$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/312f2e5f-b35c-3eea-a603-29052d85ef87.roa File: 312f2e5f-b35c-3eea-a603-29052d85ef87.roa (raw, json) Hash identifier: 50QPYihF/YOhCedTxcslTZv5+Da+nJHFWEIGQivlu9I= Subject key identifier: 41:CE:21:0A:AC:ED:21:FA:37:C7:FD:C4:DA:AA:EA:35:1D:1B:01:23 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F4972A23562A02B2117E3AD80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/312f2e5f-b35c-3eea-a603-29052d85ef87.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:a2:35:62:a0:2b:21:17:e3:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a39c1d4f-1e81-4f03-8846-acfdfa2be8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0a:26:4d:f0:76:93:54:08:6b:68:65:20:2a: 13:12:d7:f4:10:84:12:fa:5a:db:0a:3b:04:f2:e8: 80:2a:e9:37:19:44:2a:33:b3:ed:72:71:18:79:ba: 53:68:5e:56:43:eb:bc:ab:c6:ac:60:ce:51:e1:87: f6:a1:59:8e:ae:be:54:dd:55:da:c6:4b:ee:fc:7a: 4d:4b:c6:30:f4:ff:23:ec:14:16:be:de:3c:11:63: bc:4b:26:f6:ee:b1:d7:11:51:e2:22:3a:ec:2c:c0: 5f:54:6c:b7:d3:45:2d:c5:3e:ff:ad:1a:38:71:c2: 19:15:a7:f8:d3:13:2a:57:ff:76:ed:0c:08:4d:cb: 2e:b0:d1:cd:cb:8c:3a:52:44:52:30:9a:d1:ff:87: 61:31:da:9c:57:a6:3e:3f:c4:d7:20:3d:09:f1:05: 4a:cc:80:5d:1e:f6:a7:c1:d6:1d:65:4a:82:cd:7f: a2:f3:1f:70:b8:24:d8:2e:3a:a3:29:8c:79:13:ec: ea:92:99:1b:0b:f9:33:ea:49:89:6f:0a:53:52:3b: b8:70:fe:7b:ee:67:0f:90:05:a9:f1:83:c6:6b:17: 04:8f:11:89:dc:1c:0c:62:3b:5c:a9:31:ee:0c:e4: 0f:d2:26:46:26:f7:84:89:85:c4:55:12:68:cd:13: e7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CE:21:0A:AC:ED:21:FA:37:C7:FD:C4:DA:AA:EA:35:1D:1B:01:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/312f2e5f-b35c-3eea-a603-29052d85ef87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a0:6d:dc:4f:1b:8e:89:cf:01:b3:5e:e2:e7:c7:e1:80:e5: fb:17:56:ca:3b:02:ee:d9:fb:31:07:b4:2f:f9:55:0d:87:be: 36:81:22:59:6c:17:c5:fb:3d:b5:72:32:29:1a:f9:8e:b1:e1: f4:85:92:c7:13:c3:27:24:0c:8b:c7:5f:dd:d6:cd:a3:aa:98: 1f:35:73:ee:c7:b3:46:96:9a:a0:74:c3:3e:2d:84:d9:6c:d2: c1:f1:63:48:f5:3e:4f:60:27:e5:29:6c:e7:e5:ba:0a:ed:e5: 08:e9:87:95:35:63:41:b6:57:2c:1f:06:d5:ef:28:82:17:ac: 64:f9:be:b2:20:ea:d9:24:73:ff:d3:86:70:63:9f:44:94:2a: 11:8f:33:74:b8:3a:54:cc:e0:f5:7e:df:a8:80:71:f3:d4:35: 3e:c4:db:76:56:89:76:3b:ca:8a:29:5c:02:2a:98:cc:5a:49: d8:cf:a9:52:a2:dc:42:4b:fb:7c:29:46:39:79:5c:36:09:b2: f0:b7:d4:44:3c:90:9a:45:be:5b:00:75:06:3c:bd:cb:ea:fe: a5:cf:a6:1b:dc:41:23:e6:c1:8a:76:b0:ca:bd:f0:09:15:74: d2:63:93:ce:2e:46:f1:0e:6a:19:f8:13:a3:52:60:48:97:49: f1:c6:f7:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcqI1YqArIRfjrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTM5YzFkNGYtMWU4MS00ZjAzLTg4NDYtYWNmZGZhMmJlOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowomTfB2k1QIa2hlICoTEtf0EIQS+lrbCjsE 8uiAKuk3GUQqM7PtcnEYebpTaF5WQ+u8q8asYM5R4Yf2oVmOrr5U3VXaxkvu/HpN S8Yw9P8j7BQWvt48EWO8Syb27rHXEVHiIjrsLMBfVGy300UtxT7/rRo4ccIZFaf4 0xMqV/927QwITcsusNHNy4w6UkRSMJrR/4dhMdqcV6Y+P8TXID0J8QVKzIBdHvan wdYdZUqCzX+i8x9wuCTYLjqjKYx5E+zqkpkbC/kz6kmJbwpTUju4cP577mcPkAWp 8YPGaxcEjxGJ3BwMYjtcqTHuDOQP0iZGJveEiYXEVRJozRPnbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHOIQqs7SH6N8f9xNqq6jUdGwEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzEyZjJlNWYtYjM1Yy0z ZWVhLWE2MDMtMjkwNTJkODVlZjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSgbdxPG46JzwGzXuLnx+GA5fsXVso7Au7Z+zEHtC/5VQ2HvjaBIlls F8X7PbVyMika+Y6x4fSFkscTwyckDIvHX93WzaOqmB81c+7Hs0aWmqB0wz4thNls 0sHxY0j1Pk9gJ+UpbOflugrt5Qjph5U1Y0G2VywfBtXvKIIXrGT5vrIg6tkkc//T hnBjn0SUKhGPM3S4OlTM4PV+36iAcfPUNT7E23ZWiXY7yoopXAIqmMxaSdjPqVKi 3EJL+3wpRjl5XDYJsvC31EQ8kJpFvlsAdQY8vcvq/qXPphvcQSPmwYp2sMq98AkV dNJjk84uRvEOahn4E6NSYEiXSfHG9/Y= -----END CERTIFICATE-----Generated at Sun Sep 27 23:23:30 2026 by rpki-client