$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/572409db-3ef3-37dc-a464-eedbee4a47ed.roa File: 572409db-3ef3-37dc-a464-eedbee4a47ed.roa (raw, json) Hash identifier: 9CDpGmpeo/1p9SGp1DHiX7M2Zaxm2BwcR3oEx2ViIE0= Subject key identifier: 48:89:90:3B:F7:C7:18:9B:6F:52:7F:0C:D6:3E:7C:59:6D:D2:42:1A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3A17C938DDF9B53CCCAF9C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/572409db-3ef3-37dc-a464-eedbee4a47ed.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.153.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:c9:38:dd:f9:b5:3c:cc:af:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=075d2466-dbfc-43d3-8d40-4bfd33c154bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c8:ed:7e:f4:b7:d3:a6:97:cd:dd:5c:f0:49: 9a:20:89:cc:65:20:ce:ea:76:21:bd:4b:27:2f:f8: e4:f4:7b:aa:39:23:e1:35:b5:cc:e6:18:ba:fa:fe: d6:87:cf:e5:74:b3:f8:5d:fc:a9:65:80:70:5e:14: b7:78:66:67:19:08:6a:5a:fe:af:4f:3a:4a:f1:b1: ef:12:a3:fd:b4:62:a6:cc:b6:b9:dc:25:82:d3:78: 2c:8d:33:4d:59:d0:49:75:25:80:c8:58:75:5d:f1: 23:62:6b:26:13:da:18:c6:b6:b3:0d:94:ce:91:fd: bc:27:6c:a2:69:ca:3d:aa:92:f3:5f:2f:38:68:cb: 95:cf:26:3b:1d:8a:3b:ee:a9:db:31:3a:ed:60:41: ef:82:5d:28:bc:f2:10:eb:2f:50:f3:ec:34:9a:85: bb:82:be:b6:67:43:3d:42:79:c9:4c:c3:16:bf:f5: 2b:fc:a8:f0:34:cf:39:2f:fa:28:98:ea:71:09:9b: e4:6c:52:14:83:ca:2f:2a:1e:5c:bf:8a:a6:a9:5f: 79:23:d3:67:6c:dd:49:f8:d3:66:a6:e2:08:b4:b6: da:97:a4:a9:23:a6:31:1d:8b:7a:a4:dc:58:b5:24: d1:09:15:9b:94:f4:eb:ca:53:77:69:41:a5:0a:df: c6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:89:90:3B:F7:C7:18:9B:6F:52:7F:0C:D6:3E:7C:59:6D:D2:42:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/572409db-3ef3-37dc-a464-eedbee4a47ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:e7:86:aa:cb:db:f7:01:0d:98:89:9c:9a:ec:d7:88:4b:2b: b5:42:9a:c9:bd:32:55:04:8c:c2:08:93:cd:e8:63:15:20:25: b3:a8:1e:ed:06:ce:e9:51:91:74:31:9e:e3:4a:e3:3d:36:be: a2:6c:7c:e6:97:a6:53:e2:4b:87:99:4d:da:c0:88:e4:79:bd: 8c:9c:06:dd:e9:df:03:55:80:6c:05:04:78:a2:a2:c1:9b:a2: 50:48:31:c3:46:ed:a1:59:5b:7a:3c:a7:28:b9:bd:7c:4c:53: 9b:a6:68:db:b4:63:83:59:aa:f6:91:35:74:4b:74:ab:52:5c: 5b:1b:be:30:8c:f1:80:d7:29:6c:dd:93:cb:7d:0a:81:aa:5e: 0a:69:8f:a3:79:e3:d8:11:7a:05:84:f4:41:5f:96:36:4a:84: b5:61:fb:ad:39:7a:5e:6e:28:bf:f4:7d:77:cc:a7:da:71:7a: 9c:88:b5:9f:96:8a:5b:d0:f3:bc:6b:dc:31:3d:fe:e0:dd:eb: 78:28:60:f9:13:8b:10:f8:20:76:c4:10:8b:f8:86:aa:c6:ae: ea:1a:7b:2f:00:56:62:65:07:03:ec:d5:de:8a:e6:33:e5:b9: e4:fd:77:6c:4d:b0:93:b7:6f:80:9d:ac:af:b0:76:bb:e8:d4: 4f:0d:10:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8k43fm1PMyvnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MDc1ZDI0NjYtZGJmYy00M2QzLThkNDAtNGJmZDMzYzE1NGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncjtfvS306aXzd1c8EmaIInMZSDO6nYhvUsn L/jk9HuqOSPhNbXM5hi6+v7Wh8/ldLP4XfypZYBwXhS3eGZnGQhqWv6vTzpK8bHv EqP9tGKmzLa53CWC03gsjTNNWdBJdSWAyFh1XfEjYmsmE9oYxrazDZTOkf28J2yi aco9qpLzXy84aMuVzyY7HYo77qnbMTrtYEHvgl0ovPIQ6y9Q8+w0moW7gr62Z0M9 QnnJTMMWv/Ur/KjwNM85L/oomOpxCZvkbFIUg8ovKh5cv4qmqV95I9NnbN1J+NNm puIItLbal6SpI6YxHYt6pNxYtSTRCRWblPTrylN3aUGlCt/GUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiJkDv3xxibb1J/DNY+fFlt0kIaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTcyNDA5ZGItM2VmMy0z N2RjLWE0NjQtZWVkYmVlNGE0N2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnnhqrL2/cBDZiJnJrs14hLK7VCmsm9MlUEjMIIk83oYxUgJbOoHu0G zulRkXQxnuNK4z02vqJsfOaXplPiS4eZTdrAiOR5vYycBt3p3wNVgGwFBHiiosGb olBIMcNG7aFZW3o8pyi5vXxMU5umaNu0Y4NZqvaRNXRLdKtSXFsbvjCM8YDXKWzd k8t9CoGqXgppj6N549gRegWE9EFfljZKhLVh+605el5uKL/0fXfMp9pxepyItZ+W ilvQ87xr3DE9/uDd63goYPkTixD4IHbEEIv4hqrGruoaey8AVmJlBwPs1d6K5jPl ueT9d2xNsJO3b4CdrK+wdrvo1E8NEME= -----END CERTIFICATE-----Generated at Mon Sep 28 23:17:34 2026 by rpki-client