$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa File: 344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa (raw, json) Hash identifier: vA5nC1m4ax1rvRKTub3IYb++e8Psgg5z9lvBNfznE6o= Subject key identifier: 38:12:BE:D9:25:3B:18:EE:E3:1D:7C:78:26:E8:97:1A:C3:EE:4D:BE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497F1C9FAC710AFEAAC42820 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.157.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:1c:9f:ac:71:0a:fe:aa:c4:28:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=85d5813f-d663-4c17-b6e2-3f2cc5a05d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:93:5c:e7:33:b7:4b:b6:10:9a:d7:4f:18:f8: 4c:cd:19:24:d1:62:ee:2e:c1:b2:de:17:0f:a6:3b: ea:03:3c:5a:bf:aa:2d:75:eb:69:12:19:0d:d2:8b: 98:9b:ab:ac:1b:68:e0:39:ad:79:45:86:41:f0:db: e2:84:cd:ba:62:0e:56:8d:5e:1f:db:ee:24:6c:9e: a1:7a:e3:9e:c6:5e:b1:d0:d6:a1:0a:53:55:e0:3a: 40:08:05:06:d4:c9:85:5a:94:92:55:35:08:25:85: d5:af:1c:8f:cc:01:f2:bd:a2:86:6f:26:a1:50:d3: c9:f3:7b:2f:1f:18:5e:9b:ac:ee:9a:72:b9:43:30: 1f:51:f7:bc:ac:1a:ae:94:6e:0a:df:e1:53:c2:73: 58:d3:61:fa:58:bd:04:2b:14:50:30:34:37:3f:2b: b0:93:95:99:8a:52:62:5f:1d:1b:b9:d9:ae:cc:4a: 73:fd:f5:1f:27:4f:eb:dc:c0:f9:3b:af:77:e6:a2: 06:01:69:96:65:d5:46:52:4c:64:cb:c6:24:da:b6: 31:46:5e:12:e6:bd:33:fc:e9:55:aa:22:e6:9f:80: df:02:93:91:d2:43:e7:e2:03:51:6a:a0:99:6f:4c: ad:b1:f6:bf:25:e8:27:0d:f6:9f:29:07:56:49:a5: 34:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:12:BE:D9:25:3B:18:EE:E3:1D:7C:78:26:E8:97:1A:C3:EE:4D:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:40:0f:bc:6b:6a:26:a5:cc:0f:2b:aa:b5:33:91:05:02:dc: 9a:25:d2:04:11:68:60:73:a6:fa:95:a5:e5:8c:7f:7e:0a:69: fa:ec:56:61:b1:93:6d:42:43:ca:86:82:04:49:ed:d3:23:d7: ff:8b:2c:63:91:ef:c0:3e:c9:94:cb:07:02:fb:c0:01:e8:a2: 35:4b:6e:68:4c:4b:61:21:7a:24:7c:c9:15:f3:fd:1c:22:33: a7:e0:97:fa:1e:dd:fd:25:b1:0a:3f:b5:fd:b7:b7:3f:55:9a: 0d:25:a9:ec:ba:ec:94:86:22:b1:22:b1:45:f1:36:78:12:fb: 50:99:4f:07:cf:a9:9a:9e:e4:e2:ed:fb:31:ff:30:01:36:61: a9:18:59:67:c2:54:0d:31:09:9c:09:08:a2:a9:3b:da:92:99: 91:67:bf:55:96:ce:53:00:fd:b2:1e:ac:9f:56:db:f2:c4:fe: ae:9a:07:bd:dd:ee:1d:6b:5d:c3:82:f5:92:31:36:66:32:25: 0b:30:27:0d:f1:49:c5:7c:8a:78:8a:d3:bf:21:ba:75:0a:11: 21:50:93:fa:87:3c:22:1b:fe:5f:b6:ed:ac:f4:f9:ca:fc:62: 6f:d5:59:37:44:cc:38:8f:5a:19:e8:d3:61:88:f8:6b:d8:65: fd:05:6e:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfxyfrHEK/qrEKCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODVkNTgxM2YtZDY2My00YzE3LWI2ZTItM2YyY2M1YTA1ZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZNc5zO3S7YQmtdPGPhMzRkk0WLuLsGy3hcP pjvqAzxav6otdetpEhkN0ouYm6usG2jgOa15RYZB8NvihM26Yg5WjV4f2+4kbJ6h euOexl6x0NahClNV4DpACAUG1MmFWpSSVTUIJYXVrxyPzAHyvaKGbyahUNPJ83sv Hxhem6zumnK5QzAfUfe8rBqulG4K3+FTwnNY02H6WL0EKxRQMDQ3Pyuwk5WZilJi Xx0budmuzEpz/fUfJ0/r3MD5O6935qIGAWmWZdVGUkxky8Yk2rYxRl4S5r0z/OlV qiLmn4DfApOR0kPn4gNRaqCZb0ytsfa/JegnDfafKQdWSaU07QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgSvtklOxju4x18eCbolxrD7k2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzQ0MjgwYmEtOGJiMy0z MWNkLWFkYTktNGQ1ZGRiZTZjZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5AD7xraialzA8rqrUzkQUC3Jol0gQRaGBzpvqVpeWMf34KafrsVmGx k21CQ8qGggRJ7dMj1/+LLGOR78A+yZTLBwL7wAHoojVLbmhMS2EheiR8yRXz/Rwi M6fgl/oe3f0lsQo/tf23tz9Vmg0lqey67JSGIrEisUXxNngS+1CZTwfPqZqe5OLt +zH/MAE2YakYWWfCVA0xCZwJCKKpO9qSmZFnv1WWzlMA/bIerJ9W2/LE/q6aB73d 7h1rXcOC9ZIxNmYyJQswJw3xScV8iniK078hunUKESFQk/qHPCIb/l+27az0+cr8 Ym/VWTdEzDiPWhno02GI+GvYZf0Fbjs= -----END CERTIFICATE-----Generated at Sun Sep 27 11:57:24 2026 by rpki-client