$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/519f18f5-97d2-3023-b6ad-9d2079691590.roa File: 519f18f5-97d2-3023-b6ad-9d2079691590.roa (raw, json) Hash identifier: GiY6yCEskws6nCyKu57DwvEZEH5D4yhm6SXaikALwj8= Subject key identifier: A3:B8:99:67:0C:21:0A:6C:1F:7C:06:98:AE:F7:AD:85:E2:D3:98:44 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497756A8DAD15260881CCB00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/519f18f5-97d2-3023-b6ad-9d2079691590.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.157.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:56:a8:da:d1:52:60:88:1c:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=10fb7f19-2b29-4235-839e-9419ecc60deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e4:9b:37:dd:c6:02:46:02:c8:80:41:b8:15: eb:2d:bf:16:18:d7:84:4e:ee:89:1c:45:83:ed:45: 59:c1:32:07:a3:bf:17:5c:c0:04:7c:d9:b0:c9:6c: 0a:91:fc:af:3b:73:1a:75:f3:ef:6b:d2:4c:f8:37: 48:8d:32:08:31:1b:dd:ef:8c:6e:a4:7e:af:ea:93: b9:15:33:cd:12:0d:98:e4:95:b7:50:a6:23:c6:6c: 25:e1:cd:fe:4a:8a:4f:bc:8c:1f:43:5b:2b:58:e0: d8:28:df:6e:01:f2:fe:fb:76:e4:a5:e9:d8:31:95: 0a:3e:63:08:b9:66:11:74:e3:95:d9:2a:9b:91:e2: e7:2a:f0:9c:86:83:50:ae:c2:41:08:17:b6:ea:7e: 87:87:4a:c2:61:fe:58:bf:92:54:dd:a3:1f:8a:b9: a2:7c:ea:16:f1:7f:51:96:02:c0:a1:7b:78:40:1a: 51:21:59:ea:27:c8:3d:dd:ae:62:d8:30:9a:62:d5: 6f:13:b4:1e:d8:55:c7:45:dd:83:05:b3:0e:2f:89: b1:58:b7:cb:57:52:c9:e1:f4:4d:b4:31:3e:bc:ee: 61:ce:7d:7c:a6:78:fc:1c:d0:fc:f6:16:9f:fe:e7: de:53:39:8a:8c:7c:3c:34:bc:4a:3c:c4:3a:d6:54: e6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B8:99:67:0C:21:0A:6C:1F:7C:06:98:AE:F7:AD:85:E2:D3:98:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/519f18f5-97d2-3023-b6ad-9d2079691590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:56:f3:cf:05:e1:8f:c9:53:bf:4c:51:c1:21:44:eb:35:50: f0:88:03:31:d2:c9:04:49:4e:a0:52:72:6b:3d:cd:f0:04:60: af:87:69:89:d2:7d:a9:e3:7f:8c:32:0e:68:17:6a:60:1a:6d: fe:cf:b1:85:d9:9d:4b:41:06:b0:10:b2:b9:0d:7f:11:e1:78: e9:a4:96:70:45:f4:d6:26:82:1f:d7:4c:90:af:9d:a8:d4:09: 79:44:2e:7d:52:da:f3:7f:4d:e3:62:3b:46:0c:a5:73:6c:17: 25:02:f5:ce:d5:91:a1:99:33:3a:a9:2b:58:40:07:eb:cb:6b: 74:fb:31:18:a5:df:87:93:51:22:1e:2e:d6:77:18:c8:43:c8: 3a:eb:97:96:02:c1:40:ce:c3:65:46:78:34:cb:0a:e4:b6:d6: 73:6a:e3:98:d7:6a:b6:32:b7:5c:f8:63:98:9e:48:0e:1e:09: c5:cc:f6:0e:17:b3:9f:5c:03:c4:22:10:86:5e:3c:89:94:fc: 86:aa:5f:e5:94:4c:14:94:09:fb:df:30:6f:d9:9f:e2:b5:64: fc:a3:de:08:c5:f9:10:d3:6e:5e:e9:5a:b0:fb:89:dc:6f:52: 25:98:53:d3:82:41:63:4f:d9:fe:eb:80:36:4d:68:65:96:4d: e2:0b:e3:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1ao2tFSYIgcywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTBmYjdmMTktMmIyOS00MjM1LTgzOWUtOTQxOWVjYzYwZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+SbN93GAkYCyIBBuBXrLb8WGNeETu6JHEWD 7UVZwTIHo78XXMAEfNmwyWwKkfyvO3MadfPva9JM+DdIjTIIMRvd74xupH6v6pO5 FTPNEg2Y5JW3UKYjxmwl4c3+SopPvIwfQ1srWODYKN9uAfL++3bkpenYMZUKPmMI uWYRdOOV2SqbkeLnKvCchoNQrsJBCBe26n6Hh0rCYf5Yv5JU3aMfirmifOoW8X9R lgLAoXt4QBpRIVnqJ8g93a5i2DCaYtVvE7Qe2FXHRd2DBbMOL4mxWLfLV1LJ4fRN tDE+vO5hzn18pnj8HND89haf/ufeUzmKjHw8NLxKPMQ61lTm7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKO4mWcMIQpsH3wGmK73rYXi05hEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTE5ZjE4ZjUtOTdkMi0z MDIzLWI2YWQtOWQyMDc5NjkxNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ23MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxW888F4Y/JU79MUcEhROs1UPCIAzHSyQRJTqBScms9zfAEYK+HaYnS fanjf4wyDmgXamAabf7PsYXZnUtBBrAQsrkNfxHheOmklnBF9NYmgh/XTJCvnajU CXlELn1S2vN/TeNiO0YMpXNsFyUC9c7VkaGZMzqpK1hAB+vLa3T7MRil34eTUSIe LtZ3GMhDyDrrl5YCwUDOw2VGeDTLCuS21nNq45jXarYyt1z4Y5ieSA4eCcXM9g4X s59cA8QiEIZePImU/IaqX+WUTBSUCfvfMG/Zn+K1ZPyj3gjF+RDTbl7pWrD7idxv UiWYU9OCQWNP2f7rgDZNaGWWTeIL4+Y= -----END CERTIFICATE-----Generated at Sat Oct 10 15:29:55 2026 by rpki-client