$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa File: cd786728-d6f2-3414-abfc-112e58503c9a.roa (raw, json) Hash identifier: 5GV4F69xcSWVS2DLE9SbT9DofEfSYqmnrFt8EiCZQYk= Subject key identifier: E8:25:69:88:81:A9:09:0D:61:DF:31:61:6B:18:58:76:52:3C:2E:B4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F1897AF34074764DAEC00B080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.157.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:af:34:07:47:64:da:ec:00:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=3b2e2bf9-df11-4ef0-8eaa-8087fae23dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a8:b4:66:33:8d:ed:59:dd:32:f0:e1:d6:ff: a1:b9:08:3a:75:1f:2a:fe:bc:f1:cc:7e:f0:33:02: fd:46:4e:2a:34:de:b1:04:9a:90:cb:4a:a9:9d:d2: 83:1b:af:fa:42:26:7b:b1:fd:6f:4b:f6:ce:29:ca: ee:1e:44:b3:b4:80:e4:d4:f1:9c:2c:e4:17:29:b6: d7:28:55:1f:a8:e7:21:77:f5:fc:15:78:7a:ce:7d: ac:ae:42:ca:8e:6f:30:22:51:ec:a4:ca:d9:4d:6d: 7b:a2:85:a5:0f:dc:35:b2:ea:e4:48:81:35:4d:ff: f9:36:23:08:99:14:df:a5:a3:3f:07:ac:15:b2:43: 20:48:de:eb:46:1d:e9:97:66:98:b2:2b:4a:91:73: 84:97:96:d3:08:b8:d9:02:8d:bb:49:ba:95:c8:46: 14:6b:85:8b:d5:4c:97:4b:9a:04:32:a6:d8:6e:c0: d3:33:d8:81:cd:ca:c0:57:41:3e:00:16:49:f4:58: ae:0e:95:d1:6a:68:71:51:8a:cf:cc:a0:56:47:4a: 5e:e4:31:33:12:eb:f9:4f:98:77:4e:4e:56:a6:51: 12:cf:e3:57:55:d1:b4:c1:9c:cd:c8:61:85:a9:bb: 8e:74:6c:a4:16:b2:21:e4:a1:b0:99:4f:fa:96:ac: d8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:25:69:88:81:A9:09:0D:61:DF:31:61:6B:18:58:76:52:3C:2E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:89:30:51:3d:69:7b:d5:06:5a:57:66:38:b2:6c:02:0a:09: b6:5f:30:36:6a:b9:44:24:eb:3f:79:08:bc:0b:0f:c9:e6:96: ad:25:75:0b:18:4c:d3:d0:8c:b2:5e:2e:d7:27:f5:13:4c:0e: d1:8c:7b:95:07:2c:63:0c:24:34:5c:b1:3a:27:5b:1d:e9:1a: ae:94:e0:fd:02:4b:7f:98:ff:b0:bb:50:02:0d:e3:30:3f:33: 9b:eb:1b:b9:a0:e7:07:19:4e:67:93:dc:ca:22:20:3a:84:85: 94:66:a9:63:3e:19:80:03:c4:ad:b1:09:1c:d3:a9:d6:fb:c7: d5:87:d8:d2:0c:33:e8:8f:b3:cc:9b:2b:d4:1b:e5:7f:de:4a: 80:f8:f8:fc:b1:95:6d:04:fe:14:9b:f6:8f:b4:64:dd:48:b1: 1f:79:b2:8d:83:e6:93:6f:08:5b:36:4b:7f:e6:a9:d1:ec:36: 27:b3:80:14:01:dd:f1:02:6e:ad:61:f3:cc:3f:50:55:83:8e: eb:6f:4a:34:27:e3:f8:35:41:ec:bf:da:ac:b9:6a:24:32:cd: fc:ce:75:7c:cd:91:42:32:3c:b9:fe:cd:b0:38:20:ab:39:8e: 2f:18:05:4f:63:4a:bb:24:f0:ee:4c:ec:5f:c6:97:fe:09:0d: 46:fc:ca:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl680B0dk2uwAsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk M2IyZTJiZjktZGYxMS00ZWYwLThlYWEtODA4N2ZhZTIzZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgai0ZjON7VndMvDh1v+huQg6dR8q/rzxzH7w MwL9Rk4qNN6xBJqQy0qpndKDG6/6QiZ7sf1vS/bOKcruHkSztIDk1PGcLOQXKbbX KFUfqOchd/X8FXh6zn2srkLKjm8wIlHspMrZTW17ooWlD9w1surkSIE1Tf/5NiMI mRTfpaM/B6wVskMgSN7rRh3pl2aYsitKkXOEl5bTCLjZAo27SbqVyEYUa4WL1UyX S5oEMqbYbsDTM9iBzcrAV0E+ABZJ9FiuDpXRamhxUYrPzKBWR0pe5DEzEuv5T5h3 Tk5WplESz+NXVdG0wZzNyGGFqbuOdGykFrIh5KGwmU/6lqzYzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOglaYiBqQkNYd8xYWsYWHZSPC60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2Q3ODY3MjgtZDZmMi0z NDE0LWFiZmMtMTEyZTU4NTAzYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaJMFE9aXvVBlpXZjiybAIKCbZfMDZquUQk6z95CLwLD8nmlq0ldQsY TNPQjLJeLtcn9RNMDtGMe5UHLGMMJDRcsTonWx3pGq6U4P0CS3+Y/7C7UAIN4zA/ M5vrG7mg5wcZTmeT3MoiIDqEhZRmqWM+GYADxK2xCRzTqdb7x9WH2NIMM+iPs8yb K9Qb5X/eSoD4+PyxlW0E/hSb9o+0ZN1IsR95so2D5pNvCFs2S3/mqdHsNiezgBQB 3fECbq1h88w/UFWDjutvSjQn4/g1Qey/2qy5aiQyzfzOdXzNkUIyPLn+zbA4IKs5 ji8YBU9jSrsk8O5M7F/Gl/4JDUb8yvU= -----END CERTIFICATE-----Generated at Mon Sep 28 23:08:23 2026 by rpki-client