$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/072a14e5-9b4e-308b-abdd-d622a9d2d02d.roa File: 072a14e5-9b4e-308b-abdd-d622a9d2d02d.roa (raw, json) Hash identifier: N5Zu3Q8GCevA8Ls9BGaJz2ROXYDzktu0Enj4aIs5+XM= Subject key identifier: E7:BE:1B:8C:E1:FB:3D:B7:42:2C:1D:FC:9D:39:FA:BE:9A:85:77:7A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F4974E3C909C55B4677B0B821 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/072a14e5-9b4e-308b-abdd-d622a9d2d02d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:e3:c9:09:c5:5b:46:77:b0:b8:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a85abd83-8ce4-4243-b8a4-fef3c2a3676a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2f:bd:1f:2a:bd:a5:7b:cf:73:c7:2d:9d:97: 9a:fe:52:3e:fa:d6:0a:c2:e2:14:aa:d5:30:b0:c6: 5d:ba:68:2a:0c:99:6a:34:c2:2b:66:8d:89:87:cb: 20:7a:08:e4:c3:14:c3:12:3b:74:ed:ff:db:6b:d6: 45:ef:52:44:16:fe:65:05:c9:c4:32:44:ec:fd:ea: a5:0b:5b:1c:a3:18:c7:8c:61:d5:90:4e:06:46:44: b2:91:44:58:9e:ef:cd:ac:49:45:c6:0c:d9:6a:b5: 2e:98:ab:cb:90:f1:a1:17:a0:49:04:ee:f4:fd:d9: 55:ef:85:70:53:8a:f8:b9:64:a8:84:ac:72:0a:b7: 2f:bd:02:6f:9c:c3:9f:b1:3f:eb:5d:67:df:a0:5b: af:62:be:de:a7:11:a8:a4:f3:e9:06:7e:7a:86:84: 17:e7:4c:a7:e7:26:c3:ce:e3:9f:63:45:4a:8d:e1: 4e:c9:98:c3:cc:86:2b:e1:5e:9e:27:ae:c3:c9:66: 7b:93:ce:88:9b:59:b3:fe:6c:c7:f9:33:5c:5d:bb: a2:5d:fd:e7:34:ac:32:76:6a:53:88:3a:7d:a1:0c: 25:79:61:c2:ab:25:fd:24:c3:29:e7:97:14:a3:b8: 1c:e6:7b:cf:0b:ce:b5:da:9b:85:b0:ec:8a:94:57: 63:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BE:1B:8C:E1:FB:3D:B7:42:2C:1D:FC:9D:39:FA:BE:9A:85:77:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/072a14e5-9b4e-308b-abdd-d622a9d2d02d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:56:c6:b4:89:74:bd:ab:e5:c3:8c:3a:a8:32:ca:fe:fd:55: ba:e8:2d:05:26:d3:65:32:2b:f9:c1:ce:76:ed:aa:61:3c:50: db:08:a1:56:32:1c:00:e4:b2:0e:f5:b4:96:77:dd:24:43:47: c7:fb:32:4e:b2:b8:a9:bb:24:10:10:58:b6:88:19:34:23:d4: 8b:e3:3d:c5:65:14:4c:b6:cf:0c:17:e7:d0:c1:c3:e1:60:21: b7:9f:5c:01:87:fc:cd:8b:76:1d:da:47:16:d5:8e:56:c5:29: d8:6a:c6:3f:85:23:06:47:b5:93:b1:fa:b9:7f:bc:4f:03:2f: 98:1f:b1:3d:a6:64:c6:df:bf:41:b0:70:87:d7:18:34:e3:62: 20:62:fc:54:89:c7:dc:01:c3:4e:53:3b:aa:fc:e8:95:3a:fc: 92:30:e8:f9:8d:36:bc:6b:8a:e1:9d:5f:42:e7:5a:43:c0:4f: 80:97:49:cb:60:2f:04:11:98:18:ce:08:81:66:bc:67:0b:c8: 05:9c:58:0c:73:e3:d1:b5:d6:83:1b:11:f8:36:93:c4:6a:09: 40:92:28:6d:08:6f:c6:53:72:94:86:fa:79:19:88:ff:d5:ae: df:e4:a7:a8:eb:0d:87:87:41:58:51:15:12:1a:c5:be:55:4d: a4:46:23:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdOPJCcVbRnewuCEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTg1YWJkODMtOGNlNC00MjQzLWI4YTQtZmVmM2MyYTM2NzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy+9Hyq9pXvPc8ctnZea/lI++tYKwuIUqtUw sMZdumgqDJlqNMIrZo2Jh8sgegjkwxTDEjt07f/ba9ZF71JEFv5lBcnEMkTs/eql C1scoxjHjGHVkE4GRkSykURYnu/NrElFxgzZarUumKvLkPGhF6BJBO70/dlV74Vw U4r4uWSohKxyCrcvvQJvnMOfsT/rXWffoFuvYr7epxGopPPpBn56hoQX50yn5ybD zuOfY0VKjeFOyZjDzIYr4V6eJ67DyWZ7k86Im1mz/mzH+TNcXbuiXf3nNKwydmpT iDp9oQwleWHCqyX9JMMp55cUo7gc5nvPC8612puFsOyKlFdjMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOe+G4zh+z23Qiwd/J05+r6ahXd6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDcyYTE0ZTUtOWI0ZS0z MDhiLWFiZGQtZDYyMmE5ZDJkMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJleMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtWxrSJdL2r5cOMOqgyyv79VbroLQUm02UyK/nBznbtqmE8UNsIoVYy HADksg71tJZ33SRDR8f7Mk6yuKm7JBAQWLaIGTQj1IvjPcVlFEy2zwwX59DBw+Fg IbefXAGH/M2Ldh3aRxbVjlbFKdhqxj+FIwZHtZOx+rl/vE8DL5gfsT2mZMbfv0Gw cIfXGDTjYiBi/FSJx9wBw05TO6r86JU6/JIw6PmNNrxriuGdX0LnWkPAT4CXSctg LwQRmBjOCIFmvGcLyAWcWAxz49G11oMbEfg2k8RqCUCSKG0Ib8ZTcpSG+nkZiP/V rt/kp6jrDYeHQVhRFRIaxb5VTaRGI3w= -----END CERTIFICATE-----Generated at Mon Sep 28 18:29:42 2026 by rpki-client