$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa File: bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa (raw, json) Hash identifier: Db/tuAOA3cPv0023Slq02U+sRx7taXpakU9OF1dy+50= Subject key identifier: C2:38:BA:64:A3:85:13:38:3B:3C:90:00:46:A1:56:17:A3:A9:7C:76 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB551DCB74B6EBF29CFB84640 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 8069 IP address blocks: 20.157.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:dc:b7:4b:6e:bf:29:cf:b8:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=7ded4d07-1d9d-4a53-a913-eb70bd479d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fc:08:2b:71:8b:8a:9d:70:3e:0f:5a:cb:00: 7b:08:d9:b7:d2:35:ee:ad:4c:67:59:67:ae:fc:0c: f7:fd:58:3c:95:67:f4:af:cd:bf:08:42:fa:dd:ce: 00:ca:9b:4c:3e:b9:7f:91:bf:5e:cd:a4:f5:b4:6d: ec:1a:42:04:d7:84:94:3c:85:50:1d:47:dd:08:a3: 07:04:73:33:63:96:66:53:4e:86:dd:31:10:d6:50: 1c:02:08:cf:06:0e:e4:ef:ef:c6:25:33:ae:ae:79: ff:3e:6a:8e:4e:86:76:e5:84:7a:a5:a8:4f:11:25: 7d:18:6a:0c:32:2a:ee:5d:15:65:fe:01:f4:cf:c3: f6:bb:c2:95:7c:60:4c:6d:cc:15:ea:ad:36:66:1e: bb:b9:f3:a3:4f:7e:c6:9a:7c:a6:7c:f1:85:67:17: c2:71:36:76:da:04:3d:fa:ae:6a:3e:63:bb:d7:1b: 47:b7:73:b3:cb:b5:02:42:b2:99:e3:c5:25:32:a1: a9:61:34:94:f5:92:dc:29:d7:cf:68:31:8f:9c:be: da:3e:f5:69:aa:4b:48:68:30:f1:82:2a:05:ee:d4: 24:d6:6b:bd:ec:6e:ae:ea:99:5a:14:5f:01:9b:b6: b4:01:67:de:b5:eb:1d:c6:6b:2d:cb:37:d0:6c:37: 27:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:38:BA:64:A3:85:13:38:3B:3C:90:00:46:A1:56:17:A3:A9:7C:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:56:32:e9:20:b7:c3:ef:ef:e1:bb:a7:b4:2b:85:0c:e3:08: 43:5d:0b:28:47:c7:48:db:5c:34:ba:98:09:2c:9f:d7:36:7f: 7f:ff:bd:14:90:80:0e:06:19:58:af:0a:92:e3:e1:9b:49:30: 27:c6:bd:b8:c2:a3:5c:45:61:57:4b:70:8d:1e:52:f9:59:b7: 73:5c:0e:7b:13:e0:6c:65:eb:9d:09:63:21:e4:b4:9c:c0:80: 36:4b:46:9d:1d:06:da:f4:fa:96:33:f3:94:ca:24:05:db:cd: e3:35:0e:8f:6b:26:f8:a6:cb:4e:f3:1e:7f:b9:e2:21:a9:1d: c5:02:12:c4:1e:9c:7a:94:26:2c:4e:48:d6:44:0b:1e:c3:32: a1:9d:31:26:a9:ae:d0:4d:6b:be:64:73:4e:c9:85:96:e7:7a: 3a:eb:e5:18:20:8f:b2:9d:c3:02:73:2a:bf:7a:4f:a4:51:44: fe:ed:20:73:72:e3:b3:9d:f3:e7:a3:eb:26:aa:cf:63:b7:95: ae:0a:15:f6:d3:64:09:5d:5e:f4:71:0f:7a:76:a8:f7:3e:4a: a1:82:9d:1e:01:49:8d:b1:0c:22:47:0a:90:45:c3:e5:79:bf: b6:f7:96:b2:01:bb:21:46:d3:e6:da:c3:7a:0d:d9:06:ca:48: fc:f5:13:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1Udy3S26/Kc+4RkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk N2RlZDRkMDctMWQ5ZC00YTUzLWE5MTMtZWI3MGJkNDc5ZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvwIK3GLip1wPg9aywB7CNm30jXurUxnWWeu /Az3/Vg8lWf0r82/CEL63c4AyptMPrl/kb9ezaT1tG3sGkIE14SUPIVQHUfdCKMH BHMzY5ZmU06G3TEQ1lAcAgjPBg7k7+/GJTOurnn/PmqOToZ25YR6pahPESV9GGoM MiruXRVl/gH0z8P2u8KVfGBMbcwV6q02Zh67ufOjT37GmnymfPGFZxfCcTZ22gQ9 +q5qPmO71xtHt3Ozy7UCQrKZ48UlMqGpYTSU9ZLcKdfPaDGPnL7aPvVpqktIaDDx gioF7tQk1mu97G6u6plaFF8Bm7a0AWfetesdxmstyzfQbDcnrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMI4umSjhRM4OzyQAEahVhejqXx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYmY0NmQxOTQtMGRkMi0z NmNjLWFlNGEtN2JjZmZhNTBlYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFWMukgt8Pv7+G7p7QrhQzjCENdCyhHx0jbXDS6mAksn9c2f3//vRSQ gA4GGVivCpLj4ZtJMCfGvbjCo1xFYVdLcI0eUvlZt3NcDnsT4Gxl650JYyHktJzA gDZLRp0dBtr0+pYz85TKJAXbzeM1Do9rJvimy07zHn+54iGpHcUCEsQenHqUJixO SNZECx7DMqGdMSaprtBNa75kc07JhZbnejrr5Rggj7KdwwJzKr96T6RRRP7tIHNy 47Od8+ej6yaqz2O3la4KFfbTZAldXvRxD3p2qPc+SqGCnR4BSY2xDCJHCpBFw+V5 v7b3lrIBuyFG0+baw3oN2QbKSPz1Ew8= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:02 2026 by rpki-client