$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa File: 16646b1c-7273-3e1a-9ca3-efedf58284e9.roa (raw, json) Hash identifier: h2C5Ju8DbjEF8X+n2ef6zlNlYRB8Um2moJKRE+HZovM= Subject key identifier: CD:46:AD:4C:83:5D:EB:B2:CD:32:CB:98:21:48:87:89:8B:BB:F9:CD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F19FCF6D53D1E178B6D028168 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f6:d5:3d:1e:17:8b:6d:02:81:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=b0894f6d-1531-4e1c-ad32-454e63b19d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ca:8e:b9:03:b9:2f:9a:d8:53:71:5c:47:23: ac:47:69:5a:9a:5e:9e:45:d7:d3:44:7d:ea:d3:bb: 6d:fb:aa:16:d5:6f:32:48:d7:b8:3a:2d:d0:01:c3: d0:8b:40:07:f7:23:b1:d0:46:fa:3f:cd:53:52:02: 01:54:6c:20:4f:8d:be:d3:89:7b:cd:99:24:ad:92: 39:bd:d2:81:06:d4:17:2a:ff:40:85:1c:8d:3b:91: 60:6a:da:3a:f7:2d:d5:f3:bb:e2:34:92:29:8a:06: 60:98:8c:14:7a:7b:a9:7f:5d:42:00:86:cc:a1:9c: 27:e9:2f:79:f3:07:53:1f:ff:2b:54:18:f8:7d:75: 1e:2d:5f:24:6e:60:66:0e:8f:56:87:9a:1c:9f:7f: 8c:75:a8:78:58:b9:87:7d:bb:df:c1:22:6a:98:f3: f7:a8:9a:2e:68:48:9e:1a:2c:0f:04:93:b9:ab:70: 88:bf:df:6e:4d:9d:7a:c7:fe:07:5a:d7:99:70:df: ab:bc:31:58:e7:49:76:c3:8b:02:a2:1e:e2:98:2d: 22:49:bb:c1:69:e9:09:76:05:8a:60:00:ca:c0:e6: 7c:41:c0:97:d6:4c:a5:2a:c5:ed:b1:9f:94:9f:14: f4:f0:a4:30:3f:d6:79:39:71:f9:a5:a8:96:0e:b4: 91:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:46:AD:4C:83:5D:EB:B2:CD:32:CB:98:21:48:87:89:8B:BB:F9:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:3c:e6:31:f6:63:c3:6e:1f:c4:4b:ba:88:7d:c4:fc:a4:46: 22:37:5e:f0:3c:7c:6c:04:e7:d4:66:ee:67:49:e1:aa:80:71: db:e4:e7:e9:04:ce:bb:b6:d7:7f:c0:45:c2:e9:73:4c:e1:f4: ca:3b:5c:97:d8:56:3a:4f:21:1c:f0:71:c7:1c:2f:9f:15:eb: 29:2e:f5:2e:a5:4d:4e:40:b0:93:84:a5:df:d6:76:49:5c:86: f0:75:39:d9:8d:dd:79:7b:49:f7:77:46:88:f6:6b:d2:86:e6: 71:4b:5d:51:38:2b:3b:99:2e:53:cf:dc:94:c5:51:dc:57:c0: 9b:aa:3f:74:e8:52:5e:72:98:a9:d6:eb:1d:a4:7b:c5:d6:ed: 5a:40:45:58:9a:9b:72:8b:f4:0e:e2:0d:f3:ed:ac:a8:e0:cb: ba:1e:4b:ea:7b:1a:5d:5b:5f:35:50:73:46:43:77:d2:37:93: d1:f4:53:62:66:38:ea:1a:e3:b3:8e:14:24:2d:49:ca:c7:b1: 96:e1:61:5d:a0:9a:5d:ca:ef:a0:ea:43:25:95:65:e9:2c:e7: ab:60:a9:61:c7:ef:0d:38:d6:67:b0:7d:98:a4:af:be:91:11: fc:cf:18:b8:42:ee:68:60:69:dc:64:20:a3:78:c3:d5:1d:42: 7a:f5:fd:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/PbVPR4Xi20CgWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk YjA4OTRmNmQtMTUzMS00ZTFjLWFkMzItNDU0ZTYzYjE5ZDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcqOuQO5L5rYU3FcRyOsR2laml6eRdfTRH3q 07tt+6oW1W8ySNe4Oi3QAcPQi0AH9yOx0Eb6P81TUgIBVGwgT42+04l7zZkkrZI5 vdKBBtQXKv9AhRyNO5Fgato69y3V87viNJIpigZgmIwUenupf11CAIbMoZwn6S95 8wdTH/8rVBj4fXUeLV8kbmBmDo9Wh5ocn3+Mdah4WLmHfbvfwSJqmPP3qJouaEie GiwPBJO5q3CIv99uTZ16x/4HWteZcN+rvDFY50l2w4sCoh7imC0iSbvBaekJdgWK YADKwOZ8QcCX1kylKsXtsZ+UnxT08KQwP9Z5OXH5paiWDrSRlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1GrUyDXeuyzTLLmCFIh4mLu/nNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTY2NDZiMWMtNzI3My0z ZTFhLTljYTMtZWZlZGY1ODI4NGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKg85jH2Y8NuH8RLuoh9xPykRiI3XvA8fGwE59Rm7mdJ4aqAcdvk5+kE zru213/ARcLpc0zh9Mo7XJfYVjpPIRzwccccL58V6yku9S6lTU5AsJOEpd/Wdklc hvB1OdmN3Xl7Sfd3Roj2a9KG5nFLXVE4KzuZLlPP3JTFUdxXwJuqP3ToUl5ymKnW 6x2ke8XW7VpARViam3KL9A7iDfPtrKjgy7oeS+p7Gl1bXzVQc0ZDd9I3k9H0U2Jm OOoa47OOFCQtScrHsZbhYV2gml3K76DqQyWVZeks56tgqWHH7w041mewfZikr76R EfzPGLhC7mhgadxkIKN4w9UdQnr1/Yg= -----END CERTIFICATE-----Generated at Mon Sep 28 19:12:11 2026 by rpki-client