FDC58663EC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 8069 IP address blocks: 20.157.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:d2:7a:30:4f:3f:dc:58:66:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=a9fdf618-e0e5-450e-84eb-09fe114b8d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e8:c1:9c:32:99:4b:d3:79:9c:0c:33:7d:c7: d6:19:0b:a9:bb:2d:e1:46:e9:fb:fa:0c:70:45:2a: 24:b8:07:66:50:b8:5d:20:00:3c:f7:ae:f9:14:bc: 20:1f:d5:84:63:33:52:18:2f:0f:f6:ea:13:3f:63: bc:bd:02:0d:89:e3:66:db:35:8a:1e:fb:ae:90:43: 71:37:f5:eb:dd:92:e0:9a:32:ae:fb:6d:bc:1f:41: 80:06:b4:6b:2e:ab:a6:4f:2b:87:06:6f:3b:3f:73: 50:84:d6:34:d4:15:37:5f:7b:03:4e:07:3c:0b:99: 84:62:c9:4b:2f:4d:f0:52:53:f3:da:fe:35:8f:78: e8:1d:1e:bb:b2:eb:23:3c:33:7c:9d:2b:db:38:a1: 1a:f0:44:c7:c5:da:40:13:50:c2:9e:3b:5a:e0:80: 24:9d:3a:0c:55:26:0d:a1:15:12:ab:ab:fa:df:d3: 54:d2:ea:a4:cb:ea:cb:3c:e2:2f:68:f0:16:57:6a: 92:1f:30:c9:eb:d3:04:f5:b7:37:4b:ea:97:ba:e7: c6:ab:0c:d0:9e:68:c9:1d:d5:63:72:06:1d:af:6f: ff:91:cd:c2:fa:9e:19:28:84:f3:bb:8b:40:f0:39: a6:cc:c6:69:b6:7f:ea:8e:58:e3:2c:96:bf:9d:a9: 79:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2A:E4:91:EC:C6:6F:51:F9:9C:AF:A0:8D:BB:5B:62:9E:E0:B9:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:7e:ac:0c:09:a5:14:ff:6f:34:8f:ec:57:f3:d7:f3:be:dd: 2b:7a:f4:2d:87:2f:03:f8:59:17:5a:48:1e:0c:61:25:9b:5e: c6:d1:95:73:e3:34:8f:44:ac:b9:35:30:95:1d:75:f7:48:dc: 47:6a:11:4f:c4:a3:d2:2d:dd:4e:37:9d:c6:4e:1d:9f:d9:f3: 47:b7:0b:a7:a7:b1:9a:d2:ec:32:9a:80:6c:49:28:46:34:f7: 7a:93:69:f7:04:1e:3a:2f:ce:73:7e:42:9e:8b:eb:62:b1:b6: e3:42:ee:f0:f5:f7:e7:db:fc:d5:21:91:95:b5:3d:cc:f3:b6: e4:0e:98:c1:51:b4:0c:5a:a8:90:46:b9:ba:3f:25:ef:24:4c: e0:dd:13:80:a8:bb:52:21:01:a1:aa:c0:6b:e1:36:4c:c2:ec: ba:63:4c:35:d6:db:7c:a6:c5:b4:34:92:ed:c0:69:e5:0c:e1: e8:c3:ba:8d:39:a0:e0:b3:a6:6d:1b:da:8a:8a:51:30:0a:da: 19:ba:e4:d0:00:e7:42:a8:d5:64:bd:f5:af:51:b6:4a:e6:57: dc:a0:24:bb:53:3a:01:c7:9a:b5:af:6d:bd:a6:10:3e:c7:c5: 3a:e6:0e:7a:95:63:a9:84:6d:ac:43:7e:ef:48:f9:15:1d:5d: 8f:7a:a6:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NNJ6ME8/3FhmPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk YTlmZGY2MTgtZTBlNS00NTBlLTg0ZWItMDlmZTExNGI4ZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgejBnDKZS9N5nAwzfcfWGQupuy3hRun7+gxw RSokuAdmULhdIAA89675FLwgH9WEYzNSGC8P9uoTP2O8vQINieNm2zWKHvuukENx N/Xr3ZLgmjKu+228H0GABrRrLqumTyuHBm87P3NQhNY01BU3X3sDTgc8C5mEYslL L03wUlPz2v41j3joHR67susjPDN8nSvbOKEa8ETHxdpAE1DCnjta4IAknToMVSYN oRUSq6v639NU0uqky+rLPOIvaPAWV2qSHzDJ69ME9bc3S+qXuufGqwzQnmjJHdVj cgYdr2//kc3C+p4ZKITzu4tA8DmmzMZptn/qjljjLJa/nal5XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMq5JHsxm9R+ZyvoI27W2Ke4Ll7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYmY0NmQxOTQtMGRkMi0z NmNjLWFlNGEtN2JjZmZhNTBlYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV+rAwJpRT/bzSP7Ffz1/O+3St69C2HLwP4WRdaSB4MYSWbXsbRlXPj NI9ErLk1MJUddfdI3EdqEU/Eo9It3U43ncZOHZ/Z80e3C6ensZrS7DKagGxJKEY0 93qTafcEHjovznN+Qp6L62KxtuNC7vD19+fb/NUhkZW1PczztuQOmMFRtAxaqJBG ubo/Je8kTODdE4Cou1IhAaGqwGvhNkzC7LpjTDXW23ymxbQ0ku3AaeUM4ejDuo05 oOCzpm0b2oqKUTAK2hm65NAA50Ko1WS99a9RtkrmV9ygJLtTOgHHmrWvbb2mED7H xTrmDnqVY6mEbaxDfu9I+RUdXY96prQ= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:09 2026 by rpki-client