$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa File: 4e67d494-acab-3047-896e-83e082ee4263.roa (raw, json) Hash identifier: uaPu+cQs3e3hHhLwV8jrTS401WB8xq1vBw3rfCBuGbc= Subject key identifier: C3:1B:2D:1C:36:50:50:4B:A2:6D:4E:01:FE:EB:33:C3:FB:C8:7F:D7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584ED432259306861F3931306A00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 8069 IP address blocks: 20.157.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:25:93:06:86:1f:39:31:30:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=ec6a9b34-735a-4350-bc39-4c00fd54921b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1f:d4:e2:bf:41:f3:27:f4:d6:cd:af:5c:4e: 32:ef:c8:00:86:f1:ec:a7:55:6d:92:b5:dd:5d:bc: 47:95:b4:06:1c:e3:33:e9:7d:86:cc:2a:ae:d6:05: b7:ba:4a:24:ea:59:97:6a:16:7e:a0:c3:7d:9d:b6: ea:73:64:d0:ed:39:e3:99:45:11:e3:c1:e5:dd:03: 85:7a:8e:85:6f:af:ff:da:74:ab:e0:78:81:93:64: a9:d8:00:a4:6d:81:e0:aa:24:9e:5b:93:0c:6c:60: 2f:20:7d:6b:d3:dd:55:19:38:ab:10:4f:0e:26:64: 75:f6:d3:08:cf:c3:ce:71:b4:be:33:42:34:55:53: 10:6a:d6:8b:37:cd:e9:73:31:d5:14:9a:7e:13:44: d4:f2:50:82:01:81:34:c4:69:15:0f:70:40:93:d3: bd:07:49:df:89:04:97:d4:8e:64:e5:9b:03:64:d7: 25:26:fa:10:8e:09:ba:af:41:1a:19:02:0c:09:b2: 05:3b:50:ce:f1:0c:07:5d:c1:8d:89:88:d5:35:6e: a2:37:52:f3:00:6c:49:61:9e:6b:d9:a2:91:70:79: 9b:c1:64:aa:95:99:ab:aa:30:3c:8d:6e:dc:30:68: 9f:cb:a4:52:63:55:a9:f5:7c:d1:b5:0d:0f:90:7f: 69:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1B:2D:1C:36:50:50:4B:A2:6D:4E:01:FE:EB:33:C3:FB:C8:7F:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ce:49:8d:4c:27:c1:22:5a:66:88:d9:68:87:a7:96:e3:9c: ea:1c:78:68:a7:ae:f3:16:da:61:f5:f8:6b:c2:21:2a:f3:99: aa:63:0c:e8:6a:0f:e8:3e:c3:83:82:5a:39:3d:7b:ac:c2:16: ca:fb:6a:82:be:b8:c0:41:9a:59:c7:da:5f:d5:61:54:70:a0: 31:0a:5c:95:cf:f2:74:63:29:94:03:e9:55:99:69:cc:fc:92: 1f:74:c6:53:a3:e1:be:5f:a5:22:52:3d:0c:75:29:63:0a:e9: 51:09:a9:10:90:51:1b:d0:69:65:fb:93:b0:2c:28:b6:d4:2a: 25:47:06:0f:f2:89:48:f6:01:74:37:53:96:22:fc:f4:8c:3f: e2:68:79:a3:e3:d2:d7:b7:7b:7a:e0:e3:09:53:26:b5:04:82: bf:cf:cb:ed:3e:b7:6a:38:c7:62:16:69:74:68:91:ed:b1:38: b1:ca:a4:96:e2:99:db:ae:b3:eb:17:58:fa:5e:64:61:67:06: 4b:e2:bd:b3:b0:56:23:06:71:98:53:06:4e:30:2c:13:fb:4e: 46:fe:81:f9:b3:15:22:2c:a4:76:dd:44:8e:bf:b5:a8:fb:f9: 82:19:89:54:34:13:17:7b:88:1c:43:12:3b:c0:01:8c:b4:05: cf:c6:dd:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMiWTBoYfOTEwagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZWM2YTliMzQtNzM1YS00MzUwLWJjMzktNGMwMGZkNTQ5MjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB/U4r9B8yf01s2vXE4y78gAhvHsp1VtkrXd XbxHlbQGHOMz6X2GzCqu1gW3ukok6lmXahZ+oMN9nbbqc2TQ7TnjmUUR48Hl3QOF eo6Fb6//2nSr4HiBk2Sp2ACkbYHgqiSeW5MMbGAvIH1r091VGTirEE8OJmR19tMI z8POcbS+M0I0VVMQataLN83pczHVFJp+E0TU8lCCAYE0xGkVD3BAk9O9B0nfiQSX 1I5k5ZsDZNclJvoQjgm6r0EaGQIMCbIFO1DO8QwHXcGNiYjVNW6iN1LzAGxJYZ5r 2aKRcHmbwWSqlZmrqjA8jW7cMGify6RSY1Wp9XzRtQ0PkH9ppQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMbLRw2UFBLom1OAf7rM8P7yH/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGU2N2Q0OTQtYWNhYi0z MDQ3LTg5NmUtODNlMDgyZWU0MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrOSY1MJ8EiWmaI2WiHp5bjnOoceGinrvMW2mH1+GvCISrzmapjDOhq D+g+w4OCWjk9e6zCFsr7aoK+uMBBmlnH2l/VYVRwoDEKXJXP8nRjKZQD6VWZacz8 kh90xlOj4b5fpSJSPQx1KWMK6VEJqRCQURvQaWX7k7AsKLbUKiVHBg/yiUj2AXQ3 U5Yi/PSMP+JoeaPj0te3e3rg4wlTJrUEgr/Py+0+t2o4x2IWaXRoke2xOLHKpJbi mduus+sXWPpeZGFnBkvivbOwViMGcZhTBk4wLBP7Tkb+gfmzFSIspHbdRI6/taj7 +YIZiVQ0Exd7iBxDEjvAAYy0Bc/G3Ws= -----END CERTIFICATE-----Generated at Sat Sep 5 07:04:50 2026 by rpki-client