$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/aad1b196-7c7d-379f-a3a2-b297a12a913e.roa File: aad1b196-7c7d-379f-a3a2-b297a12a913e.roa (raw, json) Hash identifier: h0y2Xei+Z6wWvlkL0E2zLmp049XYYbJRDAYzuGIkt/g= Subject key identifier: 79:7D:2C:D8:4F:3F:99:67:E3:E3:4E:50:0E:E8:37:22:A7:02:DE:8B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE42352C25BCB6B5867F2B740 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/aad1b196-7c7d-379f-a3a2-b297a12a913e.roa Signing time: Wed 19 Aug 2026 18:03:59 +0000 ROA not before: Wed 19 Aug 2026 18:03:59 +0000 ROA not after: Mon 25 Mar 2030 04:00:00 +0000 asID: 8068 IP address blocks: 150.171.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:52:c2:5b:cb:6b:58:67:f2:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:59 2026 GMT Not After : Mar 25 04:00:00 2030 GMT Subject: CN=959e4fc1-1512-433e-a082-ab0b76d3340d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:29:3e:6f:33:9c:bb:ab:b2:c2:0e:d5:7e:c4: 23:30:bf:e7:d2:d7:62:be:b8:60:1d:3b:86:67:d7: 85:2e:d5:83:aa:2b:73:fc:16:e3:46:ed:9c:3e:3e: 13:3a:db:f7:5c:7e:ad:80:07:93:9a:17:3e:c1:7c: d0:5a:02:dc:cd:b4:7c:ff:80:e9:51:cb:aa:a0:08: 59:c5:d9:69:18:2b:bd:fc:a1:eb:68:0e:41:20:ba: f2:3a:8a:12:c0:aa:17:c6:bf:67:6d:6f:71:4a:16: 80:1b:4a:bc:25:be:e7:16:da:a7:26:68:dc:93:94: af:2c:28:9c:cd:a4:88:17:5d:b0:16:fa:52:17:3f: ff:8c:3d:ad:94:4c:56:38:8e:ed:de:28:18:a6:fb: 3d:d4:38:5d:92:c7:d7:e3:b7:27:2f:6c:ce:78:77: a4:ea:5d:3d:44:49:60:73:46:c5:0d:6b:91:c6:93: 72:a8:18:ff:d0:be:4d:04:05:29:63:d7:16:f3:b8: 17:a3:9a:2d:52:59:57:3e:34:d7:c2:65:64:1c:12: 95:e6:07:23:70:6c:a2:9a:d0:3c:11:c4:d7:57:ba: 9e:31:d7:ce:e7:aa:37:0f:79:03:9b:3b:ec:65:aa: 8c:9e:15:f9:fb:0f:b1:e3:d9:ce:52:49:e6:47:e3: ee:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7D:2C:D8:4F:3F:99:67:E3:E3:4E:50:0E:E8:37:22:A7:02:DE:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/aad1b196-7c7d-379f-a3a2-b297a12a913e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 150.171.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:13:e3:90:1c:33:84:a9:07:af:f3:0f:91:d0:81:55:0a:47: e5:83:7e:f7:8c:53:30:e7:07:92:be:aa:17:c5:2e:85:35:99: ab:c1:6c:77:1e:73:61:5d:c0:48:50:fe:76:16:7a:4c:8c:70: f3:50:e6:f7:98:0d:9a:e1:dd:5d:ce:6f:a3:aa:d2:2f:3c:56: 8b:d0:49:fd:bd:13:fb:76:ea:bf:43:b6:5b:7a:59:ee:59:bb: f6:82:93:0a:8c:a3:54:d0:89:4e:0c:cd:9a:5a:34:7d:4b:2b: 73:39:b6:c6:d0:95:18:3d:09:92:3a:da:38:61:45:fc:71:86: 9b:0b:d6:a9:4c:84:b2:03:d5:45:09:74:c8:12:50:bc:6e:77: be:9c:3d:ea:3c:c0:ee:70:d2:7f:e1:32:87:10:50:16:29:e3: 18:c1:dd:68:a3:1f:62:c4:c3:be:bb:e3:e0:6f:55:7e:f7:a0: c7:59:17:07:e3:9a:8a:7e:08:9b:ea:2e:89:6e:52:e3:80:71: be:1f:1d:31:a3:92:55:5d:4e:69:1f:c3:43:65:d7:fe:ce:5b: ca:34:4e:3d:bb:2a:05:8e:0c:f0:93:50:3b:92:a3:76:f9:ab: dd:01:96:48:a8:58:e5:d0:3f:ad:86:1b:53:18:4c:02:8f:9b: a3:79:e4:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1LCW8trWGfyt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1OVoXDTMwMDMyNTA0MDAwMFowLzEtMCsGA1UEAxMk OTU5ZTRmYzEtMTUxMi00MzNlLWEwODItYWIwYjc2ZDMzNDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSk+bzOcu6uywg7VfsQjML/n0tdivrhgHTuG Z9eFLtWDqitz/BbjRu2cPj4TOtv3XH6tgAeTmhc+wXzQWgLczbR8/4DpUcuqoAhZ xdlpGCu9/KHraA5BILryOooSwKoXxr9nbW9xShaAG0q8Jb7nFtqnJmjck5SvLCic zaSIF12wFvpSFz//jD2tlExWOI7t3igYpvs91DhdksfX47cnL2zOeHek6l09RElg c0bFDWuRxpNyqBj/0L5NBAUpY9cW87gXo5otUllXPjTXwmVkHBKV5gcjcGyimtA8 EcTXV7qeMdfO56o3D3kDmzvsZaqMnhX5+w+x49nOUknmR+PuzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHl9LNhPP5ln4+NOUA7oNyKnAt6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWFkMWIxOTYtN2M3ZC0z NzlmLWEzYTItYjI5N2ExMmE5MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlqsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcT45AcM4SpB6/zD5HQgVUKR+WDfveMUzDnB5K+qhfFLoU1mavBbHce c2FdwEhQ/nYWekyMcPNQ5veYDZrh3V3Ob6Oq0i88VovQSf29E/t26r9Dtlt6We5Z u/aCkwqMo1TQiU4MzZpaNH1LK3M5tsbQlRg9CZI62jhhRfxxhpsL1qlMhLID1UUJ dMgSULxud76cPeo8wO5w0n/hMocQUBYp4xjB3WijH2LEw7674+BvVX73oMdZFwfj mop+CJvqLoluUuOAcb4fHTGjklVdTmkfw0Nl1/7OW8o0Tj27KgWODPCTUDuSo3b5 q90BlkioWOXQP62GG1MYTAKPm6N55LI= -----END CERTIFICATE-----Generated at Sat Sep 5 06:50:54 2026 by rpki-client