$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa File: f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa (raw, json) Hash identifier: hbeszEFVmCBgOkN79/cr+o2RG/QYZtvk/TdHMAyhutE= Subject key identifier: 59:EA:C3:FD:0C:9B:83:FB:5C:7E:F7:B3:AA:56:1E:41:A6:87:3A:CC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB551F8F31D886752B93B2C30 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 8069 IP address blocks: 20.157.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:f8:f3:1d:88:67:52:b9:3b:2c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=24ce187e-517e-4791-8d64-be88a22cddb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:32:e0:df:cf:f1:98:2f:92:8a:45:97:c2:29: 23:cd:19:b0:1a:e9:3f:a1:a5:a5:b1:d7:a6:2e:23: ec:7d:0e:f1:79:75:a7:ed:c8:1e:96:95:a8:c0:83: f1:71:04:d4:2a:96:c3:fc:3b:9a:ec:44:36:9a:ad: 09:14:c6:9d:03:1a:56:18:85:78:74:f4:fb:ee:57: 58:d0:15:0d:2a:73:cd:20:14:e6:0c:a8:e2:a5:28: 00:d3:40:57:54:a7:c6:a7:31:a2:d9:bf:99:57:e8: a9:dd:c1:e2:32:05:29:0f:16:76:62:0b:9b:86:38: 5f:1a:f0:2d:5f:32:e3:21:d3:c0:19:55:18:8e:15: 3e:2d:98:df:d3:8c:a9:dc:ce:97:cb:b9:eb:d3:4c: b7:b5:0a:84:7c:a5:48:1a:da:5b:71:f5:f6:a3:46: 19:8a:c1:0f:53:a6:a4:ed:a9:2e:78:38:11:f6:71: 73:41:28:50:ab:35:f9:b5:fc:02:e7:b6:06:55:bf: f8:86:e5:01:87:38:48:ba:6d:32:3b:6c:8f:ea:ed: df:0a:62:c2:77:74:21:13:cf:b0:2b:f2:54:c6:f1: 8e:63:cb:c5:4b:22:31:c1:6f:92:f6:32:1b:5e:f0: d7:07:24:d9:69:11:ed:db:25:8f:4e:49:f8:c9:64: 05:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EA:C3:FD:0C:9B:83:FB:5C:7E:F7:B3:AA:56:1E:41:A6:87:3A:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a3:3b:e5:ab:49:8a:62:af:8a:fe:55:1c:a9:15:22:45:fc: 41:b4:7a:24:cf:95:f5:09:e5:ff:b1:c8:c2:24:bc:83:9d:12: 42:74:69:3a:a4:23:90:73:b9:1b:6d:b3:ee:4c:cb:f0:4b:da: f4:1a:6a:9b:ef:5e:a4:cf:9f:3a:67:61:e0:d1:f8:c8:66:f8: cf:bc:48:68:15:5e:a4:3e:52:82:9c:3d:dc:2c:48:12:6a:e3: 0b:64:04:ea:aa:f4:bb:27:b8:3e:32:02:63:be:58:aa:26:f5: c1:20:a8:62:bd:d5:4c:12:f1:40:f1:fb:bd:cd:c3:90:fe:89: b6:9f:12:77:0c:1e:ff:04:46:df:24:2b:1d:5e:aa:54:67:8f: 23:f9:97:3d:d2:b1:fc:07:53:1b:13:e3:58:13:34:6b:db:02: a2:3e:e4:0c:46:95:18:a2:a9:59:51:5a:56:c8:73:02:17:47: b9:51:cb:32:49:87:dc:87:b6:d2:84:84:6b:d2:a1:ca:96:29: 60:91:67:80:eb:95:b5:80:a6:31:3b:a2:d0:6d:47:36:fe:3b: 46:ee:a1:19:9b:51:2c:9a:74:7c:a5:92:6c:cc:4c:5e:88:fc: 45:ac:c8:7b:9c:f1:ed:de:b4:27:c3:91:9a:37:eb:82:f9:36: e4:ae:21:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UfjzHYhnUrk7LDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk MjRjZTE4N2UtNTE3ZS00NzkxLThkNjQtYmU4OGEyMmNkZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTLg38/xmC+SikWXwikjzRmwGuk/oaWlsdem LiPsfQ7xeXWn7cgelpWowIPxcQTUKpbD/Dua7EQ2mq0JFMadAxpWGIV4dPT77ldY 0BUNKnPNIBTmDKjipSgA00BXVKfGpzGi2b+ZV+ip3cHiMgUpDxZ2YgubhjhfGvAt XzLjIdPAGVUYjhU+LZjf04yp3M6Xy7nr00y3tQqEfKVIGtpbcfX2o0YZisEPU6ak 7akueDgR9nFzQShQqzX5tfwC57YGVb/4huUBhzhIum0yO2yP6u3fCmLCd3QhE8+w K/JUxvGOY8vFSyIxwW+S9jIbXvDXByTZaRHt2yWPTkn4yWQFlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnqw/0Mm4P7XH73s6pWHkGmhzrMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjIzOWI3ZjEtZTI1ZS0z ZGIwLThkYzQtNWQ5OGEzZjQ4NDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmjO+WrSYpir4r+VRypFSJF/EG0eiTPlfUJ5f+xyMIkvIOdEkJ0aTqk I5BzuRtts+5My/BL2vQaapvvXqTPnzpnYeDR+Mhm+M+8SGgVXqQ+UoKcPdwsSBJq 4wtkBOqq9LsnuD4yAmO+WKom9cEgqGK91UwS8UDx+73Nw5D+ibafEncMHv8ERt8k Kx1eqlRnjyP5lz3SsfwHUxsT41gTNGvbAqI+5AxGlRiiqVlRWlbIcwIXR7lRyzJJ h9yHttKEhGvSocqWKWCRZ4DrlbWApjE7otBtRzb+O0buoRmbUSyadHylkmzMTF6I /EWsyHuc8e3etCfDkZo364L5NuSuIXo= -----END CERTIFICATE-----Generated at Mon Mar 2 18:12:43 2026 by rpki-client