$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa File: 49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa (raw, json) Hash identifier: q8fTb5sNZ6lpnzIg4CHsPIv3DqJAZp72B5mVv8aUk14= Subject key identifier: 48:73:49:44:1F:47:A8:1B:D5:F7:55:FB:E6:10:C2:D5:1B:BD:5A:BF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3A17DD423EF8FB536F43A480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.153.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:dd:42:3e:f8:fb:53:6f:43:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=6780b8d4-f176-474c-8f06-cb3da707ca52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:db:ca:c9:39:d7:d3:9a:d2:b3:f9:a1:ab: 66:0d:a6:37:d4:50:28:7f:68:07:7b:83:86:7a:48: 90:f8:23:8d:1a:9d:d3:83:fd:25:56:09:91:19:a9: a1:d6:92:40:12:27:cb:e9:d7:e0:54:30:5d:3a:b1: fe:d2:a4:a9:e0:c6:33:e3:cb:98:26:5f:1e:6b:20: a8:05:9d:25:53:eb:88:17:b9:f5:e2:bb:43:bf:12: 18:91:03:0e:4c:5c:7f:ed:30:be:ba:4c:1e:1d:f6: 09:9c:c5:09:f9:1e:42:a9:48:c1:dc:38:79:5a:d3: b7:63:db:07:ea:1a:0d:93:00:48:3a:e2:44:97:0d: 7e:dc:5c:8a:06:8c:0f:6d:c1:13:3b:63:9a:86:8d: f9:97:9e:87:99:18:41:99:4a:78:83:91:df:af:8e: c0:09:3f:df:81:83:ce:a0:5d:61:db:bf:58:2f:75: 5f:0c:3c:ce:6a:85:ed:a2:34:06:25:2f:30:64:d7: 6f:ef:2d:8e:e6:ea:dd:76:3a:83:bc:ef:32:2c:86: e0:46:e4:44:6d:18:bb:f2:81:92:6b:30:6d:20:38: ee:c4:09:3e:5d:41:a6:16:68:bd:5e:55:7d:83:51: 9d:df:76:5b:28:91:a8:60:ad:8a:bb:93:ca:f8:90: 42:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:73:49:44:1F:47:A8:1B:D5:F7:55:FB:E6:10:C2:D5:1B:BD:5A:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:aa:e1:bb:a1:25:66:7b:ee:e7:cc:e9:f5:e6:ce:74:4d:06: 71:ec:58:dd:cf:2e:7d:40:7d:c3:8b:76:8d:33:50:13:99:b6: 36:3c:0c:3d:8b:52:0c:8f:aa:db:f2:03:5a:a6:d3:89:4e:58: 22:28:a5:36:47:c6:ca:16:a7:49:0f:f7:98:7c:1e:93:ea:f6: e6:7a:93:35:f1:bb:5b:6c:b7:ce:92:9d:a0:7d:66:ee:01:45: a1:22:ec:e1:89:14:d1:30:f6:b2:40:66:da:d2:50:38:85:9a: 5d:44:fa:91:ee:c6:07:76:09:46:77:d8:28:86:aa:7e:48:16: 36:e8:11:8d:0a:77:55:c2:e6:54:65:37:78:d8:5f:a7:40:ce: 2b:e0:8d:06:3b:24:31:61:31:c3:2c:d0:52:f7:08:8f:c2:2f: ec:8e:f9:69:43:82:0e:6a:28:82:d5:e4:b6:9a:08:75:c8:86: 02:4a:02:88:c1:12:e0:49:e3:75:1f:01:a7:c4:e5:1a:bc:de: ea:51:4d:2b:68:3c:72:32:16:03:01:0e:d1:30:01:ac:2e:dc: b1:d0:5e:51:6f:f9:1a:1d:60:b2:7b:e7:f4:e0:56:7f:6f:87: 02:66:27:73:58:36:97:ef:6c:1f:08:b6:96:56:ac:b5:3c:be: 25:85:4e:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F91CPvj7U29DpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk Njc4MGI4ZDQtZjE3Ni00NzRjLThmMDYtY2IzZGE3MDdjYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrvbysk519Oa0rP5oatmDaY31FAof2gHe4OG ekiQ+CONGp3Tg/0lVgmRGamh1pJAEifL6dfgVDBdOrH+0qSp4MYz48uYJl8eayCo BZ0lU+uIF7n14rtDvxIYkQMOTFx/7TC+ukweHfYJnMUJ+R5CqUjB3Dh5WtO3Y9sH 6hoNkwBIOuJElw1+3FyKBowPbcETO2Oaho35l56HmRhBmUp4g5Hfr47ACT/fgYPO oF1h279YL3VfDDzOaoXtojQGJS8wZNdv7y2O5urddjqDvO8yLIbgRuREbRi78oGS azBtIDjuxAk+XUGmFmi9XlV9g1Gd33ZbKJGoYK2Ku5PK+JBCqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhzSUQfR6gb1fdV++YQwtUbvVq/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDllZjJlMmMtNzdlZi0z N2M5LWIzMjctMjRlOGVlMjBlZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeq4buhJWZ77ufM6fXmznRNBnHsWN3PLn1AfcOLdo0zUBOZtjY8DD2L UgyPqtvyA1qm04lOWCIopTZHxsoWp0kP95h8HpPq9uZ6kzXxu1tst86SnaB9Zu4B RaEi7OGJFNEw9rJAZtrSUDiFml1E+pHuxgd2CUZ32CiGqn5IFjboEY0Kd1XC5lRl N3jYX6dAzivgjQY7JDFhMcMs0FL3CI/CL+yO+WlDgg5qKILV5LaaCHXIhgJKAojB EuBJ43UfAafE5Rq83upRTStoPHIyFgMBDtEwAawu3LHQXlFv+RodYLJ75/TgVn9v hwJmJ3NYNpfvbB8ItpZWrLU8viWFThM= -----END CERTIFICATE-----Generated at Mon Sep 28 00:56:46 2026 by rpki-client