$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2d246d-a182-371a-bc59-9c907d654829.roa File: ab2d246d-a182-371a-bc59-9c907d654829.roa (raw, json) Hash identifier: MP/9xLF1hmpG00OoaHluEVE/n4T7R9yYH7UDfVES14U= Subject key identifier: 08:B3:BE:F4:2A:39:B2:D0:14:CA:B3:D1:F9:76:90:6B:BD:60:FD:52 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F19FCF7CFB5DD251DF6FFDBC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2d246d-a182-371a-bc59-9c907d654829.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f7:cf:b5:dd:25:1d:f6:ff:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=5f3e8b30-cc28-450b-a30d-7d2ca2757db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e7:0f:d5:d4:2b:36:82:cf:87:df:22:31:8b: 1a:85:4b:bd:88:83:ef:f5:3a:4d:45:bc:2f:3c:3b: 69:42:2f:76:c1:be:84:64:4f:d1:1b:55:b9:3a:1f: 32:ef:09:57:f2:10:b5:87:bb:29:6a:bb:ff:b2:23: 4c:ec:f1:94:de:b9:83:b8:cf:de:57:07:9a:62:96: 6a:11:df:c6:a0:d1:8a:7d:99:be:5d:eb:7e:4a:b9: b6:fd:e8:8e:c2:63:03:00:5a:a1:40:b5:44:9b:51: 67:8c:77:a8:8e:18:eb:f8:de:73:ee:9a:64:60:8e: 91:b3:70:2c:ec:5f:54:a9:55:f2:51:15:fb:27:e1: 34:1f:97:86:94:ce:a3:45:c6:5e:b8:9c:5d:32:eb: 67:c2:ef:68:9d:58:e9:7f:c5:ef:2e:db:d6:e9:f0: 03:48:cf:a6:9e:3e:53:ff:51:2d:3b:c4:0a:84:4d: bc:7f:1a:52:0a:29:b8:db:fa:d5:d8:76:fb:02:6d: 2b:a5:3a:49:f3:36:26:b1:b1:49:ec:e7:b2:d5:8c: e0:ea:e1:27:db:6b:c5:70:4e:07:e9:62:b6:1a:8d: 9a:7c:b0:a8:cc:52:a5:8a:e9:d1:4c:cb:56:df:9b: 41:60:17:ff:17:85:48:ec:07:5d:aa:1e:6a:b7:cb: 33:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B3:BE:F4:2A:39:B2:D0:14:CA:B3:D1:F9:76:90:6B:BD:60:FD:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2d246d-a182-371a-bc59-9c907d654829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:62:1f:fb:7b:c4:8b:5a:bd:68:e7:9e:a7:04:9c:e1:c4:cc: 0b:50:89:c1:48:09:21:21:01:8c:5c:1f:93:dc:05:92:73:bb: ea:16:eb:e8:42:b1:03:2a:3e:04:a9:b4:34:33:20:f0:03:c3: bf:59:31:8c:5c:7b:3e:e1:18:ce:27:24:56:14:ff:8e:ed:9f: 46:6e:76:ea:a1:11:7b:20:16:c3:f3:b5:f6:d3:01:60:33:ec: 40:4b:d9:62:9f:c2:2a:3c:8c:0e:20:75:8f:8d:5e:c9:2a:6a: ff:42:e3:f9:fc:bf:33:9a:26:31:f5:53:95:ab:71:03:a5:bf: f9:87:6c:ca:34:6d:a9:4b:62:e5:8e:94:61:a0:54:5d:70:10: 2f:68:91:21:ae:fc:ef:c8:de:81:aa:70:2d:a7:b7:2e:18:18: 3d:41:dc:9c:54:09:3a:15:b8:80:4d:42:f9:d1:fe:8c:7f:0a: 39:47:9d:81:ce:ab:44:a3:bd:9e:8c:40:ab:15:1e:69:05:9b: 6d:fb:db:74:16:86:49:55:df:de:d1:3c:4b:99:95:ea:27:10: 25:dd:2f:1c:df:a3:e7:3d:91:9a:1c:b0:8e:90:f1:b0:ba:1e: ff:5a:39:d0:db:a8:de:2f:ad:09:6e:de:70:8c:0e:24:1a:20: 2f:40:46:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/PfPtd0lHfb/28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk NWYzZThiMzAtY2MyOC00NTBiLWEzMGQtN2QyY2EyNzU3ZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOcP1dQrNoLPh98iMYsahUu9iIPv9TpNRbwv PDtpQi92wb6EZE/RG1W5Oh8y7wlX8hC1h7sparv/siNM7PGU3rmDuM/eVweaYpZq Ed/GoNGKfZm+Xet+Srm2/eiOwmMDAFqhQLVEm1FnjHeojhjr+N5z7ppkYI6Rs3As 7F9UqVXyURX7J+E0H5eGlM6jRcZeuJxdMutnwu9onVjpf8XvLtvW6fADSM+mnj5T /1EtO8QKhE28fxpSCim42/rV2Hb7Am0rpTpJ8zYmsbFJ7Oey1Yzg6uEn22vFcE4H 6WK2Go2afLCozFKliunRTMtW35tBYBf/F4VI7Addqh5qt8szdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAizvvQqObLQFMqz0fl2kGu9YP1SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWIyZDI0NmQtYTE4Mi0z NzFhLWJjNTktOWM5MDdkNjU0ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1iH/t7xItavWjnnqcEnOHEzAtQicFICSEhAYxcH5PcBZJzu+oW6+hC sQMqPgSptDQzIPADw79ZMYxcez7hGM4nJFYU/47tn0ZuduqhEXsgFsPztfbTAWAz 7EBL2WKfwio8jA4gdY+NXskqav9C4/n8vzOaJjH1U5WrcQOlv/mHbMo0balLYuWO lGGgVF1wEC9okSGu/O/I3oGqcC2nty4YGD1B3JxUCToVuIBNQvnR/ox/CjlHnYHO q0SjvZ6MQKsVHmkFm23723QWhklV397RPEuZleonECXdLxzfo+c9kZocsI6Q8bC6 Hv9aOdDbqN4vrQlu3nCMDiQaIC9ARvY= -----END CERTIFICATE-----Generated at Mon Sep 28 11:06:06 2026 by rpki-client