$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/42bf1295-1969-3c75-8c08-abee6320099c.roa File: 42bf1295-1969-3c75-8c08-abee6320099c.roa (raw, json) Hash identifier: wUoIRoGtdEvrzaomwtPKZILqtyNy7+lSps0ZMTieoKc= Subject key identifier: 9C:A7:F6:57:D8:FE:00:86:F9:C9:0B:9F:AB:77:90:D1:70:15:AD:91 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA788BEEC71FB17EBD27DE280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/42bf1295-1969-3c75-8c08-abee6320099c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.157.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:be:ec:71:fb:17:eb:d2:7d:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f3d0680d-7605-4e1d-b60a-2ca85191cf6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:92:c7:b9:58:2c:df:a9:f8:a4:af:3f:21:50: 6f:01:c5:9c:b4:a8:71:85:b4:de:2d:4c:ea:12:24: 3f:8d:44:42:20:0b:6b:18:9d:6c:25:67:61:fc:b8: 79:fc:62:29:a5:16:cb:15:ed:2c:c7:ae:cb:19:25: 45:c6:02:e7:92:9a:86:18:c1:60:9d:47:e9:fd:a6: 6d:5b:6c:8f:12:cc:0e:20:ee:c3:d3:c9:69:4b:2c: 3d:c5:41:0d:86:d4:b9:c3:ad:4e:a3:d8:34:46:25: 8d:72:b4:82:db:ed:a1:61:27:11:42:91:85:f3:97: 51:89:51:3d:98:e2:16:24:3d:d1:be:5e:04:9e:e3: 35:88:af:2a:6d:7b:28:35:10:df:13:a9:2e:66:6a: da:96:59:94:b0:37:d6:bb:d5:01:29:b5:80:4c:ae: 85:64:8a:10:6c:58:09:88:63:12:85:f0:76:6c:dc: 52:e9:28:b8:97:43:50:8c:a3:08:a8:c8:7f:bb:f7: 91:71:6c:a5:91:02:58:49:ed:4a:07:17:82:ec:3a: e5:37:94:cb:ae:ae:16:4a:01:8b:f5:ae:70:74:ff: 2c:7a:1e:91:b5:dc:42:42:53:b6:16:b6:c5:36:2b: 31:2e:8b:3c:6d:f4:21:2b:ff:08:02:3e:9a:b4:8e: e3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A7:F6:57:D8:FE:00:86:F9:C9:0B:9F:AB:77:90:D1:70:15:AD:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/42bf1295-1969-3c75-8c08-abee6320099c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:b7:90:76:e3:a5:8b:d6:6c:3e:85:10:fa:89:92:f7:ae:6d: 35:c5:cc:9b:c1:4f:2f:44:c4:a2:90:97:84:8b:85:00:aa:44: 64:89:49:5b:d1:6d:48:09:ca:ea:6d:ee:20:7b:cf:5c:ff:df: 61:43:c3:05:6e:11:f7:24:93:74:21:d1:e7:0e:bb:2b:fe:77: 10:05:40:cc:c6:10:5c:b7:c4:33:a6:32:e4:3a:b7:26:15:c5: db:34:a4:ad:e6:3e:cb:cc:97:5b:f0:8c:ad:52:bc:73:bf:ae: 97:27:d0:fd:c3:c5:9b:26:ac:9a:4b:a1:6f:10:fc:63:9d:c2: be:81:2b:40:f3:4f:79:1f:34:7a:32:69:99:d3:06:0e:78:e5: fd:10:10:f1:f2:81:86:cd:13:3a:d3:8c:e6:58:09:42:03:75: 6a:af:4f:8e:54:78:21:d5:78:e4:e6:49:c4:71:07:49:21:ef: f3:a9:72:0a:3a:25:6b:3a:99:48:f2:b0:d6:ab:c1:ec:af:00: cb:0d:b6:df:8f:1f:d8:7a:48:41:2c:21:89:e7:52:69:54:e8: 42:61:7c:34:97:35:f0:7c:4d:0a:4f:81:cf:8f:79:c6:96:52: be:29:0f:e8:2a:68:b5:6f:cc:d3:60:3e:a6:52:57:1f:a3:e7: 90:3b:3f:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niL7scfsX69J94oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjNkMDY4MGQtNzYwNS00ZTFkLWI2MGEtMmNhODUxOTFjZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZLHuVgs36n4pK8/IVBvAcWctKhxhbTeLUzq EiQ/jURCIAtrGJ1sJWdh/Lh5/GIppRbLFe0sx67LGSVFxgLnkpqGGMFgnUfp/aZt W2yPEswOIO7D08lpSyw9xUENhtS5w61Oo9g0RiWNcrSC2+2hYScRQpGF85dRiVE9 mOIWJD3Rvl4EnuM1iK8qbXsoNRDfE6kuZmrallmUsDfWu9UBKbWATK6FZIoQbFgJ iGMShfB2bNxS6Si4l0NQjKMIqMh/u/eRcWylkQJYSe1KBxeC7DrlN5TLrq4WSgGL 9a5wdP8seh6RtdxCQlO2FrbFNisxLos8bfQhK/8IAj6atI7jUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyn9lfY/gCG+ckLn6t3kNFwFa2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDJiZjEyOTUtMTk2OS0z Yzc1LThjMDgtYWJlZTYzMjAwOTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ29MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKO3kHbjpYvWbD6FEPqJkveubTXFzJvBTy9ExKKQl4SLhQCqRGSJSVvR bUgJyupt7iB7z1z/32FDwwVuEfckk3Qh0ecOuyv+dxAFQMzGEFy3xDOmMuQ6tyYV xds0pK3mPsvMl1vwjK1SvHO/rpcn0P3DxZsmrJpLoW8Q/GOdwr6BK0DzT3kfNHoy aZnTBg545f0QEPHygYbNEzrTjOZYCUIDdWqvT45UeCHVeOTmScRxB0kh7/Opcgo6 JWs6mUjysNarweyvAMsNtt+PH9h6SEEsIYnnUmlU6EJhfDSXNfB8TQpPgc+PecaW Ur4pD+gqaLVvzNNgPqZSVx+j55A7P7o= -----END CERTIFICATE-----Generated at Wed Jul 29 10:15:44 2026 by rpki-client