$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa File: f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa (raw, json) Hash identifier: GMQIgw5HXo70uPh88FaKr0UUTJjG1K3J/vok9kf/A+k= Subject key identifier: B6:A8:05:2B:CA:65:9E:DE:D1:3C:5B:92:28:04:77:B2:65:12:D1:B3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F1897AF6C637CF1A068966DC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.157.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:af:6c:63:7c:f1:a0:68:96:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=b968d092-b59b-4a41-aea5-a583d9e21b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:b0:d7:76:09:91:88:96:55:46:6a:b4:7a: 36:7e:f2:3a:ab:42:5f:27:7f:6b:47:af:f7:b5:a2: 9e:e0:cd:cc:2e:d5:22:e2:7b:0f:67:26:c4:13:b3: 4e:be:ce:ff:b7:71:31:bf:d2:f3:01:c7:00:e1:ce: f2:c3:5c:fc:7e:99:fa:9d:b7:3d:2a:40:45:12:80: a5:9a:3c:22:88:5f:41:1c:62:ec:39:bc:d7:45:d4: e1:89:c1:93:2c:e7:fe:17:ef:1d:2c:b8:07:99:8d: 2d:b0:4e:90:1b:09:ff:59:8d:71:a0:0d:84:70:53: fa:f1:ec:02:fc:bc:43:29:af:88:b4:48:eb:cd:f3: b4:c9:54:4a:d4:d2:ae:94:54:21:c2:15:92:e2:01: d5:f4:4f:f9:7d:80:be:bd:bd:77:f0:69:31:f0:56: 65:19:05:7f:27:84:68:b2:a1:13:30:7c:32:7c:f6: 49:14:cb:68:dc:51:37:4b:5c:4a:3a:a9:ab:e1:1d: 99:32:fc:75:1d:60:4d:44:3b:59:23:54:73:17:c1: 42:ee:ea:71:c7:cd:92:b3:23:54:3f:be:b9:b4:94: d4:a5:b3:03:6d:41:c6:f0:85:a2:22:2b:9a:e7:e5: 27:c3:4d:2e:0d:a9:95:d3:d7:28:37:14:62:00:0f: 96:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A8:05:2B:CA:65:9E:DE:D1:3C:5B:92:28:04:77:B2:65:12:D1:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:6a:66:ff:e4:9c:c7:cd:92:95:2a:f6:1e:e1:c8:a9:5a:7a: 00:1d:82:6c:94:06:13:36:e0:7f:e7:b2:be:4b:9c:dc:93:0a: bb:df:ee:3e:5b:30:ac:4f:0a:2f:de:14:3f:2f:28:bf:f4:3b: e7:7e:af:01:49:5e:42:a5:df:88:76:07:f7:9b:68:81:f2:3d: 1e:fd:86:9d:ab:2f:ec:15:34:5d:9a:1c:4b:02:a3:9b:34:7b: 1e:bd:e8:d9:11:b7:1a:1c:02:c4:d2:43:c2:bc:77:53:24:8e: 3d:b5:07:59:36:da:20:4a:7e:a1:ca:94:0d:1f:fb:0d:d0:87: 21:74:30:5d:b5:0f:35:40:d0:1e:9a:83:20:a1:e3:0f:90:df: d0:a3:84:91:10:c0:36:e8:50:bf:8f:01:29:c6:b1:e9:f9:f0: 18:a5:12:2b:04:1e:9a:6b:4c:1d:80:3f:0a:41:7e:fc:af:90: 34:16:f1:44:bc:8a:bb:b4:57:fb:20:e5:a6:42:d2:9f:1d:19: 79:1d:e5:5c:3f:a5:c1:9d:fb:66:c7:d2:ac:2e:29:35:83:c5: e8:a9:93:c5:65:26:47:99:f3:76:75:d0:b9:53:a6:a5:6d:a4: 22:12:39:ed:e8:28:77:5b:8b:b7:25:f8:c3:84:95:e8:d0:17: 94:b6:8c:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl69sY3zxoGiWbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk Yjk2OGQwOTItYjU5Yi00YTQxLWFlYTUtYTU4M2Q5ZTIxYjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+ew13YJkYiWVUZqtHo2fvI6q0JfJ39rR6/3 taKe4M3MLtUi4nsPZybEE7NOvs7/t3Exv9LzAccA4c7yw1z8fpn6nbc9KkBFEoCl mjwiiF9BHGLsObzXRdThicGTLOf+F+8dLLgHmY0tsE6QGwn/WY1xoA2EcFP68ewC /LxDKa+ItEjrzfO0yVRK1NKulFQhwhWS4gHV9E/5fYC+vb138Gkx8FZlGQV/J4Ro sqETMHwyfPZJFMto3FE3S1xKOqmr4R2ZMvx1HWBNRDtZI1RzF8FC7upxx82SsyNU P765tJTUpbMDbUHG8IWiIiua5+Unw00uDamV09coNxRiAA+WAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaoBSvKZZ7e0TxbkigEd7JlEtGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjIzOWI3ZjEtZTI1ZS0z ZGIwLThkYzQtNWQ5OGEzZjQ4NDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdqZv/knMfNkpUq9h7hyKlaegAdgmyUBhM24H/nsr5LnNyTCrvf7j5b MKxPCi/eFD8vKL/0O+d+rwFJXkKl34h2B/ebaIHyPR79hp2rL+wVNF2aHEsCo5s0 ex696NkRtxocAsTSQ8K8d1Mkjj21B1k22iBKfqHKlA0f+w3QhyF0MF21DzVA0B6a gyCh4w+Q39CjhJEQwDboUL+PASnGsen58BilEisEHpprTB2APwpBfvyvkDQW8US8 iru0V/sg5aZC0p8dGXkd5Vw/pcGd+2bH0qwuKTWDxeipk8VlJkeZ83Z10LlTpqVt pCISOe3oKHdbi7cl+MOElejQF5S2jDQ= -----END CERTIFICATE-----Generated at Sun Sep 27 07:36:34 2026 by rpki-client