$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/22badc46-7f2c-3330-9dcd-30f3a1bd5152.roa File: 22badc46-7f2c-3330-9dcd-30f3a1bd5152.roa (raw, json) Hash identifier: tX3N95MBAsihn9AZPeEIbNk/GqO5lx/cInYonUK5D2s= Subject key identifier: 9C:8C:C0:21:70:5F:5E:72:FB:DC:2F:FB:DB:36:7B:B8:7C:BC:75:46 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F857875ECB98AB77F31CF83C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/22badc46-7f2c-3330-9dcd-30f3a1bd5152.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 8069 IP address blocks: 20.157.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:75:ec:b9:8a:b7:7f:31:cf:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=2a30c7d5-555b-4864-bb48-11e722dfdf12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:95:74:82:a3:b9:75:62:f9:87:86:15:58:ea: 49:e0:a6:44:d6:4a:87:c1:1b:e3:d3:8b:18:0d:f3: 3f:2c:a9:1f:a7:c8:fd:02:d4:b1:36:07:7b:08:e4: 1f:8d:f3:4e:fe:5b:1f:45:a0:7b:37:8a:56:7b:fc: 00:bc:50:4c:da:a5:6a:69:18:4b:0f:50:42:16:fc: 46:ac:ba:1c:2f:58:e0:70:15:fe:ed:30:e5:81:66: e7:8e:67:6b:02:68:6d:2c:a8:73:04:06:80:b2:cf: ff:7c:a3:f5:0a:9d:b9:40:ac:3b:94:18:05:40:d3: 24:be:e5:10:bd:56:fa:f1:0c:f3:e2:b8:6f:84:01: a4:29:7d:81:fe:1d:a8:a8:5c:45:f5:26:74:c9:ff: 0e:0f:ac:2a:5b:5a:f7:b7:b8:d9:f7:0b:ce:eb:77: 4f:e3:c9:a6:fa:9a:ca:e1:31:c3:42:84:cf:9f:6f: a5:3c:b6:b1:f8:aa:1d:56:0b:d4:ff:c2:c3:67:a3: 41:01:3b:9c:9e:4f:a3:c9:be:f2:72:51:bb:22:d2: 0d:88:c1:34:ad:8c:d7:ad:64:bc:11:87:b2:d5:85: e2:ea:01:8b:6e:2c:78:50:cd:4b:c6:11:30:e1:cc: 23:71:11:9b:5a:15:8f:99:11:b7:1e:42:0c:b9:cf: a1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8C:C0:21:70:5F:5E:72:FB:DC:2F:FB:DB:36:7B:B8:7C:BC:75:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/22badc46-7f2c-3330-9dcd-30f3a1bd5152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:b0:f3:bf:e4:49:80:1b:1b:61:44:91:7b:bd:27:aa:d7:a9: d7:57:eb:40:f4:0e:fe:0e:b6:e6:ad:2e:e5:d1:ed:68:6a:dc: 82:13:e7:c5:4f:07:ec:58:4d:f2:a2:2c:96:47:cc:9a:21:ac: ef:4e:69:73:53:dc:61:2d:a0:45:17:5b:18:49:a4:63:24:18: 5b:85:49:44:e7:58:61:71:6c:d4:ac:0c:ce:c9:82:a2:fe:e5: 2f:dc:bc:8a:82:1d:dd:d0:92:48:19:ca:1a:82:a8:93:b2:d3: 5f:f9:c7:5f:1d:ea:d1:ea:dd:2a:4c:73:71:f1:f2:e2:30:01: ca:76:23:91:0d:48:8a:eb:30:37:14:48:1d:15:ad:22:ae:2d: 8e:cf:06:26:06:32:41:24:f1:ad:52:84:50:49:c6:ec:ca:53: 9b:cf:74:e7:c8:01:4c:2d:64:c0:e6:a0:3a:5e:fc:bf:01:c3: 1b:c6:bd:c3:c0:e1:74:be:6d:ce:7b:d9:92:90:21:b3:4d:5f: 2a:bc:cb:91:f1:5b:b6:3f:13:f9:34:21:01:6d:97:ee:e2:99: 9e:6a:ee:3a:1d:f1:1b:5d:0e:34:50:e8:41:16:8f:cc:f5:0c: 46:d1:6f:4a:19:5d:b4:cb:29:ef:49:9b:2e:04:da:8b:e5:02: e3:31:c9:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeHXsuYq3fzHPg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk MmEzMGM3ZDUtNTU1Yi00ODY0LWJiNDgtMTFlNzIyZGZkZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5V0gqO5dWL5h4YVWOpJ4KZE1kqHwRvj04sY DfM/LKkfp8j9AtSxNgd7COQfjfNO/lsfRaB7N4pWe/wAvFBM2qVqaRhLD1BCFvxG rLocL1jgcBX+7TDlgWbnjmdrAmhtLKhzBAaAss//fKP1Cp25QKw7lBgFQNMkvuUQ vVb68Qzz4rhvhAGkKX2B/h2oqFxF9SZ0yf8OD6wqW1r3t7jZ9wvO63dP48mm+prK 4THDQoTPn2+lPLax+KodVgvU/8LDZ6NBATucnk+jyb7yclG7ItINiME0rYzXrWS8 EYey1YXi6gGLbix4UM1LxhEw4cwjcRGbWhWPmRG3HkIMuc+huQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyMwCFwX15y+9wv+9s2e7h8vHVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjJiYWRjNDYtN2YyYy0z MzMwLTlkY2QtMzBmM2ExYmQ1MTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiw87/kSYAbG2FEkXu9J6rXqddX60D0Dv4OtuatLuXR7Whq3IIT58VP B+xYTfKiLJZHzJohrO9OaXNT3GEtoEUXWxhJpGMkGFuFSUTnWGFxbNSsDM7JgqL+ 5S/cvIqCHd3QkkgZyhqCqJOy01/5x18d6tHq3SpMc3Hx8uIwAcp2I5ENSIrrMDcU SB0VrSKuLY7PBiYGMkEk8a1ShFBJxuzKU5vPdOfIAUwtZMDmoDpe/L8BwxvGvcPA 4XS+bc572ZKQIbNNXyq8y5HxW7Y/E/k0IQFtl+7imZ5q7jod8RtdDjRQ6EEWj8z1 DEbRb0oZXbTLKe9Jmy4E2ovlAuMxyV8= -----END CERTIFICATE-----Generated at Sun Oct 25 23:34:14 2026 by rpki-client