$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa File: 344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa (raw, json) Hash identifier: 1XCoTXfXiby32mT91GG4gozcu+IbihFEXfVIDT6iJBE= Subject key identifier: 0C:A2:73:8A:5C:B7:CD:50:6E:54:A8:86:C5:C8:43:D2:93:F8:4C:A9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CFC8235D17E808F6FB0F7DB80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.157.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:35:d1:7e:80:8f:6f:b0:f7:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=31ca3df8-cbcc-458c-b7fb-dc4c56134290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:15:a7:0d:0e:6d:3e:4d:0d:21:22:21:12:56: b1:2c:28:c7:34:4b:eb:3b:31:4a:20:71:a4:34:44: 40:b9:2a:d3:8a:58:c0:3a:f7:d9:93:47:ff:9a:ab: f6:e9:cb:20:f0:bb:94:25:6d:51:17:87:d6:c4:dc: 51:aa:8a:c1:0f:1f:b6:89:d9:53:b2:8b:68:31:02: 45:10:36:a1:7a:bf:e2:8c:2f:bf:7b:7d:09:66:aa: 8a:2a:f3:31:6f:1d:49:93:29:8b:c9:25:38:07:ea: 5e:32:4b:a8:4a:1e:3a:94:cd:45:d6:e6:4c:d6:82: f6:f4:d8:7b:58:a6:f2:b5:30:6a:d1:1e:2c:f0:77: 91:e3:07:8c:c3:08:2b:a0:30:95:94:72:16:63:a4: 66:8e:7a:69:d6:a4:d8:17:bd:00:5e:3f:5e:cb:08: 5f:5d:a4:33:68:68:a9:4f:c6:d4:56:76:8b:0f:23: eb:fe:74:80:a8:3e:cb:6c:cc:de:99:f9:c2:57:67: 1b:57:e0:4e:c9:97:d7:fb:9e:4b:e9:f7:16:49:e7: af:c7:eb:72:76:20:50:33:5f:1c:30:2c:cc:91:a2: c9:5d:b1:43:94:01:d2:ab:6d:fc:25:e5:64:35:c1: d3:66:fd:27:88:07:94:98:d0:ba:4a:90:56:1a:e7: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A2:73:8A:5C:B7:CD:50:6E:54:A8:86:C5:C8:43:D2:93:F8:4C:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:bd:d8:6f:6f:c6:f5:29:33:88:f5:71:d9:72:30:06:17:7f: 33:37:ea:24:47:d2:b5:20:0a:ac:ae:7e:dd:2e:8b:78:ea:90: 30:9b:7e:1d:14:3d:28:4c:a4:2f:4a:1d:64:b0:9c:02:ae:98: 3f:b9:ef:c7:3b:93:50:a7:19:b2:52:84:dd:2a:90:78:b8:93: 7e:3d:20:0d:f5:62:6e:e1:94:9d:07:ea:8a:ed:12:5f:72:03: 5a:1b:9b:79:20:65:f9:2a:cc:cc:c1:8a:8e:cb:19:82:b0:25: d6:62:7f:65:ec:e2:b5:a5:8e:dc:6c:ba:aa:f4:41:d6:ed:75: 29:55:e8:60:dc:12:94:98:bd:74:85:fd:80:bf:15:1e:41:f4: 24:40:c0:6f:35:26:09:4e:80:9a:64:d6:ea:53:98:cc:32:a8: b1:7f:7f:cf:75:cc:a5:ac:9f:9f:f2:82:ca:94:68:46:34:21: df:de:10:97:5a:0b:1d:0e:19:db:40:8b:ad:35:3e:65:c8:e4: b7:e9:8d:c6:0e:43:8f:7f:f6:fc:3e:ff:26:ca:20:a8:f1:a5: 1b:29:40:b7:06:42:26:94:0b:ab:75:77:c3:a1:ac:97:d5:bc: 09:f5:4c:74:11:26:b8:58:f8:3f:9c:dd:4f:ef:69:d6:9b:75: ae:d2:21:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gjXRfoCPb7D324AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk MzFjYTNkZjgtY2JjYy00NThjLWI3ZmItZGM0YzU2MTM0MjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhWnDQ5tPk0NISIhElaxLCjHNEvrOzFKIHGk NERAuSrTiljAOvfZk0f/mqv26csg8LuUJW1RF4fWxNxRqorBDx+2idlTsotoMQJF EDaher/ijC+/e30JZqqKKvMxbx1JkymLySU4B+peMkuoSh46lM1F1uZM1oL29Nh7 WKbytTBq0R4s8HeR4weMwwgroDCVlHIWY6Rmjnpp1qTYF70AXj9eywhfXaQzaGip T8bUVnaLDyPr/nSAqD7LbMzemfnCV2cbV+BOyZfX+55L6fcWSeevx+tydiBQM18c MCzMkaLJXbFDlAHSq238JeVkNcHTZv0niAeUmNC6SpBWGudeNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyic4pct81QblSohsXIQ9KT+EypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzQ0MjgwYmEtOGJiMy0z MWNkLWFkYTktNGQ1ZGRiZTZjZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHK92G9vxvUpM4j1cdlyMAYXfzM36iRH0rUgCqyuft0ui3jqkDCbfh0U PShMpC9KHWSwnAKumD+578c7k1CnGbJShN0qkHi4k349IA31Ym7hlJ0H6ortEl9y A1obm3kgZfkqzMzBio7LGYKwJdZif2Xs4rWljtxsuqr0QdbtdSlV6GDcEpSYvXSF /YC/FR5B9CRAwG81JglOgJpk1upTmMwyqLF/f891zKWsn5/ygsqUaEY0Id/eEJda Cx0OGdtAi601PmXI5LfpjcYOQ49/9vw+/ybKIKjxpRspQLcGQiaUC6t1d8OhrJfV vAn1THQRJrhY+D+c3U/vadabda7SIY8= -----END CERTIFICATE-----Generated at Mon Mar 2 18:12:48 2026 by rpki-client