$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1ebbbb4a-9c96-331f-b46f-8f62014fece7.roa File: 1ebbbb4a-9c96-331f-b46f-8f62014fece7.roa (raw, json) Hash identifier: uXRn25/BLNbCbDCqLXbp5QHzONVfkWPUv15r8Oqr89Q= Subject key identifier: EF:C7:A6:61:4C:81:DF:5F:58:0C:3F:8D:C5:F0:B0:21:C6:04:08:19 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3052852FF3E46EAC3EEF0500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1ebbbb4a-9c96-331f-b46f-8f62014fece7.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.157.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:85:2f:f3:e4:6e:ac:3e:ef:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=3a58dc8e-5475-4e2d-bde7-18259531632c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5d:91:8c:be:34:2f:04:1a:48:a8:94:d5:06: ba:f8:89:e1:92:04:28:f9:1d:8e:9f:30:8b:e6:26: 99:6a:73:6c:c3:87:42:ea:25:59:d4:20:62:fe:e0: e2:b2:f9:a1:db:68:33:80:47:c7:7a:98:21:33:3f: 29:65:1f:27:55:c9:61:1b:c7:7d:f3:75:32:bd:f3: b7:71:9e:d0:8d:b1:36:c0:8c:47:ef:33:a4:92:79: 84:16:11:6c:98:83:b8:73:95:ef:92:6e:b1:93:55: 4a:0b:fd:44:cf:ff:4d:49:4c:a9:16:6d:1c:4d:de: 7e:40:84:c0:40:13:d8:fa:72:bb:45:4d:69:4c:79: e8:1b:fb:b1:4e:32:59:8a:5e:fe:3b:c8:b5:64:eb: f7:c9:57:15:b9:e6:71:99:c8:5d:1e:59:0f:bd:07: 6f:b0:31:08:da:1c:14:57:11:cf:6e:14:4e:dd:fe: e6:52:8d:15:eb:25:04:e5:ec:71:e7:b6:0f:bf:87: 1d:49:d3:7a:25:1f:26:e1:ad:1e:48:cc:91:6b:3a: 2e:51:30:7a:f4:41:50:09:d8:9b:6b:f8:5b:ee:7f: 2b:e9:e8:02:ca:bb:82:eb:80:3b:c0:ba:61:f9:e9: a1:fc:bb:3f:62:eb:c1:99:e5:15:fa:4a:2d:b8:f3: 57:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C7:A6:61:4C:81:DF:5F:58:0C:3F:8D:C5:F0:B0:21:C6:04:08:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1ebbbb4a-9c96-331f-b46f-8f62014fece7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:05:1c:6d:fa:7b:62:b8:bf:1a:c3:81:74:5f:78:0e:34:4d: d8:71:78:5a:05:06:bc:fb:40:77:c4:44:9a:79:2e:b7:ae:bf: 83:ad:73:ec:bc:8a:c3:6a:7f:af:eb:f7:09:f0:21:15:72:5c: e3:8a:cf:0b:d4:f0:f7:06:69:9e:13:c6:9b:69:90:78:d7:57: 5f:db:7a:c8:bc:a9:c6:f1:aa:1c:54:30:e3:20:76:d2:75:1c: f9:d7:cd:cc:fb:72:26:dd:01:9a:a5:70:d2:50:02:7d:26:25: 53:9e:0f:a6:d8:0e:92:c3:78:78:30:9c:c6:c8:03:6c:b8:86: af:8e:7b:4d:fa:4a:8a:96:f5:2d:68:8a:83:7e:80:5c:e3:6d: 6a:5f:74:cf:13:93:c9:2a:36:4d:3a:3e:e0:9a:d0:cc:3a:18: d0:69:a9:9b:ba:c9:7a:d0:1f:9a:27:9d:13:f5:5b:71:da:90: bb:21:86:f4:c8:5b:53:31:d7:53:1e:72:81:fe:d2:07:94:93: 2d:bd:42:50:a9:05:d2:25:5a:bc:bd:0e:27:07:9f:3e:e1:12: 6f:30:e5:96:83:46:49:a4:7e:30:86:47:a1:2f:c7:87:92:b2: 20:7a:73:4a:ef:9c:e8:62:70:8c:67:f0:23:96:ea:e3:cd:68: 4b:f0:f9:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUoUv8+RurD7vBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk M2E1OGRjOGUtNTQ3NS00ZTJkLWJkZTctMTgyNTk1MzE2MzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl2RjL40LwQaSKiU1Qa6+InhkgQo+R2OnzCL 5iaZanNsw4dC6iVZ1CBi/uDisvmh22gzgEfHepghMz8pZR8nVclhG8d983UyvfO3 cZ7QjbE2wIxH7zOkknmEFhFsmIO4c5Xvkm6xk1VKC/1Ez/9NSUypFm0cTd5+QITA QBPY+nK7RU1pTHnoG/uxTjJZil7+O8i1ZOv3yVcVueZxmchdHlkPvQdvsDEI2hwU VxHPbhRO3f7mUo0V6yUE5exx57YPv4cdSdN6JR8m4a0eSMyRazouUTB69EFQCdib a/hb7n8r6egCyruC64A7wLph+emh/Ls/YuvBmeUV+kotuPNX1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/HpmFMgd9fWAw/jcXwsCHGBAgZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMWViYmJiNGEtOWM5Ni0z MzFmLWI0NmYtOGY2MjAxNGZlY2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEFHG36e2K4vxrDgXRfeA40TdhxeFoFBrz7QHfERJp5Lreuv4Otc+y8 isNqf6/r9wnwIRVyXOOKzwvU8PcGaZ4TxptpkHjXV1/besi8qcbxqhxUMOMgdtJ1 HPnXzcz7cibdAZqlcNJQAn0mJVOeD6bYDpLDeHgwnMbIA2y4hq+Oe036SoqW9S1o ioN+gFzjbWpfdM8Tk8kqNk06PuCa0Mw6GNBpqZu6yXrQH5onnRP1W3HakLshhvTI W1Mx11MecoH+0geUky29QlCpBdIlWry9DicHnz7hEm8w5ZaDRkmkfjCGR6Evx4eS siB6c0rvnOhicIxn8COW6uPNaEvw+TE= -----END CERTIFICATE-----Generated at Sun Sep 27 17:06:35 2026 by rpki-client