$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5b07e83-d005-3c01-b29c-2cab9f2a1015.roa File: b5b07e83-d005-3c01-b29c-2cab9f2a1015.roa (raw, json) Hash identifier: xwIZIecBRrBzJKi+29HHL6XcW0UOlq3IyG3AmQ80jAY= Subject key identifier: 50:41:BF:22:02:94:DC:90:C7:EE:1C:6E:EC:3D:A4:D0:DC:B1:D1:C0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235F321CA12E3A30F386C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5b07e83-d005-3c01-b29c-2cab9f2a1015.roa Signing time: Wed 19 Aug 2026 18:04:05 +0000 ROA not before: Wed 19 Aug 2026 18:04:05 +0000 ROA not after: Sat 06 Apr 2030 04:00:00 +0000 asID: 3598 IP address blocks: 157.57.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5f:32:1c:a1:2e:3a:30:f3:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:05 2026 GMT Not After : Apr 6 04:00:00 2030 GMT Subject: CN=aaa61e63-cd8d-43a9-9651-4b19c16927e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3f:23:63:12:cf:37:70:ea:57:6f:07:b9:de: 93:06:44:51:28:ee:18:97:52:88:50:7e:bb:8d:f0: 39:33:a4:43:b0:ab:f8:c0:4a:45:88:27:c9:f1:9e: 53:c8:2e:3c:78:84:ce:d2:ee:ca:d2:49:98:ce:15: d9:3e:e3:15:32:cc:6e:c7:9f:2e:15:8a:a0:31:20: 47:29:be:fa:01:1b:ad:4e:20:64:d9:fc:46:3a:fc: 8e:02:10:22:ad:87:ec:34:6b:b2:20:2c:94:bb:66: 2d:ce:40:0a:0f:81:7e:0d:87:d0:f8:ce:c2:65:3f: 7b:13:4c:9a:ea:8c:81:86:8d:c3:4d:da:6b:b7:7d: e0:1c:16:c0:8b:a0:11:85:0c:c1:1d:89:22:2c:46: 72:02:af:48:33:1a:2f:d1:57:8f:bf:a6:7e:24:ba: 0f:85:a6:8d:6d:45:28:2b:80:d2:62:2f:5b:e4:b6: 28:91:33:d4:ca:0e:88:41:9c:8c:71:02:dd:32:df: 9b:cb:b7:74:2f:c4:50:66:60:9e:9e:bd:d8:f1:cd: aa:47:9b:c3:1b:74:c9:1d:57:84:a4:e1:e8:95:a0: 37:de:b5:a6:26:a1:13:f9:41:6d:d2:1e:85:b2:f6: 5d:d6:37:8e:62:13:10:96:e7:19:5d:60:a8:36:d5: 43:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:41:BF:22:02:94:DC:90:C7:EE:1C:6E:EC:3D:A4:D0:DC:B1:D1:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5b07e83-d005-3c01-b29c-2cab9f2a1015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 157.57.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d1:40:32:10:1e:b3:06:47:09:5e:ed:bb:dc:33:6b:79:6f: d0:76:40:12:77:38:f9:06:0b:14:89:16:98:08:d2:06:9e:dc: 20:cb:04:b8:bd:17:a3:53:31:89:c5:b2:e7:0d:ec:ff:cb:c2: 8e:0b:56:0e:96:cf:11:6f:fe:e7:bb:7b:43:5d:54:56:c5:ac: 69:c4:46:35:37:11:2b:49:f2:b3:21:a7:4f:eb:11:ec:f1:1e: 50:b2:3b:24:38:ff:00:8a:b6:b4:16:b6:f7:36:c5:70:97:8e: 38:19:c6:61:c2:b4:fd:8e:0c:f5:04:2c:a4:47:3e:2a:3e:fa: 4d:40:04:ea:d7:75:eb:5e:99:f3:62:97:24:41:9a:3f:c9:ac: d5:25:8a:90:58:22:82:ec:00:4b:3f:54:98:74:e0:54:92:67: 27:e5:32:d9:6e:82:3e:80:d9:c5:07:da:be:0d:78:57:d5:5e: e7:59:b2:3d:fe:66:00:34:77:e3:ac:7e:4a:dd:39:44:a3:cf: a1:3d:82:ef:56:4f:cf:fb:a2:a0:d4:9e:c4:99:52:b2:5d:d8: fb:31:01:2e:16:13:a3:04:36:ac:f1:f8:ed:d1:78:5d:8c:17: d6:5a:12:ff:67:79:33:63:d5:56:c1:93:dc:27:a6:26:ed:c3: 96:cc:bd:9e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI18yHKEuOjDzhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwNVoXDTMwMDQwNjA0MDAwMFowLzEtMCsGA1UEAxMk YWFhNjFlNjMtY2Q4ZC00M2E5LTk2NTEtNGIxOWMxNjkyN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz8jYxLPN3DqV28Hud6TBkRRKO4Yl1KIUH67 jfA5M6RDsKv4wEpFiCfJ8Z5TyC48eITO0u7K0kmYzhXZPuMVMsxux58uFYqgMSBH Kb76ARutTiBk2fxGOvyOAhAirYfsNGuyICyUu2YtzkAKD4F+DYfQ+M7CZT97E0ya 6oyBho3DTdprt33gHBbAi6ARhQzBHYkiLEZyAq9IMxov0VePv6Z+JLoPhaaNbUUo K4DSYi9b5LYokTPUyg6IQZyMcQLdMt+by7d0L8RQZmCenr3Y8c2qR5vDG3TJHVeE pOHolaA33rWmJqET+UFt0h6FsvZd1jeOYhMQlucZXWCoNtVDyQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFBBvyIClNyQx+4cbuw9pNDcsdHAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjViMDdlODMtZDAwNS0z YzAxLWIyOWMtMmNhYjlmMmExMDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnTkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAENFAMhAeswZHCV7tu9wza3lv0HZAEnc4+QYLFIkWmAjSBp7cIMsEuL0X o1MxicWy5w3s/8vCjgtWDpbPEW/+57t7Q11UVsWsacRGNTcRK0nysyGnT+sR7PEe ULI7JDj/AIq2tBa29zbFcJeOOBnGYcK0/Y4M9QQspEc+Kj76TUAE6td1616Z82KX JEGaP8ms1SWKkFgiguwASz9UmHTgVJJnJ+Uy2W6CPoDZxQfavg14V9Ve51myPf5m ADR346x+St05RKPPoT2C71ZPz/uioNSexJlSsl3Y+zEBLhYTowQ2rPH47dF4XYwX 1loS/2d5M2PVVsGT3CemJu3Dlsy9ng== -----END CERTIFICATE-----Generated at Sat Sep 5 03:47:39 2026 by rpki-client