$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa File: 344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa (raw, json) Hash identifier: HPr4Cxm3CSICARjBX2wyMnFHC34ox0fpbE3LC8YH6GI= Subject key identifier: C9:83:4E:28:98:66:F3:F8:25:7F:27:35:C5:00:01:3A:B6:6F:66:BC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA788BEF6B9EA20A1020BB840 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.157.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:be:f6:b9:ea:20:a1:02:0b:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=023a48ff-f0ff-4022-9cf1-ae2c55bb386d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:40:c5:4a:e0:74:ad:df:2f:59:99:84:05:63: 2f:3d:2a:00:08:e0:83:1f:f5:6d:1a:a9:29:9e:da: 6a:4e:ec:83:e1:4e:31:84:15:b5:f9:94:a5:34:f0: 6c:92:af:b6:8a:92:e6:72:5d:a1:fc:a3:31:81:ce: cd:ae:a0:3f:d2:68:d7:cf:cf:d1:f2:de:0e:36:1e: 08:74:1f:f9:3b:07:7f:0b:43:bd:17:57:d2:45:5e: 66:39:65:94:8c:e2:08:aa:1f:f7:9a:99:a1:9f:5b: 10:c3:d9:13:31:1c:49:4c:9d:5b:13:8b:85:c5:20: 85:3f:1c:5f:a4:ae:26:b9:e3:48:38:65:2f:f8:07: 74:f9:a2:0a:83:68:ce:c3:22:75:74:dd:ab:83:91: 39:d5:db:34:b2:51:27:74:ff:3d:47:63:b4:87:a9: 51:fc:0d:8e:8d:fa:f4:39:7b:46:4d:38:d0:34:a1: cb:9c:d8:3a:27:b7:d0:7e:b7:94:fc:c9:89:56:fc: 9e:29:04:f0:fa:99:f2:af:a9:ab:5d:a7:8e:01:0a: 34:c3:72:57:b6:0b:d4:bd:b5:d8:83:95:ac:69:55: 91:41:7f:b0:c9:27:36:48:8f:ad:57:48:3b:2c:8d: b8:69:72:1c:f5:5d:db:e2:b8:42:ed:37:8d:7f:3a: c1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:83:4E:28:98:66:F3:F8:25:7F:27:35:C5:00:01:3A:B6:6F:66:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e2:8f:4f:a1:fe:a6:cd:6e:9b:35:24:40:28:8b:79:93:c8: db:5e:1c:b4:c9:6c:c8:cc:5e:f7:07:dc:f8:d1:68:66:2e:98: 60:be:55:35:91:76:4f:03:70:18:c6:30:e6:a4:79:2f:69:c9: 2b:72:2e:54:2c:3e:80:91:6f:45:1a:2d:08:5b:34:27:b2:71: 72:87:15:16:45:63:6d:d5:20:cc:25:f3:73:a6:ce:8e:c4:d2: ee:c4:e5:11:5f:8b:d5:9e:66:b8:c9:cc:0b:6d:59:71:3d:d7: 9d:d6:d9:47:33:42:ee:f1:4f:1a:d0:b9:f7:45:9c:0f:b4:85: cd:f7:11:8b:dc:4c:bb:51:d8:21:d8:07:b1:d6:43:dd:bd:9e: 05:9c:d7:dd:22:51:50:41:39:3e:24:3c:73:a4:0b:05:6d:91: 72:91:a9:45:17:ad:48:fd:cc:4c:24:c1:a5:36:fa:1c:1d:20: ae:0a:95:2c:0d:38:3c:32:7c:b6:e8:85:9e:36:cb:03:1d:34: fb:a2:e1:3e:77:25:4b:68:07:6a:96:7d:06:8e:43:cc:b9:33: 07:cf:58:f0:16:5d:bd:e2:60:5c:0d:95:33:c8:15:7b:bf:50: 24:d8:1d:67:71:86:aa:5c:6e:0d:4f:cf:7d:89:b4:2d:c6:ac: e9:98:ec:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niL72ueogoQILuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDIzYTQ4ZmYtZjBmZi00MDIyLTljZjEtYWUyYzU1YmIzODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUDFSuB0rd8vWZmEBWMvPSoACOCDH/VtGqkp ntpqTuyD4U4xhBW1+ZSlNPBskq+2ipLmcl2h/KMxgc7NrqA/0mjXz8/R8t4ONh4I dB/5Owd/C0O9F1fSRV5mOWWUjOIIqh/3mpmhn1sQw9kTMRxJTJ1bE4uFxSCFPxxf pK4mueNIOGUv+Ad0+aIKg2jOwyJ1dN2rg5E51ds0slEndP89R2O0h6lR/A2Ojfr0 OXtGTTjQNKHLnNg6J7fQfreU/MmJVvyeKQTw+pnyr6mrXaeOAQo0w3JXtgvUvbXY g5WsaVWRQX+wySc2SI+tV0g7LI24aXIc9V3b4rhC7TeNfzrB4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmDTiiYZvP4JX8nNcUAATq2b2a8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzQ0MjgwYmEtOGJiMy0z MWNkLWFkYTktNGQ1ZGRiZTZjZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInij0+h/qbNbps1JEAoi3mTyNteHLTJbMjMXvcH3PjRaGYumGC+VTWR dk8DcBjGMOakeS9pyStyLlQsPoCRb0UaLQhbNCeycXKHFRZFY23VIMwl83Omzo7E 0u7E5RFfi9WeZrjJzAttWXE9153W2UczQu7xTxrQufdFnA+0hc33EYvcTLtR2CHY B7HWQ929ngWc190iUVBBOT4kPHOkCwVtkXKRqUUXrUj9zEwkwaU2+hwdIK4KlSwN ODwyfLbohZ42ywMdNPui4T53JUtoB2qWfQaOQ8y5MwfPWPAWXb3iYFwNlTPIFXu/ UCTYHWdxhqpcbg1Pz32JtC3GrOmY7IA= -----END CERTIFICATE-----Generated at Wed Jul 29 03:52:24 2026 by rpki-client