$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7aeab62e-dc0a-314c-873d-1a87e53fa67f.roa File: 7aeab62e-dc0a-314c-873d-1a87e53fa67f.roa (raw, json) Hash identifier: 7FLoMeViokSRjNzyYBMJzqgyROtySPPbebc4GH/zZlk= Subject key identifier: 8F:50:90:83:31:C7:16:49:57:3A:AA:85:0B:FB:C3:CE:8C:9A:42:67 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F49742E30A671EAC862E43900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7aeab62e-dc0a-314c-873d-1a87e53fa67f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:2e:30:a6:71:ea:c8:62:e4:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=582dfcb6-9aa3-4f07-b084-59c296ef5e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d8:0e:8b:1e:e9:5c:62:18:36:27:e0:f6:17: ab:69:7c:cb:44:a6:b7:f1:26:a7:19:56:5f:80:97: c3:6a:90:3f:22:3f:c1:2c:99:db:26:c7:6f:08:16: 5b:55:7a:7a:1f:3c:4a:6e:d9:37:19:cd:a8:82:39: a7:17:7c:7d:dc:3c:1f:94:88:a9:fb:b2:50:a5:c1: 39:26:5a:21:3a:31:4b:fc:92:f1:a3:09:44:3c:ea: 5f:b8:a0:d8:56:c4:32:30:89:c6:e3:d7:26:91:5b: 81:7e:88:b3:a8:d4:9b:56:00:18:42:99:fa:83:aa: 7b:36:86:05:71:f8:a4:95:74:85:f5:06:92:35:93: 1b:73:21:1d:c2:af:13:f6:e2:12:88:12:0e:ab:30: a3:b5:03:0c:22:66:08:38:b8:5d:20:31:4b:87:5f: c6:0a:0e:04:41:b4:90:d4:5e:ce:8d:23:2e:59:90: d0:d4:76:6c:2c:4a:fe:1d:12:92:c6:e6:22:9d:35: 7e:6e:d9:4c:ac:ed:22:29:9d:8d:1c:e9:ab:c1:3c: ae:f7:86:ae:bb:70:34:5a:b6:d8:05:4a:5a:9a:f7: e7:81:92:4f:79:32:0b:c0:de:01:fb:84:b6:e2:72: 05:3e:71:e4:47:d4:83:cc:a4:3c:fe:de:fd:af:34: a3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:50:90:83:31:C7:16:49:57:3A:AA:85:0B:FB:C3:CE:8C:9A:42:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7aeab62e-dc0a-314c-873d-1a87e53fa67f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:5f:c3:8c:97:b4:f5:76:6e:fe:ee:64:4f:c9:3b:e5:ee:ac: ff:d1:80:3b:ce:10:54:23:a9:ca:05:e9:bc:af:b6:79:d7:df: 6d:f3:33:9e:a8:9e:af:8c:de:2c:b0:c5:e1:2d:12:6a:f2:90: d0:d6:02:61:37:73:89:d8:c5:66:e2:4f:77:cc:80:74:b9:ae: 3a:2c:5a:9e:bc:dd:98:d8:89:7e:77:99:f1:22:47:ac:71:36: 27:33:80:65:e4:87:64:fd:00:e1:6a:bf:6e:15:ce:98:25:c9: 1e:5f:06:9d:48:05:9e:83:74:43:3b:60:74:a0:bf:b7:72:61: 92:6c:e8:8e:b2:d7:a9:8f:bc:21:58:5e:2a:4e:d7:5a:e2:b3: 58:2e:df:53:19:b3:e0:ef:62:fe:59:eb:64:e5:df:03:d7:17: c0:d7:53:01:d5:71:83:d7:40:b2:a6:56:e0:95:bc:85:59:f2: 7e:21:f8:2f:a0:68:31:8f:3f:95:fd:83:76:11:72:13:aa:7a: 0b:7c:ed:3b:78:cc:72:a0:a1:dc:39:d4:a4:9c:49:b1:4f:0b: 37:cb:5e:2f:6f:c4:bc:dd:5d:6b:89:6d:ae:b1:ea:03:f8:a7: 62:46:e1:02:fe:1c:55:b8:e0:cb:29:17:98:b7:40:84:30:5b: 96:73:56:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdC4wpnHqyGLkOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTgyZGZjYjYtOWFhMy00ZjA3LWIwODQtNTljMjk2ZWY1ZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dgOix7pXGIYNifg9heraXzLRKa38SanGVZf gJfDapA/Ij/BLJnbJsdvCBZbVXp6HzxKbtk3Gc2ogjmnF3x93DwflIip+7JQpcE5 JlohOjFL/JLxowlEPOpfuKDYVsQyMInG49cmkVuBfoizqNSbVgAYQpn6g6p7NoYF cfiklXSF9QaSNZMbcyEdwq8T9uISiBIOqzCjtQMMImYIOLhdIDFLh1/GCg4EQbSQ 1F7OjSMuWZDQ1HZsLEr+HRKSxuYinTV+btlMrO0iKZ2NHOmrwTyu94auu3A0WrbY BUpamvfngZJPeTILwN4B+4S24nIFPnHkR9SDzKQ8/t79rzSjmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9QkIMxxxZJVzqqhQv7w86MmkJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2FlYWI2MmUtZGMwYS0z MTRjLTg3M2QtMWE4N2U1M2ZhNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJlUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlfw4yXtPV2bv7uZE/JO+XurP/RgDvOEFQjqcoF6byvtnnX323zM56o nq+M3iywxeEtEmrykNDWAmE3c4nYxWbiT3fMgHS5rjosWp683ZjYiX53mfEiR6xx NiczgGXkh2T9AOFqv24VzpglyR5fBp1IBZ6DdEM7YHSgv7dyYZJs6I6y16mPvCFY XipO11ris1gu31MZs+DvYv5Z62Tl3wPXF8DXUwHVcYPXQLKmVuCVvIVZ8n4h+C+g aDGPP5X9g3YRchOqegt87Tt4zHKgodw51KScSbFPCzfLXi9vxLzdXWuJba6x6gP4 p2JG4QL+HFW44MspF5i3QIQwW5ZzViY= -----END CERTIFICATE-----Generated at Mon Sep 28 16:43:11 2026 by rpki-client