$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/046a6638-e5a2-3b13-900c-64cf065df5bb.roa File: 046a6638-e5a2-3b13-900c-64cf065df5bb.roa (raw, json) Hash identifier: CA5chZMMP1j7scKCBee7aRuolp+JpwkXYQAPOSlbPms= Subject key identifier: F5:64:21:D1:1C:58:D4:FB:41:C8:85:7D:3E:A9:9C:0F:05:B0:BD:BA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957CC311DEEA31804684BD0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/046a6638-e5a2-3b13-900c-64cf065df5bb.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.153.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:cc:31:1d:ee:a3:18:04:68:4b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=8496fa0d-5935-4018-bee5-e863afae3eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:dd:32:9c:3f:a5:88:ef:2a:e1:d0:0d:c9: e7:4f:1f:29:25:0d:f8:10:f5:99:cd:60:1c:53:c1: 36:42:9d:ec:97:57:fe:b6:7c:f3:13:58:1a:59:3f: 92:77:92:9d:f7:d3:f5:77:19:d7:e3:b8:95:0f:8d: e5:3a:d7:28:48:d6:17:a2:21:a3:dc:58:44:1c:79: 63:40:6e:20:d4:59:f1:fc:a2:ef:80:0c:44:e5:6d: 70:82:1b:a0:3c:a0:8c:d9:38:ce:24:f9:d3:63:eb: 10:05:5c:90:10:75:38:8a:ef:19:29:93:bd:55:61: 4c:d8:b9:7e:33:4e:f8:7d:51:e6:95:1f:69:64:be: fd:b9:f7:12:ed:e2:92:a4:38:c3:be:1c:46:33:22: 75:70:fc:94:e0:04:56:f1:43:86:ad:90:b9:e6:45: 9b:2d:bf:f5:4a:f1:21:f7:07:79:d3:57:4e:58:ee: 5a:ea:d2:30:30:6b:c0:d1:51:94:7c:f4:23:43:7c: 9d:ba:5c:da:ff:4a:d0:37:15:cc:07:0c:60:5e:f0: 82:42:95:17:87:29:f0:36:ef:0b:61:c4:35:08:a4: 6e:b9:8e:53:2e:f3:64:d4:c4:36:5e:0b:86:93:1b: fa:5f:52:e5:41:09:3e:8b:66:1d:7c:5b:e4:02:c6: 2a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:64:21:D1:1C:58:D4:FB:41:C8:85:7D:3E:A9:9C:0F:05:B0:BD:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/046a6638-e5a2-3b13-900c-64cf065df5bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:df:97:a6:f3:af:aa:b4:84:e3:2d:60:ae:ce:56:43:2d:d4: 2d:67:91:5f:8e:69:df:e2:42:b6:02:52:f1:68:c0:e2:83:c1: 02:1a:50:30:87:ae:10:82:cb:9f:2e:12:8f:9f:c5:00:19:99: 01:2c:4f:9b:03:af:b3:df:0a:e0:32:95:3e:92:98:70:e5:8f: 79:31:f6:15:1f:0b:e2:99:a5:13:12:20:ea:c0:24:30:59:aa: cf:b2:f9:2c:02:e0:e7:46:73:7a:5a:83:ed:62:a5:5b:bf:c8: d7:cc:11:5b:ba:97:96:a0:1e:94:0d:60:de:01:4c:4b:20:63: aa:cb:a3:4e:a0:59:9d:49:71:5b:a3:78:ef:3f:e8:95:b6:ad: ff:19:9a:72:5c:e5:92:b9:df:8f:17:26:b6:b6:c7:a0:f2:13: f9:4e:26:5a:2a:2f:02:cc:3b:c4:0c:d3:39:3f:ef:14:64:03: ca:12:8b:8d:db:3e:0f:ae:3f:59:b3:f0:ee:8e:b9:83:65:02: c0:78:ad:86:1c:03:0b:fc:bb:bb:6e:2f:b6:ef:ce:e8:f7:01: 7b:c1:08:c6:a3:bb:82:4e:90:41:41:36:af:39:3c:4c:54:03: 38:4a:a7:45:02:f4:f1:d8:b1:a9:67:d8:52:d8:71:35:34:c8: 3b:fe:3a:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8wxHe6jGARoS9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ODQ5NmZhMGQtNTkzNS00MDE4LWJlZTUtZTg2M2FmYWUzZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgvdMpw/pYjvKuHQDcnnTx8pJQ34EPWZzWAc U8E2Qp3sl1f+tnzzE1gaWT+Sd5Kd99P1dxnX47iVD43lOtcoSNYXoiGj3FhEHHlj QG4g1Fnx/KLvgAxE5W1wghugPKCM2TjOJPnTY+sQBVyQEHU4iu8ZKZO9VWFM2Ll+ M074fVHmlR9pZL79ufcS7eKSpDjDvhxGMyJ1cPyU4ARW8UOGrZC55kWbLb/1SvEh 9wd501dOWO5a6tIwMGvA0VGUfPQjQ3ydulza/0rQNxXMBwxgXvCCQpUXhynwNu8L YcQ1CKRuuY5TLvNk1MQ2XguGkxv6X1LlQQk+i2YdfFvkAsYqlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVkIdEcWNT7QciFfT6pnA8FsL26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDQ2YTY2MzgtZTVhMi0z YjEzLTkwMGMtNjRjZjA2NWRmNWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3fl6bzr6q0hOMtYK7OVkMt1C1nkV+Oad/iQrYCUvFowOKDwQIaUDCH rhCCy58uEo+fxQAZmQEsT5sDr7PfCuAylT6SmHDlj3kx9hUfC+KZpRMSIOrAJDBZ qs+y+SwC4OdGc3pag+1ipVu/yNfMEVu6l5agHpQNYN4BTEsgY6rLo06gWZ1JcVuj eO8/6JW2rf8ZmnJc5ZK5348XJra2x6DyE/lOJloqLwLMO8QM0zk/7xRkA8oSi43b Pg+uP1mz8O6OuYNlAsB4rYYcAwv8u7tuL7bvzuj3AXvBCMaju4JOkEFBNq85PExU AzhKp0UC9PHYsaln2FLYcTU0yDv+OtU= -----END CERTIFICATE-----Generated at Mon Sep 28 05:38:19 2026 by rpki-client