$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be6d61d-293d-3ed8-a651-1bf004bc5280.roa File: 8be6d61d-293d-3ed8-a651-1bf004bc5280.roa (raw, json) Hash identifier: wo+elmP97jB0drXe+o1wNkpXbFgz5iO9okmw7UDC2Rc= Subject key identifier: 9E:31:E8:95:38:4C:D4:5A:24:FE:49:F7:B4:9D:BA:09:ED:2D:86:31 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA79668BC4735ECDCB9FDAE40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be6d61d-293d-3ed8-a651-1bf004bc5280.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.157.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:68:bc:47:35:ec:dc:b9:fd:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9bcd27ac-9afc-4544-8daf-f399d91dbb2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:c9:5a:15:25:5b:f0:ff:f7:3d:a2:c6:38: dc:ad:4a:c4:0e:55:e4:45:72:77:91:cb:6d:27:f8: 1d:4f:b8:80:13:14:d4:81:2f:04:0a:93:19:d1:34: 1e:94:63:c2:b6:eb:f2:2c:5d:a0:4a:0d:8b:a0:60: ad:90:8d:bc:8d:69:60:33:49:2a:78:1c:b0:a9:e1: 8d:3c:db:30:78:2a:a3:96:d5:82:89:19:59:28:00: 3c:68:1d:53:40:8c:44:7d:1b:37:78:b0:a4:84:1b: ba:b3:8e:2d:ab:56:5c:d1:13:6e:48:79:93:b5:ac: 4d:db:35:67:d4:7c:0c:e6:fd:7d:1e:8a:f5:e1:21: f6:40:73:95:7c:e2:5e:6e:4f:a4:ae:e4:86:fb:32: 3b:40:04:68:a1:f2:fa:83:78:10:49:52:ab:a3:f0: 9e:83:f9:95:ce:20:44:84:db:37:fb:8f:f9:5d:0b: 50:b2:47:fb:1f:72:78:19:bd:16:7e:9d:bc:6a:58: 83:6c:6a:0e:33:d3:7a:a7:5d:0d:ad:d2:e5:69:79: 8f:ab:c4:11:5f:27:8a:de:74:d0:61:cf:e6:38:b1: fc:07:db:9d:91:34:71:4a:91:85:d0:2e:d1:28:c1: 6e:61:2f:55:b7:ab:16:b8:24:c8:9a:33:ac:f2:86: 36:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:31:E8:95:38:4C:D4:5A:24:FE:49:F7:B4:9D:BA:09:ED:2D:86:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be6d61d-293d-3ed8-a651-1bf004bc5280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:23:7f:3d:ff:af:1b:51:31:20:6e:bb:7b:89:bc:38:37:35: 39:d5:d8:ce:e2:4f:b7:6e:6f:24:3d:b9:1b:f9:fb:f2:24:13: e1:ed:d2:8a:81:f9:fe:57:83:0a:bc:0e:ee:d8:fe:1d:27:e8: 8c:51:c9:ba:1a:90:ae:63:09:47:63:2a:08:25:4d:ac:13:0f: 5a:05:7b:20:bc:8e:8b:c6:4a:eb:50:f5:58:87:50:84:6e:1c: ef:fd:6c:71:c2:45:17:96:a2:e7:e3:28:a5:68:d2:e5:46:fb: 30:d5:7e:e2:22:50:83:8a:e3:d6:93:eb:9a:f6:6d:5c:11:20: fa:18:91:5e:23:09:ae:7e:be:e5:68:43:d4:9b:de:28:1f:17: 49:57:e6:e3:91:bf:66:b1:5c:c7:73:e1:be:92:8b:85:de:c4: c5:58:89:b0:45:09:a8:e8:20:e1:b0:17:1c:ba:f7:07:cf:e6: 5d:ef:3f:56:0e:68:a1:e8:d1:6a:e0:9f:7a:4a:5c:75:e8:bb: 48:08:f4:b1:78:c7:5b:be:3f:11:24:d7:37:90:a9:05:c4:d4: d1:95:28:c9:db:97:69:2c:17:6e:d6:11:5d:8f:7b:4d:b7:1a: 4d:97:6b:cd:46:2a:02:cd:68:a7:24:2e:6f:71:3c:43:1a:48: 8f:77:1a:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlmi8RzXs3Ln9rkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWJjZDI3YWMtOWFmYy00NTQ0LThkYWYtZjM5OWQ5MWRiYjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwXJWhUlW/D/9z2ixjjcrUrEDlXkRXJ3kctt J/gdT7iAExTUgS8ECpMZ0TQelGPCtuvyLF2gSg2LoGCtkI28jWlgM0kqeBywqeGN PNsweCqjltWCiRlZKAA8aB1TQIxEfRs3eLCkhBu6s44tq1Zc0RNuSHmTtaxN2zVn 1HwM5v19Hor14SH2QHOVfOJebk+kruSG+zI7QARoofL6g3gQSVKro/Ceg/mVziBE hNs3+4/5XQtQskf7H3J4Gb0Wfp28aliDbGoOM9N6p10NrdLlaXmPq8QRXyeK3nTQ Yc/mOLH8B9udkTRxSpGF0C7RKMFuYS9Vt6sWuCTImjOs8oY2hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4x6JU4TNRaJP5J97SdugntLYYxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGJlNmQ2MWQtMjkzZC0z ZWQ4LWE2NTEtMWJmMDA0YmM1MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUjfz3/rxtRMSBuu3uJvDg3NTnV2M7iT7dubyQ9uRv5+/IkE+Ht0oqB +f5Xgwq8Du7Y/h0n6IxRyboakK5jCUdjKgglTawTD1oFeyC8jovGSutQ9ViHUIRu HO/9bHHCRReWoufjKKVo0uVG+zDVfuIiUIOK49aT65r2bVwRIPoYkV4jCa5+vuVo Q9Sb3igfF0lX5uORv2axXMdz4b6Si4XexMVYibBFCajoIOGwFxy69wfP5l3vP1YO aKHo0Wrgn3pKXHXou0gI9LF4x1u+PxEk1zeQqQXE1NGVKMnbl2ksF27WEV2Pe023 Gk2Xa81GKgLNaKckLm9xPEMaSI93Gtc= -----END CERTIFICATE-----Generated at Wed Jul 29 06:48:48 2026 by rpki-client