$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa File: 4e67d494-acab-3047-896e-83e082ee4263.roa (raw, json) Hash identifier: BI7U9bRX/bSCWkg0aggo5DzYZ0+7gr4tf+h8w2HfxtU= Subject key identifier: CA:C4:A2:69:0B:73:4B:0E:2D:61:15:3B:DE:E9:60:7C:B5:4C:E9:6E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D52438DC162C5AEBB0D5D6940 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 8069 IP address blocks: 20.157.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:8d:c1:62:c5:ae:bb:0d:5d:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=ad50d81d-be9d-4b9d-886a-dd801dd56e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:be:67:56:4b:7d:7b:1e:70:08:91:05:52:3f: 67:ff:76:74:a9:00:b5:8f:02:a8:bb:2f:e9:af:44: a1:44:4f:7f:32:27:23:94:12:2f:c0:aa:cb:9d:09: 22:aa:f6:47:eb:84:db:3a:87:4b:52:50:a2:c6:dc: ad:34:55:bb:b9:87:45:de:68:c6:b6:12:a4:dd:94: 87:b1:d4:1f:7f:fc:d5:9e:21:ff:3c:60:ad:ac:eb: f3:64:c9:18:de:df:10:57:c3:f9:0f:8a:3a:e4:44: d6:11:b5:86:a4:c3:5b:47:35:fb:3a:6d:0d:99:83: 24:25:a2:c5:07:32:ab:98:1a:e1:f6:c0:24:7b:86: 33:e9:cf:98:64:f3:b3:14:de:32:c7:48:0b:3a:f1: d3:b8:7e:89:1a:51:55:a6:22:a4:f0:1d:94:7c:bc: 8f:f2:7b:b3:58:dd:a0:d0:ce:9a:2a:14:89:0a:b8: d0:3a:93:11:3d:c5:94:44:56:28:33:ed:95:f4:b0: 07:82:c9:b3:db:d6:30:cc:75:24:6a:15:c9:c8:0f: e4:5f:e0:f0:95:73:df:b5:6d:42:3a:24:64:41:62: 9b:ee:ec:90:f4:42:7d:59:52:c1:18:c6:9c:15:b9: 73:89:84:0d:83:54:bd:9c:92:3d:89:29:8e:0f:33: 5b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C4:A2:69:0B:73:4B:0E:2D:61:15:3B:DE:E9:60:7C:B5:4C:E9:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c4:d9:d0:0a:20:a8:6f:4d:22:3f:05:9d:a3:11:fb:76:85: ed:00:ca:f8:34:75:97:a2:f9:b2:65:12:10:49:c7:e6:af:1d: 66:4d:c7:e2:8d:8f:31:2c:08:5c:cd:17:8e:5b:99:5d:1b:bb: b6:22:ed:5d:0b:b7:d7:0d:15:c6:dc:f2:df:6f:0b:2e:bb:69: 11:e2:42:83:2f:85:05:e5:7e:80:1f:35:11:57:93:c9:44:c9: 06:f0:9a:8e:e4:07:b7:9e:aa:85:7c:b7:16:a6:b2:5a:ec:d0: 33:8f:a7:a0:e9:a2:1c:d8:7a:79:19:fc:05:df:ee:c5:86:6d: 0c:48:68:b7:23:8f:b8:18:8d:c4:17:0e:d8:6a:3b:7e:09:bc: ec:a3:13:b9:b5:ab:03:cd:ec:e0:8d:75:90:0e:f5:a0:83:65: e9:92:58:c8:b0:0e:1b:39:d7:6b:80:23:d0:f0:dd:78:f3:0c: e2:2d:12:cb:cf:12:8a:4c:b0:87:54:57:e4:df:c6:d0:8c:b2: 37:66:fd:75:1e:88:67:df:28:ce:77:e6:33:3f:d9:bb:62:19: 9d:88:eb:7a:c5:d0:18:71:7b:38:30:c9:24:84:e3:60:df:a0: 33:44:85:8f:24:39:54:a8:77:f6:bd:6d:f3:f3:ff:c0:ed:54: 1e:4b:0d:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ43BYsWuuw1daUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk YWQ1MGQ4MWQtYmU5ZC00YjlkLTg4NmEtZGQ4MDFkZDU2ZTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL5nVkt9ex5wCJEFUj9n/3Z0qQC1jwKouy/p r0ShRE9/MicjlBIvwKrLnQkiqvZH64TbOodLUlCixtytNFW7uYdF3mjGthKk3ZSH sdQff/zVniH/PGCtrOvzZMkY3t8QV8P5D4o65ETWEbWGpMNbRzX7Om0NmYMkJaLF BzKrmBrh9sAke4Yz6c+YZPOzFN4yx0gLOvHTuH6JGlFVpiKk8B2UfLyP8nuzWN2g 0M6aKhSJCrjQOpMRPcWURFYoM+2V9LAHgsmz29YwzHUkahXJyA/kX+DwlXPftW1C OiRkQWKb7uyQ9EJ9WVLBGMacFblziYQNg1S9nJI9iSmODzNbkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrEomkLc0sOLWEVO97pYHy1TOluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGU2N2Q0OTQtYWNhYi0z MDQ3LTg5NmUtODNlMDgyZWU0MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHE2dAKIKhvTSI/BZ2jEft2he0Ayvg0dZei+bJlEhBJx+avHWZNx+KN jzEsCFzNF45bmV0bu7Yi7V0Lt9cNFcbc8t9vCy67aRHiQoMvhQXlfoAfNRFXk8lE yQbwmo7kB7eeqoV8txamslrs0DOPp6DpohzYenkZ/AXf7sWGbQxIaLcjj7gYjcQX DthqO34JvOyjE7m1qwPN7OCNdZAO9aCDZemSWMiwDhs512uAI9Dw3XjzDOItEsvP EopMsIdUV+TfxtCMsjdm/XUeiGffKM535jM/2btiGZ2I63rF0BhxezgwySSE42Df oDNEhY8kOVSod/a9bfPz/8DtVB5LDSo= -----END CERTIFICATE-----Generated at Fri Apr 17 21:15:38 2026 by rpki-client