$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43b1f317-f646-36d1-94de-1277414b2306.roa File: 43b1f317-f646-36d1-94de-1277414b2306.roa (raw, json) Hash identifier: xR7Iw42ViYeg9mFOzLHcuNNmudcz2yQCDLi0xusVgjw= Subject key identifier: 52:1B:EB:91:E6:C7:6C:15:BE:F2:57:59:B6:7A:7B:84:77:D6:50:4A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235F262D4624FB3519F1EC Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43b1f317-f646-36d1-94de-1277414b2306.roa Signing time: Wed 19 Aug 2026 18:04:05 +0000 ROA not before: Wed 19 Aug 2026 18:04:05 +0000 ROA not after: Wed 17 Apr 2030 04:00:00 +0000 asID: 3598 IP address blocks: 157.54.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5f:26:2d:46:24:fb:35:19:f1:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:05 2026 GMT Not After : Apr 17 04:00:00 2030 GMT Subject: CN=ff743a0c-b8d3-4deb-83f6-1bc359e817fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8e:46:0f:e8:c3:a8:b9:e6:b6:17:04:4c:b3: 6a:a5:bb:ac:87:16:06:81:5a:30:41:03:7e:4a:c2: 78:9d:9d:a5:4b:96:3c:13:63:1a:c0:e2:2f:80:c4: ef:0d:95:2f:a2:ea:ed:9e:90:6c:de:32:e2:9a:22: 64:a1:fc:36:87:18:7d:87:9e:65:66:fc:aa:a8:8e: 86:24:97:b8:f4:5d:4a:01:ed:84:86:10:18:6c:14: 2e:22:78:03:dd:20:72:fa:10:15:a9:35:9a:0d:40: aa:b2:84:1c:bd:9a:fc:a7:47:4c:43:83:88:d8:0e: a1:3b:14:e8:93:4c:b9:d8:61:9a:1e:ac:e4:78:0a: 6c:ec:16:65:33:98:14:b2:6e:45:de:cd:4b:c5:f5: 46:af:9a:a4:a1:25:b2:20:29:f5:c4:4b:a5:f3:dd: fa:bc:4f:3d:71:97:54:c3:05:32:f6:a2:20:c8:cd: d1:5c:e3:d8:27:01:44:8c:d5:aa:bd:c6:83:c6:ea: 86:d1:2d:f0:63:55:59:6a:c1:ae:4a:13:1e:d6:c3: 24:ec:58:da:04:ba:46:0b:bc:e0:5a:d8:c1:95:95: 57:0a:48:43:55:e3:c3:24:7c:97:8e:d6:de:b0:b2: 80:6d:3e:35:2c:f7:27:20:67:47:08:00:a5:19:e9: 1e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1B:EB:91:E6:C7:6C:15:BE:F2:57:59:B6:7A:7B:84:77:D6:50:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43b1f317-f646-36d1-94de-1277414b2306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 157.54.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:fc:83:a5:0e:6a:fe:e3:9b:94:4f:48:9d:64:98:45:13:9b: e8:7b:64:2e:4f:21:dc:8a:ef:34:b6:b8:98:76:96:fb:b2:aa: 4c:93:9a:cf:9d:ca:e4:1a:39:21:37:8c:40:eb:40:33:2d:31: 90:33:61:33:aa:52:f6:94:12:dc:2e:ff:94:f6:3c:92:e3:cd: 5b:80:61:67:9e:cc:43:bb:d3:57:81:66:23:57:31:e2:b8:45: f0:ac:71:b4:cb:0d:15:2a:fc:9c:87:db:8c:a8:51:12:06:56: 1a:65:01:36:32:b3:65:34:c5:21:28:5e:79:66:5a:fd:f1:c9: 2b:3c:12:bd:86:63:d0:c6:ac:e5:5b:05:a9:14:cb:7f:97:4f: d4:57:ad:04:7e:a9:c6:db:d5:77:c9:07:73:40:0f:66:16:08: 87:43:99:09:d5:49:17:f5:94:06:e2:ae:ac:4e:dd:9b:3a:2a: fb:97:4a:a0:8f:51:b2:81:93:70:01:db:be:51:82:c8:b9:56: c2:89:e3:3e:91:3c:9b:83:73:e3:36:61:90:b8:9f:7b:06:94: 83:92:e1:92:c8:91:67:68:55:70:a4:ab:a0:a3:df:47:a2:47: 5b:bc:d0:8b:90:b7:20:bc:c1:f1:cf:f0:a0:28:75:6b:80:9a: e6:5c:cb:0a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI18mLUYk+zUZ8ewwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwNVoXDTMwMDQxNzA0MDAwMFowLzEtMCsGA1UEAxMk ZmY3NDNhMGMtYjhkMy00ZGViLTgzZjYtMWJjMzU5ZTgxN2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo5GD+jDqLnmthcETLNqpbushxYGgVowQQN+ SsJ4nZ2lS5Y8E2MawOIvgMTvDZUvourtnpBs3jLimiJkofw2hxh9h55lZvyqqI6G JJe49F1KAe2EhhAYbBQuIngD3SBy+hAVqTWaDUCqsoQcvZr8p0dMQ4OI2A6hOxTo k0y52GGaHqzkeAps7BZlM5gUsm5F3s1LxfVGr5qkoSWyICn1xEul8936vE89cZdU wwUy9qIgyM3RXOPYJwFEjNWqvcaDxuqG0S3wY1VZasGuShMe1sMk7FjaBLpGC7zg WtjBlZVXCkhDVePDJHyXjtbesLKAbT41LPcnIGdHCAClGekeGwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFIb65Hmx2wVvvJXWbZ6e4R31lBKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDNiMWYzMTctZjY0Ni0z NmQxLTk0ZGUtMTI3NzQxNGIyMzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnTYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAnvyDpQ5q/uOblE9InWSYRROb6HtkLk8h3IrvNLa4mHaW+7KqTJOaz53K 5Bo5ITeMQOtAMy0xkDNhM6pS9pQS3C7/lPY8kuPNW4BhZ57MQ7vTV4FmI1cx4rhF 8KxxtMsNFSr8nIfbjKhREgZWGmUBNjKzZTTFISheeWZa/fHJKzwSvYZj0Mas5VsF qRTLf5dP1FetBH6pxtvVd8kHc0APZhYIh0OZCdVJF/WUBuKurE7dmzoq+5dKoI9R soGTcAHbvlGCyLlWwonjPpE8m4Nz4zZhkLifewaUg5LhksiRZ2hVcKSroKPfR6JH W7zQi5C3ILzB8c/woCh1a4Ca5lzLCg== -----END CERTIFICATE-----Generated at Sat Sep 5 03:47:53 2026 by rpki-client