$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61a4fa51-1a84-3e59-bf89-878c6be739a7.roa File: 61a4fa51-1a84-3e59-bf89-878c6be739a7.roa (raw, json) Hash identifier: zvQbTpLKpt0+Sysypfpe8liG/o5DM4jIwkfXGKd+BO4= Subject key identifier: 27:FC:E7:D1:93:0A:B6:8A:71:01:F2:B6:F1:9D:37:28:A9:B7:57:18 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234DA5BC473B19E2C0E900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61a4fa51-1a84-3e59-bf89-878c6be739a7.roa Signing time: Wed 19 Aug 2026 18:03:57 +0000 ROA not before: Wed 19 Aug 2026 18:03:57 +0000 ROA not after: Fri 12 Apr 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.157.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4d:a5:bc:47:3b:19:e2:c0:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:57 2026 GMT Not After : Apr 12 04:00:00 2030 GMT Subject: CN=eb22da00-f9c0-46e0-a518-a587aef964c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:2c:11:cf:72:1b:b3:6e:8f:c5:e0:9c:d4: aa:50:ec:d1:98:77:c0:23:87:e5:59:9a:a7:6e:b3: 74:2d:01:e9:68:5e:13:ad:f8:23:91:86:89:4f:68: c0:97:ae:73:b9:af:fb:cb:08:2a:00:8e:c1:1e:48: 2b:93:34:36:ef:b0:d0:c0:1e:2c:56:d8:9a:4e:8f: 27:22:d4:87:10:98:a0:a7:b0:e9:7f:1c:40:10:20: 68:d5:c0:a5:1d:fa:7a:94:8c:dd:d1:d0:b4:b1:9d: 01:b4:3d:23:c6:55:96:c2:66:f3:68:63:79:46:e0: 5e:39:76:ee:63:d1:fa:31:d5:5b:63:f0:8e:df:2f: de:4c:30:ec:f5:73:ab:36:6f:ae:34:08:9a:1d:c2: 42:4d:d1:2c:92:d4:1b:2d:e9:21:c0:4e:3e:1f:84: ed:7c:26:ce:d9:af:38:9d:d2:a0:f9:cf:ca:90:b2: 15:f5:8f:69:74:dc:b7:34:ee:ec:75:f0:71:cc:72: 15:d1:c7:a3:64:d7:b9:38:2d:5f:b1:8d:fb:3b:c4: c3:f8:f3:4c:db:98:d7:08:80:a6:98:55:80:a1:f6: 97:ec:d7:ff:86:52:70:6b:96:fd:ff:53:88:a7:b8: 70:00:ad:72:d5:20:f8:bb:43:bc:3b:6e:76:be:92: f3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FC:E7:D1:93:0A:B6:8A:71:01:F2:B6:F1:9D:37:28:A9:B7:57:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/61a4fa51-1a84-3e59-bf89-878c6be739a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:f4:03:76:73:64:a8:53:a9:bc:fb:0b:5f:c1:77:de:d0:22: d5:ba:cd:bc:5f:2a:cc:c2:db:e6:f6:b4:c6:5e:83:a1:79:f5: 1b:49:fe:e5:5f:bf:e5:67:25:dc:20:63:10:80:19:bd:0e:c8: 70:56:2b:a2:b3:8a:fd:21:b4:71:cf:6b:02:9c:38:f5:0e:14: ee:83:2c:45:53:79:50:96:d8:12:39:14:48:0f:ad:f9:aa:98: 70:a2:a2:d6:18:84:a5:bc:08:73:af:eb:91:37:db:44:57:43: 54:36:3b:84:8a:02:e5:f4:8f:d5:fa:61:4e:48:72:5c:b6:15: 1b:42:62:59:b1:4d:0e:94:ca:4e:c4:1e:fb:6a:b3:b5:c7:1e: ab:bc:f1:b5:0c:49:3a:0c:5e:a1:1d:a5:d8:ad:50:c6:59:76: 0d:96:3f:27:fe:ce:a1:5a:0e:e9:da:11:31:a1:29:b5:a1:f4: 87:bf:fc:f4:08:67:53:e9:8e:f1:7c:8b:31:90:70:e8:a3:8d: 85:88:02:07:24:38:b7:e5:62:50:1a:3c:3f:5d:4a:54:33:be: 02:a8:fc:87:ea:92:f5:c0:c6:6b:79:ee:50:df:fe:2c:b6:e7: 0a:01:a1:4e:1f:54:b3:b6:4c:70:ec:a6:70:e1:37:10:6f:13: 1f:71:a3:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI02lvEc7GeLA6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1N1oXDTMwMDQxMjA0MDAwMFowLzEtMCsGA1UEAxMk ZWIyMmRhMDAtZjljMC00NmUwLWE1MTgtYTU4N2FlZjk2NGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybksEc9yG7Nuj8XgnNSqUOzRmHfAI4flWZqn brN0LQHpaF4TrfgjkYaJT2jAl65zua/7ywgqAI7BHkgrkzQ277DQwB4sVtiaTo8n ItSHEJigp7DpfxxAECBo1cClHfp6lIzd0dC0sZ0BtD0jxlWWwmbzaGN5RuBeOXbu Y9H6MdVbY/CO3y/eTDDs9XOrNm+uNAiaHcJCTdEsktQbLekhwE4+H4TtfCbO2a84 ndKg+c/KkLIV9Y9pdNy3NO7sdfBxzHIV0cejZNe5OC1fsY37O8TD+PNM25jXCICm mFWAofaX7Nf/hlJwa5b9/1OIp7hwAK1y1SD4u0O8O252vpLzJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCf859GTCraKcQHytvGdNyipt1cYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjFhNGZhNTEtMWE4NC0z ZTU5LWJmODktODc4YzZiZTczOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ0BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ70A3ZzZKhTqbz7C1/Bd97QItW6zbxfKszC2+b2tMZeg6F59RtJ/uVf v+VnJdwgYxCAGb0OyHBWK6Kziv0htHHPawKcOPUOFO6DLEVTeVCW2BI5FEgPrfmq mHCiotYYhKW8CHOv65E320RXQ1Q2O4SKAuX0j9X6YU5Icly2FRtCYlmxTQ6Uyk7E Hvtqs7XHHqu88bUMSToMXqEdpditUMZZdg2WPyf+zqFaDunaETGhKbWh9Ie//PQI Z1PpjvF8izGQcOijjYWIAgckOLflYlAaPD9dSlQzvgKo/IfqkvXAxmt57lDf/iy2 5woBoU4fVLO2THDspnDhNxBvEx9xo4k= -----END CERTIFICATE-----Generated at Sat Sep 5 05:24:53 2026 by rpki-client