$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294ceaed-1002-37f7-9a30-ea6b169e9a3d.roa File: 294ceaed-1002-37f7-9a30-ea6b169e9a3d.roa (raw, json) Hash identifier: mh+A6xrrbPvxyLjSNaQ0bYzGYhcUdpPdTar/UEbBR9k= Subject key identifier: C5:0B:08:A8:F9:5E:33:F6:46:45:BE:B6:F1:AC:47:A8:C6:46:F2:A9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235F6B9ACDFC379B567480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294ceaed-1002-37f7-9a30-ea6b169e9a3d.roa Signing time: Wed 19 Aug 2026 18:04:05 +0000 ROA not before: Wed 19 Aug 2026 18:04:05 +0000 ROA not after: Sat 06 Apr 2030 04:00:00 +0000 asID: 3598 IP address blocks: 157.60.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5f:6b:9a:cd:fc:37:9b:56:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:05 2026 GMT Not After : Apr 6 04:00:00 2030 GMT Subject: CN=0c0047a4-720a-4294-afbf-a38284b106e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:59:22:2f:be:02:9d:83:77:3f:d2:c0:02:c6: f4:c7:57:f0:fc:20:64:48:8e:06:e6:bb:16:47:13: 61:66:31:a1:5f:0c:a2:01:83:f0:03:a4:a5:11:c7: c4:cb:a8:7b:3c:f1:ad:54:10:0f:bb:d2:b8:8b:9e: 8a:d3:01:5d:4a:5a:c0:a6:5d:43:9b:36:cf:61:45: 81:f9:02:90:31:8f:35:b0:87:94:bf:19:45:da:ac: c5:42:ea:34:46:d0:47:e5:90:bf:72:a8:04:f1:97: b9:0b:8c:27:42:3d:47:76:f4:e0:17:49:78:12:9d: f7:af:6b:c9:24:92:36:20:31:c3:17:d8:3d:3a:36: 0f:e4:63:c4:50:58:de:86:7e:12:19:c7:3d:34:d9: e8:8f:c3:8a:0d:32:4c:d9:31:11:c3:79:b6:6e:42: b0:e7:87:c1:6c:5c:cf:5d:85:8c:07:73:ec:31:c5: 15:e6:26:e5:33:d8:ae:04:85:ef:81:5c:5c:9d:0a: 9e:d9:1d:86:d2:07:74:e5:49:3b:24:b9:d2:54:12: 33:cb:5a:fc:c2:eb:15:c9:22:f8:6a:4f:7a:15:fb: 2c:16:fe:53:9b:1a:83:8a:2f:a4:da:db:ad:b9:dc: 78:f0:f0:a0:b1:77:e5:29:aa:e2:45:5d:62:8c:63: b2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0B:08:A8:F9:5E:33:F6:46:45:BE:B6:F1:AC:47:A8:C6:46:F2:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/294ceaed-1002-37f7-9a30-ea6b169e9a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 157.60.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:75:d6:b6:73:8e:9b:21:d7:e2:b2:dc:86:df:df:fe:b3:05: 1f:be:e4:45:84:fb:b8:5a:3e:38:b4:69:88:ad:ba:ee:bb:22: d9:9f:b5:3f:dd:20:3c:92:2b:86:63:10:9a:68:a5:09:3a:72: f2:a2:81:a3:c9:b2:18:4e:0b:a3:0d:88:0d:96:ef:fd:c5:23: b2:c3:84:ff:c8:fa:3c:52:f1:35:c0:f3:84:25:73:eb:1c:1b: da:44:4e:3a:f0:6d:68:c4:c7:f2:e5:5c:ef:2b:60:29:31:fd: 29:73:86:cf:09:d6:f2:bc:2c:69:c7:88:29:9f:ea:42:26:1a: 16:26:3e:06:d2:82:bf:ad:d8:29:ce:4d:4b:01:ca:ec:4b:70: 58:53:23:4f:21:1f:15:e2:fb:55:2a:6f:62:53:8d:2b:b5:8f: d3:43:d8:f5:c4:89:d2:86:6c:b8:25:d6:80:37:0c:e2:8a:f6: ad:e1:11:34:02:1b:93:37:33:ca:8c:ed:4c:e0:9a:d2:84:6c: 2d:82:5e:e4:ff:52:59:79:52:b8:5f:8a:e1:4e:be:b0:30:f3: 7c:0b:cb:86:23:4c:08:71:e2:7b:fe:31:e2:c1:e5:ac:f0:f9: d6:4c:39:c0:16:d7:5c:94:db:fd:f7:da:b8:55:50:d0:56:5b: a5:87:a9:d0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI19rms38N5tWdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwNVoXDTMwMDQwNjA0MDAwMFowLzEtMCsGA1UEAxMk MGMwMDQ3YTQtNzIwYS00Mjk0LWFmYmYtYTM4Mjg0YjEwNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1kiL74CnYN3P9LAAsb0x1fw/CBkSI4G5rsW RxNhZjGhXwyiAYPwA6SlEcfEy6h7PPGtVBAPu9K4i56K0wFdSlrApl1DmzbPYUWB +QKQMY81sIeUvxlF2qzFQuo0RtBH5ZC/cqgE8Ze5C4wnQj1HdvTgF0l4Ep33r2vJ JJI2IDHDF9g9OjYP5GPEUFjehn4SGcc9NNnoj8OKDTJM2TERw3m2bkKw54fBbFzP XYWMB3PsMcUV5iblM9iuBIXvgVxcnQqe2R2G0gd05Uk7JLnSVBIzy1r8wusVySL4 ak96FfssFv5TmxqDii+k2tutudx48PCgsXflKariRV1ijGOyEQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMULCKj5XjP2RkW+tvGsR6jGRvKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjk0Y2VhZWQtMTAwMi0z N2Y3LTlhMzAtZWE2YjE2OWU5YTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnTwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAq3XWtnOOmyHX4rLcht/f/rMFH77kRYT7uFo+OLRpiK267rsi2Z+1P90g PJIrhmMQmmilCTpy8qKBo8myGE4Low2IDZbv/cUjssOE/8j6PFLxNcDzhCVz6xwb 2kROOvBtaMTH8uVc7ytgKTH9KXOGzwnW8rwsaceIKZ/qQiYaFiY+BtKCv63YKc5N SwHK7EtwWFMjTyEfFeL7VSpvYlONK7WP00PY9cSJ0oZsuCXWgDcM4or2reERNAIb kzczyoztTOCa0oRsLYJe5P9SWXlSuF+K4U6+sDDzfAvLhiNMCHHie/4x4sHlrPD5 1kw5wBbXXJTb/ffauFVQ0FZbpYep0A== -----END CERTIFICATE-----Generated at Sat Sep 5 03:47:53 2026 by rpki-client