$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa File: 3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa (raw, json) Hash identifier: n4EjksAtWmMG36tQRHGuEbSaM6kL4L4RCo2zmUqdQx8= Subject key identifier: A1:4E:A2:CD:26:BE:5C:DE:2E:1D:D6:32:A7:74:37:11:5B:62:74:8C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA7873CCECA3098BF35078F40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.157.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:3c:ce:ca:30:98:bf:35:07:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cb81c399-a1d2-4ce7-ba8a-cfd97962e9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:62:75:08:0d:1d:18:e1:e7:79:17:c6:7c:69: 3d:4a:c6:87:04:a9:6c:da:c0:71:b2:a0:47:4a:74: 71:92:8e:e4:fc:39:8a:94:87:46:c2:c7:d1:8c:d1: e3:7d:7e:a7:6b:89:d2:ab:19:4e:ac:3f:8d:b9:0a: 90:4b:7e:be:29:76:e0:05:90:7d:29:e8:4f:ec:1d: f1:2b:49:9e:65:bb:3d:c3:72:aa:96:73:02:24:3c: 91:ac:35:b8:5f:34:2b:6f:2c:25:6e:51:fd:c5:27: 78:26:91:a9:a8:00:58:3a:81:c6:5d:45:d3:c3:4f: 6f:3a:b4:1a:05:75:1a:5f:e8:33:05:9e:00:fc:58: 70:59:6c:05:67:f4:de:1b:ae:1d:ac:96:ca:9b:cb: 25:92:d2:e7:38:39:00:92:fd:b1:02:10:77:0b:a8: e3:96:e9:c5:fb:d5:4c:bc:0b:5d:2d:2b:1f:c7:eb: d9:a7:8a:4c:04:34:71:54:e1:a4:2c:4b:47:3e:53: f9:9f:f0:47:67:ee:f3:3b:f4:85:da:b3:a7:e5:80: 7d:3f:eb:cd:d2:8c:8e:e3:cf:be:a3:9f:19:46:fb: b3:d5:7c:cc:ef:a6:1c:76:0e:87:a4:fb:fd:e5:d9: 53:1e:3f:fe:60:2f:a7:09:89:e8:b6:ea:8e:cb:1a: 93:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4E:A2:CD:26:BE:5C:DE:2E:1D:D6:32:A7:74:37:11:5B:62:74:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:cf:00:3b:21:bd:3f:18:ef:ce:1b:95:29:2c:60:7c:42:b2: 9a:bc:c0:20:a3:54:9d:f7:98:3e:53:d5:ba:ac:68:99:40:4f: 0c:b5:c3:63:fd:00:4d:3c:56:a7:bd:53:87:31:d2:a6:69:ef: 15:da:a1:fe:b1:ec:25:a6:04:ce:43:2b:60:12:88:6e:72:03: ef:7b:04:58:0f:0f:07:54:a6:9c:c8:48:d7:d1:25:82:9c:27: bc:ec:cf:fb:a9:1d:3c:bc:22:4e:68:5e:90:89:94:d8:f9:6e: b2:8a:d6:d9:3a:8d:31:b4:ec:f8:63:95:fa:d5:9a:18:e7:73: e4:ce:30:a6:66:a7:a5:dc:01:d1:93:50:ea:4d:56:ae:fb:9d: 40:e7:99:15:3e:19:23:00:d5:94:cb:0f:3a:51:a5:ea:ea:5f: d6:bf:0d:79:4f:41:ce:bb:67:17:57:8d:8e:45:23:45:68:3a: 33:77:b6:4b:5c:99:cf:ef:50:99:31:d5:d2:af:e5:ca:5e:87: f7:ea:0f:14:e9:7f:1b:0d:44:5e:49:d1:b2:86:96:74:20:f0: 09:19:59:96:67:27:b8:23:39:4b:0b:45:d3:8f:be:e2:a1:c2: d9:d9:ea:eb:e1:7b:b0:e4:30:87:26:4d:dc:4c:77:82:0b:d1: 05:f4:d5:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhzzOyjCYvzUHj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2I4MWMzOTktYTFkMi00Y2U3LWJhOGEtY2ZkOTc5NjJlOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GJ1CA0dGOHneRfGfGk9SsaHBKls2sBxsqBH SnRxko7k/DmKlIdGwsfRjNHjfX6na4nSqxlOrD+NuQqQS36+KXbgBZB9KehP7B3x K0meZbs9w3KqlnMCJDyRrDW4XzQrbywlblH9xSd4JpGpqABYOoHGXUXTw09vOrQa BXUaX+gzBZ4A/FhwWWwFZ/TeG64drJbKm8slktLnODkAkv2xAhB3C6jjlunF+9VM vAtdLSsfx+vZp4pMBDRxVOGkLEtHPlP5n/BHZ+7zO/SF2rOn5YB9P+vN0oyO48++ o58ZRvuz1XzM76Ycdg6HpPv95dlTHj/+YC+nCYnotuqOyxqTUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFOos0mvlzeLh3WMqd0NxFbYnSMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2I1YjNmZGMtNjEwZC0z NjM0LWFhMWEtNmY1NzUyNjI0YmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfPADshvT8Y784blSksYHxCspq8wCCjVJ33mD5T1bqsaJlATwy1w2P9 AE08Vqe9U4cx0qZp7xXaof6x7CWmBM5DK2ASiG5yA+97BFgPDwdUppzISNfRJYKc J7zsz/upHTy8Ik5oXpCJlNj5brKK1tk6jTG07PhjlfrVmhjnc+TOMKZmp6XcAdGT UOpNVq77nUDnmRU+GSMA1ZTLDzpRperqX9a/DXlPQc67ZxdXjY5FI0VoOjN3tktc mc/vUJkx1dKv5cpeh/fqDxTpfxsNRF5J0bKGlnQg8AkZWZZnJ7gjOUsLRdOPvuKh wtnZ6uvhe7DkMIcmTdxMd4IL0QX01YI= -----END CERTIFICATE-----Generated at Wed Jul 29 04:01:24 2026 by rpki-client