$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/94d6b998-c6d7-3cf9-8da9-36a654722c28.roa File: 94d6b998-c6d7-3cf9-8da9-36a654722c28.roa (raw, json) Hash identifier: 2vN5zDmz/TlhvMpRou6OrM+QY5scdzo7t+r4vdwSmMQ= Subject key identifier: 31:C4:D0:B4:C4:7D:00:41:58:B2:79:B9:DA:D8:36:6D:F9:E4:31:6B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234D8279EEF1269034C0E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/94d6b998-c6d7-3cf9-8da9-36a654722c28.roa Signing time: Wed 19 Aug 2026 18:03:57 +0000 ROA not before: Wed 19 Aug 2026 18:03:57 +0000 ROA not after: Tue 12 Mar 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.157.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4d:82:79:ee:f1:26:90:34:c0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:57 2026 GMT Not After : Mar 12 04:00:00 2030 GMT Subject: CN=5bc9de60-8545-44a3-84de-507b6b5700a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:57:ae:f0:71:23:84:05:b7:a6:d5:13:8f:42: 65:7d:64:a8:f8:1c:73:65:b1:4f:32:bb:93:7d:8e: e1:e5:ba:a0:6a:1f:b4:b4:bf:4d:f5:50:e2:03:15: 98:4d:8c:ed:ea:8d:a9:28:fd:cd:a4:8b:74:aa:6d: 72:a2:e4:98:28:8e:a1:bf:1e:2d:f9:4d:43:77:17: 0d:64:69:b9:fc:02:af:21:32:5d:df:b1:92:c0:70: 11:78:d9:20:cd:1d:a2:e4:cb:47:71:e6:50:06:56: da:56:3e:ea:34:5a:9d:5b:93:4b:a9:8c:a1:83:57: 3c:c9:df:f3:6f:89:67:5d:df:dd:2a:99:b2:e8:de: f3:f8:06:1e:30:c6:58:b3:24:ed:33:8e:25:8c:5d: da:59:79:c5:17:42:8c:ff:e5:2a:28:27:fb:e8:0c: 99:9d:6a:04:76:f9:cb:6d:16:13:e1:4e:0c:0a:3f: d0:ad:4f:a6:9a:20:09:3e:6f:14:27:a1:83:7b:cb: d3:4b:9d:e6:d9:49:d5:ed:6d:eb:bd:2b:b6:d5:b2: 94:87:f7:ce:b8:12:fb:04:59:49:a0:3a:99:48:41: 3d:28:e0:39:5a:07:10:36:37:84:81:ea:2f:3e:6e: 1b:c1:ea:19:5c:24:f0:c4:03:d4:7d:cf:9b:87:df: 43:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C4:D0:B4:C4:7D:00:41:58:B2:79:B9:DA:D8:36:6D:F9:E4:31:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/94d6b998-c6d7-3cf9-8da9-36a654722c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d0:30:b1:63:e7:c5:7f:27:9c:38:cb:90:17:3d:c6:05:fa: 25:97:cd:9f:95:d1:74:38:b0:41:dc:51:b6:3a:84:ca:55:d7: c7:8d:e4:1e:b4:dd:19:0b:5e:88:ff:7a:b1:27:7d:aa:f7:c8: 53:2f:78:19:38:8a:2b:bd:48:a6:11:fb:f4:2d:e9:bb:15:2c: 7e:d2:fe:22:85:1c:2e:d1:d1:12:7a:af:9f:8b:ac:48:8b:5d: a6:5e:05:92:24:1e:48:29:62:a9:e5:85:92:a6:ea:16:48:45: f3:70:2e:ee:a9:ff:3e:75:b0:89:26:4a:8b:dc:ef:1c:61:1e: 88:f6:cb:d4:69:36:54:89:57:26:d0:45:ef:22:64:6c:21:7c: 65:5b:c2:19:a6:0d:5e:98:53:1e:e1:dc:0c:f2:68:b4:56:2e: 62:b6:89:12:1d:fa:33:2e:8e:f9:d5:76:9f:f7:cc:35:71:3c: f2:9c:fd:dd:e8:79:93:34:d0:d3:3c:8d:9d:af:86:bf:01:c6: ec:33:b2:1d:95:d3:34:6b:90:f0:46:9d:87:d0:c7:78:32:f9: 24:7f:b8:70:6b:86:3a:55:fe:b4:c3:1f:bb:c7:bd:13:51:36: eb:22:72:cf:8f:ce:9b:9b:8d:69:36:30:aa:db:94:ad:f3:61: 0d:63:85:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI02Cee7xJpA0wOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1N1oXDTMwMDMxMjA0MDAwMFowLzEtMCsGA1UEAxMk NWJjOWRlNjAtODU0NS00NGEzLTg0ZGUtNTA3YjZiNTcwMGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVeu8HEjhAW3ptUTj0JlfWSo+BxzZbFPMruT fY7h5bqgah+0tL9N9VDiAxWYTYzt6o2pKP3NpIt0qm1youSYKI6hvx4t+U1DdxcN ZGm5/AKvITJd37GSwHAReNkgzR2i5MtHceZQBlbaVj7qNFqdW5NLqYyhg1c8yd/z b4lnXd/dKpmy6N7z+AYeMMZYsyTtM44ljF3aWXnFF0KM/+UqKCf76AyZnWoEdvnL bRYT4U4MCj/QrU+mmiAJPm8UJ6GDe8vTS53m2UnV7W3rvSu21bKUh/fOuBL7BFlJ oDqZSEE9KOA5WgcQNjeEgeovPm4bweoZXCTwxAPUfc+bh99D/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHE0LTEfQBBWLJ5udrYNm355DFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTRkNmI5OTgtYzZkNy0z Y2Y5LThkYTktMzZhNjU0NzIyYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7QMLFj58V/J5w4y5AXPcYF+iWXzZ+V0XQ4sEHcUbY6hMpV18eN5B60 3RkLXoj/erEnfar3yFMveBk4iiu9SKYR+/Qt6bsVLH7S/iKFHC7R0RJ6r5+LrEiL XaZeBZIkHkgpYqnlhZKm6hZIRfNwLu6p/z51sIkmSovc7xxhHoj2y9RpNlSJVybQ Re8iZGwhfGVbwhmmDV6YUx7h3AzyaLRWLmK2iRId+jMujvnVdp/3zDVxPPKc/d3o eZM00NM8jZ2vhr8Bxuwzsh2V0zRrkPBGnYfQx3gy+SR/uHBrhjpV/rTDH7vHvRNR Nusics+PzpubjWk2MKrblK3zYQ1jhe4= -----END CERTIFICATE-----Generated at Sat Sep 5 07:15:38 2026 by rpki-client