$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20afb17b-4d80-3661-82c7-a917add967c3.roa File: 20afb17b-4d80-3661-82c7-a917add967c3.roa (raw, json) Hash identifier: zPUmXZ1R3dzgwIlumaT3ABTVBHH/P22ZW6RtIfkgzaU= Subject key identifier: C7:D3:B2:78:20:35:AF:DB:50:B0:CE:51:0D:7C:53:17:E3:C7:17:BF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE42352B6FADB628B9FDC18C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20afb17b-4d80-3661-82c7-a917add967c3.roa Signing time: Wed 19 Aug 2026 18:03:59 +0000 ROA not before: Wed 19 Aug 2026 18:03:59 +0000 ROA not after: Sat 13 Apr 2030 04:00:00 +0000 asID: 8068 IP address blocks: 150.171.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:52:b6:fa:db:62:8b:9f:dc:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:59 2026 GMT Not After : Apr 13 04:00:00 2030 GMT Subject: CN=8a6400f8-7ba8-44fa-bab1-20dea8749464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:04:64:89:5e:27:b4:84:3c:bd:9e:0f:8c: be:b0:4e:20:d2:3f:a9:84:1d:b9:4b:78:af:f4:5f: a5:c8:df:84:7c:44:6b:e5:e9:7e:e7:fd:c6:2e:5d: 6c:3f:53:7f:50:b3:87:ab:f6:85:15:5e:1f:23:10: 24:a2:f7:8e:aa:69:52:5f:2f:2e:aa:26:02:b9:49: c7:6f:04:1b:39:65:eb:11:0a:ab:96:a9:89:96:53: 9f:5f:7f:85:66:8c:b7:13:e8:f9:af:bd:c0:3d:cc: 81:32:ae:cb:d2:27:91:40:b2:93:be:17:18:c0:b3: c3:61:9a:9d:21:e1:9a:d1:cb:4b:65:ca:88:7e:98: 8a:2e:2c:82:aa:27:70:94:e0:4e:8a:b5:87:0b:d8: e0:ea:e4:45:45:b2:02:3e:8d:52:2e:76:5b:66:dc: ac:6b:ee:60:2c:91:ec:c8:86:5c:88:b1:85:e8:22: dc:37:10:f7:97:cf:1c:56:0b:e3:6e:ed:77:97:86: d8:8d:e6:7b:19:d4:a0:57:1b:0c:7a:c3:82:25:59: c2:94:01:d7:b9:41:ac:fa:33:38:7e:cc:dd:ac:97: 2b:f9:3b:1a:a3:27:10:b9:26:e4:25:e8:2c:bd:61: 78:4d:a3:78:71:25:dd:6c:2c:4d:a7:bb:69:51:09: 3d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D3:B2:78:20:35:AF:DB:50:B0:CE:51:0D:7C:53:17:E3:C7:17:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/20afb17b-4d80-3661-82c7-a917add967c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 150.171.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:2a:16:f2:ba:2b:1f:15:16:b8:6a:5d:4c:6d:97:73:8c:6b: ae:47:44:a9:21:cc:6d:e9:95:93:52:44:b4:4a:a3:06:ae:6d: fe:a1:5d:64:c8:90:d0:3d:61:6a:ee:0a:e6:da:ad:58:6f:5a: 6b:4b:b4:5b:d1:ef:9b:e6:55:67:74:36:51:92:8e:51:3c:7a: 24:c2:57:b0:ab:bd:f3:99:ad:03:42:94:84:33:68:f7:b7:a1: af:dc:b2:7e:69:2e:f4:e8:b5:37:68:94:f4:32:17:9b:1a:76: ce:78:5c:a8:0a:e3:89:d5:18:61:16:89:e3:27:bc:6d:8b:36: 72:1c:c5:23:b8:a0:77:cb:59:0d:6e:67:34:5b:04:11:1d:34: e3:84:40:eb:e7:35:bb:c7:96:68:44:e3:b0:37:19:ab:f7:6e: 83:56:94:22:b6:a9:87:29:dc:da:c3:ff:a0:3a:54:a1:5b:3d: 75:0c:c1:ce:72:21:d5:50:13:44:94:be:ae:97:92:a6:16:c6: 46:d1:8e:7f:d3:bb:12:fa:e7:50:9e:12:74:91:61:39:d4:60: 2b:a8:2f:4c:fb:ff:7c:e1:e7:f4:c7:55:23:f4:27:b3:6b:df: d4:e7:6d:64:a2:38:75:8d:9b:54:84:63:f8:9b:01:b1:fc:91: 84:ad:b2:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1K2+ttii5/cGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1OVoXDTMwMDQxMzA0MDAwMFowLzEtMCsGA1UEAxMk OGE2NDAwZjgtN2JhOC00NGZhLWJhYjEtMjBkZWE4NzQ5NDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgQEZIleJ7SEPL2eD4y+sE4g0j+phB25S3iv 9F+lyN+EfERr5el+5/3GLl1sP1N/ULOHq/aFFV4fIxAkoveOqmlSXy8uqiYCuUnH bwQbOWXrEQqrlqmJllOfX3+FZoy3E+j5r73APcyBMq7L0ieRQLKTvhcYwLPDYZqd IeGa0ctLZcqIfpiKLiyCqidwlOBOirWHC9jg6uRFRbICPo1SLnZbZtysa+5gLJHs yIZciLGF6CLcNxD3l88cVgvjbu13l4bYjeZ7GdSgVxsMesOCJVnClAHXuUGs+jM4 fszdrJcr+TsaoycQuSbkJegsvWF4TaN4cSXdbCxNp7tpUQk9AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfTsnggNa/bULDOUQ18Uxfjxxe/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjBhZmIxN2ItNGQ4MC0z NjYxLTgyYzctYTkxN2FkZDk2N2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlqsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEqFvK6Kx8VFrhqXUxtl3OMa65HRKkhzG3plZNSRLRKowaubf6hXWTI kNA9YWruCubarVhvWmtLtFvR75vmVWd0NlGSjlE8eiTCV7CrvfOZrQNClIQzaPe3 oa/csn5pLvTotTdolPQyF5sads54XKgK44nVGGEWieMnvG2LNnIcxSO4oHfLWQ1u ZzRbBBEdNOOEQOvnNbvHlmhE47A3Gav3boNWlCK2qYcp3NrD/6A6VKFbPXUMwc5y IdVQE0SUvq6XkqYWxkbRjn/TuxL651CeEnSRYTnUYCuoL0z7/3zh5/THVSP0J7Nr 39TnbWSiOHWNm1SEY/ibAbH8kYStshQ= -----END CERTIFICATE-----Generated at Sat Sep 5 05:02:59 2026 by rpki-client