$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04800cc4-d33c-33e3-9c3c-e1efab77c60b.roa File: 04800cc4-d33c-33e3-9c3c-e1efab77c60b.roa (raw, json) Hash identifier: LQp+S+irPRsWrg5SfOHc9OA+ZJ1lciHLhrULRdf8tE0= Subject key identifier: B1:D4:67:46:5A:05:E4:41:B2:67:98:48:9B:FB:F8:42:29:ED:22:E2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F49746070B8EDE1F478D03680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04800cc4-d33c-33e3-9c3c-e1efab77c60b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:60:70:b8:ed:e1:f4:78:d0:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2892a5e1-bf47-46cb-ad3c-a9c70c0f58da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2e:29:f7:77:91:7e:50:5c:79:d5:46:f4:81: b2:75:56:35:f3:87:09:0e:0f:49:0e:ac:c3:39:ab: 48:92:83:6a:8a:ff:5b:3d:92:26:d4:6b:96:bc:39: 80:12:1d:6e:41:3a:bf:8f:0e:10:dd:63:05:46:18: b4:d9:31:2d:1c:5e:2f:36:3e:20:80:6d:02:49:2e: 62:f3:21:20:1e:15:92:31:84:df:e7:78:e5:6e:02: ce:01:67:05:bb:44:3c:11:29:d6:73:87:ae:35:98: 26:cf:40:2b:f8:7f:95:3f:05:fd:30:db:a4:14:d5: c5:e7:f6:28:26:27:d5:cf:28:c0:71:00:24:69:b4: 2e:5e:bf:17:74:8c:03:dd:57:1c:46:6b:7b:2b:d9: ab:bd:5e:5f:5f:ba:7f:ef:14:31:4c:3f:45:a9:de: fe:b1:9d:13:97:8f:af:83:5f:c6:fd:49:5a:4f:97: 7e:5f:c3:63:cf:ff:7e:50:ff:13:b5:0f:58:12:41: b0:ee:9f:ca:cf:8d:0c:ed:b5:a2:bc:0b:bd:e9:57: 4c:2b:f4:13:81:ea:d9:4c:c7:81:ed:aa:fc:77:a0: 7b:4c:58:2f:6f:b5:4b:31:cf:75:8e:dd:52:09:98: e7:b9:4a:2e:80:7b:f4:2f:0b:e3:ce:cb:d7:e0:c4: f7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D4:67:46:5A:05:E4:41:B2:67:98:48:9B:FB:F8:42:29:ED:22:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04800cc4-d33c-33e3-9c3c-e1efab77c60b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e1:1f:98:cc:5b:05:3f:bc:b0:19:eb:69:ce:36:5a:8c:56: 49:b0:f4:cd:83:12:ea:d1:6b:fb:97:ff:01:e0:ee:bf:90:a6: c4:b1:13:7c:f0:d3:72:87:7b:78:5a:3b:8f:f4:99:da:31:e7: e3:ec:5c:44:ba:27:18:ed:4d:b5:42:e4:d8:30:2e:87:20:0e: b9:fd:34:12:39:9b:48:fc:b7:6e:ca:55:09:f7:91:0a:9e:fe: 1d:56:77:52:e6:f4:47:98:bf:37:49:05:be:37:ad:5d:7b:5b: b8:10:64:f8:1d:5e:0e:b3:42:79:68:f6:36:d1:d3:8d:67:e0: f7:f6:af:b8:f3:5e:de:29:d0:69:c0:a2:1e:1e:1d:42:e6:a0: 46:a8:bc:36:09:34:65:0e:e4:2d:bc:b9:28:b0:14:0c:ee:d7: 6c:7f:a5:2c:79:a2:2f:b9:8d:21:b9:78:f4:ba:4c:1a:5f:2c: 14:5b:ed:ef:c8:7e:30:d1:71:3a:d7:60:7d:fd:26:c9:2a:f9: d3:c9:f6:a4:c3:f2:2d:7e:b6:04:62:30:21:93:73:9d:75:0b: 1a:89:aa:34:49:42:b0:33:f3:96:c1:be:a9:91:14:e4:e7:3a: 8e:54:95:bf:fb:54:38:e0:53:4d:74:d2:b0:f5:b5:97:de:ee: 9b:3f:3c:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGBwuO3h9HjQNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mjg5MmE1ZTEtYmY0Ny00NmNiLWFkM2MtYTljNzBjMGY1OGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC4p93eRflBcedVG9IGydVY184cJDg9JDqzD OatIkoNqiv9bPZIm1GuWvDmAEh1uQTq/jw4Q3WMFRhi02TEtHF4vNj4ggG0CSS5i 8yEgHhWSMYTf53jlbgLOAWcFu0Q8ESnWc4euNZgmz0Ar+H+VPwX9MNukFNXF5/Yo JifVzyjAcQAkabQuXr8XdIwD3VccRmt7K9mrvV5fX7p/7xQxTD9Fqd7+sZ0Tl4+v g1/G/UlaT5d+X8Njz/9+UP8TtQ9YEkGw7p/Kz40M7bWivAu96VdMK/QTgerZTMeB 7ar8d6B7TFgvb7VLMc91jt1SCZjnuUougHv0LwvjzsvX4MT3wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHUZ0ZaBeRBsmeYSJv7+EIp7SLiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDQ4MDBjYzQtZDMzYy0z M2UzLTljM2MtZTFlZmFiNzdjNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDhH5jMWwU/vLAZ62nONlqMVkmw9M2DEurRa/uX/wHg7r+QpsSxE3zw 03KHe3haO4/0mdox5+PsXES6JxjtTbVC5NgwLocgDrn9NBI5m0j8t27KVQn3kQqe /h1Wd1Lm9EeYvzdJBb43rV17W7gQZPgdXg6zQnlo9jbR041n4Pf2r7jzXt4p0GnA oh4eHULmoEaovDYJNGUO5C28uSiwFAzu12x/pSx5oi+5jSG5ePS6TBpfLBRb7e/I fjDRcTrXYH39Jskq+dPJ9qTD8i1+tgRiMCGTc511CxqJqjRJQrAz85bBvqmRFOTn Oo5Ulb/7VDjgU0100rD1tZfe7ps/PC0= -----END CERTIFICATE-----Generated at Wed Sep 30 12:40:48 2026 by rpki-client