$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3cbdb072-dea6-33f0-8624-e0763b4f0119.roa File: 3cbdb072-dea6-33f0-8624-e0763b4f0119.roa (raw, json) Hash identifier: vqShlW0TJDkWK3Ey85sh0C9RHR6rpy8Uh6JOvYUwUbs= Subject key identifier: A7:A5:EB:08:52:4B:A2:35:9F:53:18:E6:8D:FC:4D:C1:76:B0:91:D8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F498A72A8866AA2A0273B3780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3cbdb072-dea6-33f0-8624-e0763b4f0119.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:72:a8:86:6a:a2:a0:27:3b:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b4d4d86b-46a3-487e-8a0a-8e397c5a3751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c4:74:93:b5:9f:ea:1c:de:51:0a:8c:f8:13: 1e:d8:90:3a:60:f7:7d:df:76:5a:8a:b7:75:a9:6a: 99:00:93:de:39:67:06:3b:79:f4:65:24:b0:e0:ac: 90:53:9a:87:9d:ef:49:92:f3:5e:3c:01:66:a7:0f: 59:1c:ad:03:33:05:f1:aa:e4:09:22:9b:fd:b7:80: 4d:9b:a0:c1:7a:18:16:c5:f4:79:61:f7:cc:cc:91: 03:95:a5:00:58:35:06:6d:ce:70:dd:60:97:11:14: cd:d5:c6:6a:3b:cd:4a:9a:38:b8:cb:c6:0e:fc:75: 5a:96:8c:a4:22:04:10:3a:ac:98:3a:8f:88:1d:20: 3b:60:c0:e8:97:dd:8b:16:76:a4:83:9b:17:43:7f: f9:a3:c2:ec:9e:51:4e:b9:e8:7f:6b:68:26:8d:be: 17:c7:21:b8:a6:af:26:2e:ca:43:fd:e8:1e:ab:d2: b8:4a:b3:da:c9:19:6c:77:3e:22:ff:68:7e:aa:e9: 87:f0:0f:5f:9e:a5:f9:c6:1a:1d:ac:61:0b:52:5b: e2:91:b1:4e:2f:31:e9:c2:3d:9f:44:cb:b3:ca:13: 87:e5:74:46:d6:c2:89:8a:52:42:a7:73:79:ef:84: 74:50:49:10:25:0d:68:9d:4e:02:25:c0:7a:19:05: 64:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A5:EB:08:52:4B:A2:35:9F:53:18:E6:8D:FC:4D:C1:76:B0:91:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3cbdb072-dea6-33f0-8624-e0763b4f0119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:67:94:5f:81:13:78:23:f1:25:ed:fd:f2:d2:8b:19:12:14: d7:b2:37:28:67:80:d9:d1:7b:5b:da:34:67:cf:d3:e1:5e:9b: eb:a4:d7:67:37:6e:a0:c3:75:55:6d:3b:6c:28:9d:ee:a1:1b: 85:a6:ed:d7:a5:ac:93:0e:46:24:25:40:26:46:c2:85:49:d0: ef:76:62:5f:da:92:f6:36:5e:9f:30:f0:21:4f:d6:0e:f9:a2: 8a:96:02:a5:00:79:5b:95:88:06:0a:da:8a:9b:a8:c4:81:7c: 08:3e:a9:b9:10:5e:cd:43:88:d3:af:df:73:27:57:b8:fd:8c: 0f:93:df:f3:c3:e0:ca:e9:f1:37:0d:10:f2:d5:9a:30:f8:fa: e6:7e:bd:2c:de:63:d8:ae:e0:2b:a1:9a:b6:e3:76:72:d7:67: d3:49:c4:e9:ec:f4:cd:0b:cd:38:c3:b1:d3:be:9c:37:73:23: fc:5f:6f:cf:13:1e:14:5b:e1:a2:32:d3:69:a7:94:ab:d9:0a: 74:c0:30:8a:db:5d:c2:d4:ae:4c:10:6b:8f:43:fd:e9:46:12: 4f:87:a5:36:e1:54:a9:c4:35:28:4e:a4:da:94:79:30:24:47: c0:62:1e:59:b5:3b:0e:cb:98:99:23:27:48:43:d1:af:6b:f2: 13:ec:21:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JinKohmqioCc7N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjRkNGQ4NmItNDZhMy00ODdlLThhMGEtOGUzOTdjNWEzNzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsR0k7Wf6hzeUQqM+BMe2JA6YPd933Zaird1 qWqZAJPeOWcGO3n0ZSSw4KyQU5qHne9JkvNePAFmpw9ZHK0DMwXxquQJIpv9t4BN m6DBehgWxfR5YffMzJEDlaUAWDUGbc5w3WCXERTN1cZqO81Kmji4y8YO/HValoyk IgQQOqyYOo+IHSA7YMDol92LFnakg5sXQ3/5o8LsnlFOueh/a2gmjb4XxyG4pq8m LspD/egeq9K4SrPayRlsdz4i/2h+qumH8A9fnqX5xhodrGELUlvikbFOLzHpwj2f RMuzyhOH5XRG1sKJilJCp3N574R0UEkQJQ1onU4CJcB6GQVkGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKel6whSS6I1n1MY5o38TcF2sJHYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2NiZGIwNzItZGVhNi0z M2YwLTg2MjQtZTA3NjNiNGYwMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABnlF+BE3gj8SXt/fLSixkSFNeyNyhngNnRe1vaNGfP0+Fem+uk12c3 bqDDdVVtO2wone6hG4Wm7delrJMORiQlQCZGwoVJ0O92Yl/akvY2Xp8w8CFP1g75 ooqWAqUAeVuViAYK2oqbqMSBfAg+qbkQXs1DiNOv33MnV7j9jA+T3/PD4Mrp8TcN EPLVmjD4+uZ+vSzeY9iu4CuhmrbjdnLXZ9NJxOns9M0LzTjDsdO+nDdzI/xfb88T HhRb4aIy02mnlKvZCnTAMIrbXcLUrkwQa49D/elGEk+HpTbhVKnENShOpNqUeTAk R8BiHlm1Ow7LmJkjJ0hD0a9r8hPsIVw= -----END CERTIFICATE-----Generated at Sun Sep 27 08:35:15 2026 by rpki-client