$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be6d61d-293d-3ed8-a651-1bf004bc5280.roa File: 8be6d61d-293d-3ed8-a651-1bf004bc5280.roa (raw, json) Hash identifier: FTbWMk8Q7RyNjtwKAt3ZGaYouvGV42dV6+zuKz5FHOA= Subject key identifier: 37:E0:02:F3:01:57:5A:2F:5C:8C:CB:60:D3:6B:9B:C6:56:EF:0D:25 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DF4DB6350505E6CAE696C0300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be6d61d-293d-3ed8-a651-1bf004bc5280.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.157.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:63:50:50:5e:6c:ae:69:6c:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=3280f7e0-f56c-49be-9ef3-a4673b161689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:20:89:de:e8:04:a5:ca:87:09:bd:e4:62: 79:b1:33:2a:6f:3d:d4:0d:ea:01:f4:8b:01:7d:97: b4:6e:ed:a4:e6:54:cf:8e:bb:6f:fc:8d:9d:78:9f: c8:df:2a:f5:45:02:51:05:02:b3:d4:dc:94:cb:b9: 2a:26:42:5a:87:96:dd:48:b6:2f:89:4a:96:bc:2a: 9f:be:bd:26:9d:60:4d:03:1f:df:97:4a:38:b3:83: 04:28:37:1c:4e:21:8c:04:f3:e3:61:9f:ad:82:4b: 61:79:05:31:7e:42:9d:fb:be:8d:64:b6:9b:4f:1f: c0:1f:c7:77:55:af:b2:f4:de:03:c6:9b:21:14:3b: 2a:cc:cb:81:a1:bf:d6:fb:32:c0:89:82:03:15:d1: a9:1a:3f:43:1d:fd:b5:57:b5:44:a6:dd:12:24:5e: 92:b5:dd:1d:22:e0:57:f5:22:fe:d3:2a:ff:6f:8a: 23:dd:d1:3f:6a:a1:a4:34:65:df:c8:bd:b9:6a:cb: 09:80:5f:31:da:77:e8:5a:f7:80:40:8e:9a:f2:d4: 8a:b9:73:bc:69:59:9f:5b:8c:4a:a6:59:a8:bf:cb: db:2b:9a:6d:8f:ea:44:f1:e2:36:7b:b0:c1:da:13: fa:ac:9f:12:2c:51:ab:36:6e:66:7f:c2:97:d9:0a: 53:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E0:02:F3:01:57:5A:2F:5C:8C:CB:60:D3:6B:9B:C6:56:EF:0D:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be6d61d-293d-3ed8-a651-1bf004bc5280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d6:f9:3e:d1:0a:47:9b:4f:ba:63:ca:15:17:2a:97:ab:12: b2:f8:67:40:07:26:3f:f2:84:4e:fe:49:ff:97:fc:de:74:ef: 07:e8:04:bc:87:0a:7a:0b:62:e2:36:41:d4:e4:09:02:fe:66: 75:f2:1d:27:7f:0b:11:62:89:8a:42:44:4f:d8:97:95:22:4c: 29:f0:e9:9f:f1:1f:0f:4d:34:f8:18:fc:7c:d3:f7:a7:d0:3d: 2c:00:88:d8:10:34:cd:f7:a7:7b:63:5e:b4:f5:05:78:f5:26: ee:6c:a2:39:13:29:6b:e8:e4:8f:fa:59:7a:b5:a2:07:13:4a: cc:1c:c4:f3:08:d7:7b:af:6f:43:98:7b:39:c8:e0:68:6f:8e: 92:bf:b5:8c:e6:e0:61:cf:f8:40:53:8a:67:9f:e1:96:a8:5b: 59:de:4d:72:fa:d0:cc:ab:0d:56:87:1d:c5:d9:8d:36:2e:b9: fc:89:3b:71:b6:c8:fb:52:49:77:8a:21:75:08:41:03:db:ae: ea:db:b6:bf:12:d7:8e:46:88:f0:b4:8c:25:8d:f5:ab:df:10: d8:76:e3:29:5d:1a:5d:0d:6c:2b:27:35:ae:f4:e5:cf:4d:04: 80:f7:64:af:f1:10:ee:50:75:4a:74:a1:6a:96:26:c9:87:1f: e3:63:e7:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3022NQUF5srmlsAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk MzI4MGY3ZTAtZjU2Yy00OWJlLTllZjMtYTQ2NzNiMTYxNjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2ggid7oBKXKhwm95GJ5sTMqbz3UDeoB9IsB fZe0bu2k5lTPjrtv/I2deJ/I3yr1RQJRBQKz1NyUy7kqJkJah5bdSLYviUqWvCqf vr0mnWBNAx/fl0o4s4MEKDccTiGMBPPjYZ+tgktheQUxfkKd+76NZLabTx/AH8d3 Va+y9N4DxpshFDsqzMuBob/W+zLAiYIDFdGpGj9DHf21V7VEpt0SJF6Std0dIuBX 9SL+0yr/b4oj3dE/aqGkNGXfyL25assJgF8x2nfoWveAQI6a8tSKuXO8aVmfW4xK plmov8vbK5ptj+pE8eI2e7DB2hP6rJ8SLFGrNm5mf8KX2QpTfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfgAvMBV1ovXIzLYNNrm8ZW7w0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGJlNmQ2MWQtMjkzZC0z ZWQ4LWE2NTEtMWJmMDA0YmM1MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDW+T7RCkebT7pjyhUXKperErL4Z0AHJj/yhE7+Sf+X/N507wfoBLyH CnoLYuI2QdTkCQL+ZnXyHSd/CxFiiYpCRE/Yl5UiTCnw6Z/xHw9NNPgY/HzT96fQ PSwAiNgQNM33p3tjXrT1BXj1Ju5sojkTKWvo5I/6WXq1ogcTSswcxPMI13uvb0OY eznI4GhvjpK/tYzm4GHP+EBTimef4ZaoW1neTXL60MyrDVaHHcXZjTYuufyJO3G2 yPtSSXeKIXUIQQPbrurbtr8S145GiPC0jCWN9avfENh24yldGl0NbCsnNa705c9N BID3ZK/xEO5QdUp0oWqWJsmHH+Nj54s= -----END CERTIFICATE-----Generated at Sat Jun 6 14:46:51 2026 by rpki-client