$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b78a586a-4aea-3a0c-8d51-4b0da576ee14.roa File: b78a586a-4aea-3a0c-8d51-4b0da576ee14.roa (raw, json) Hash identifier: /n/e3mRD7ZKxIrcT0+xuBtlujtFdXyoHVHEamkkD3s0= Subject key identifier: 7D:6E:1D:E2:60:1C:30:F7:58:16:FA:F8:04:6A:5F:0F:D7:E6:44:DC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497480FB29B7DD44478A4B80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b78a586a-4aea-3a0c-8d51-4b0da576ee14.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:80:fb:29:b7:dd:44:47:8a:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a0fc5038-441e-44f2-8572-7b34d1adc939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:67:2e:a5:0e:3e:dc:99:70:f8:f9:06:08:a3: 00:62:6e:8c:48:d7:87:99:0e:bb:af:c8:4e:20:76: bf:05:f9:b9:58:3c:21:c3:3c:51:6f:35:fe:86:91: f7:ee:75:c5:21:b7:1d:54:5c:ab:5d:24:84:99:23: 60:24:22:7d:15:f0:a1:d1:17:1c:34:7f:cf:aa:e9: 15:71:39:3e:74:1a:9f:7c:b5:2e:7e:62:56:e5:80: 36:20:d3:be:b5:a5:38:00:1d:6e:48:19:c7:ba:84: e3:f3:00:d8:48:38:ca:19:e1:d1:cf:e8:84:de:eb: 19:ac:02:49:97:3c:5d:fe:c0:e6:e3:17:02:51:f4: f2:e5:bc:87:6b:8c:5f:55:a9:fc:83:6a:6d:92:84: 31:6c:61:bb:e9:6f:8d:a3:52:88:34:79:32:99:1a: b2:47:02:39:62:fe:4d:0e:04:5a:0a:b5:0b:43:ce: 7f:0e:49:fd:4a:88:90:9b:ce:a3:f0:2c:a8:8f:6e: ee:fa:c5:84:0b:4e:77:af:51:07:dc:f3:16:1b:ed: 2c:4c:31:9d:f1:47:e8:bb:3b:cc:41:52:15:31:8f: c0:d2:6f:a3:22:16:8e:b8:d1:b2:17:6a:4e:8b:5c: 39:e7:dd:44:8a:d1:54:d9:04:05:d5:9e:f2:07:aa: 07:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6E:1D:E2:60:1C:30:F7:58:16:FA:F8:04:6A:5F:0F:D7:E6:44:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b78a586a-4aea-3a0c-8d51-4b0da576ee14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:75:c6:39:01:97:58:20:33:fa:69:2b:31:20:69:41:22:13: 82:0f:55:ca:5a:ed:d5:83:c7:35:ff:05:74:01:ec:a1:7e:b2: 30:e0:fd:a1:ea:48:fc:9e:c4:00:c0:93:e4:f1:28:81:c1:da: 70:05:9c:f6:68:db:a1:4f:ed:1f:17:35:6c:bf:73:56:a6:7f: ae:69:d4:53:77:09:26:af:d7:fc:8d:6c:12:41:42:a9:2c:83: be:76:dd:0d:67:e8:4c:72:98:9e:d7:13:f4:e6:07:3f:eb:d6: e6:f5:23:fb:b1:08:e2:cd:75:08:7c:ac:73:73:6b:99:38:7e: 88:ee:3c:7c:eb:93:d7:82:e5:57:03:a5:16:ae:70:57:91:ac: d5:75:dd:9b:9a:9d:6f:4c:f8:4e:1c:95:b8:fe:cb:69:b5:d8: 12:7d:c4:99:56:cc:ff:cd:d4:e7:18:02:ca:03:a7:cf:09:17: 47:30:cf:0a:83:02:d4:f4:14:31:2c:3d:0c:4f:9c:85:b6:05: f6:82:83:4a:e9:9a:b9:f6:3c:d0:ed:0c:0a:cd:ea:a3:f4:7f: 14:72:43:7e:d1:28:11:45:79:01:2d:2c:3d:ad:e9:4c:f8:ed: 75:1e:cf:f3:90:7e:74:80:96:59:57:6d:d4:47:0d:d1:52:e9: 9e:75:12:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdID7KbfdREeKS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTBmYzUwMzgtNDQxZS00NGYyLTg1NzItN2IzNGQxYWRjOTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomcupQ4+3Jlw+PkGCKMAYm6MSNeHmQ67r8hO IHa/Bfm5WDwhwzxRbzX+hpH37nXFIbcdVFyrXSSEmSNgJCJ9FfCh0RccNH/PqukV cTk+dBqffLUufmJW5YA2INO+taU4AB1uSBnHuoTj8wDYSDjKGeHRz+iE3usZrAJJ lzxd/sDm4xcCUfTy5byHa4xfVan8g2ptkoQxbGG76W+No1KINHkymRqyRwI5Yv5N DgRaCrULQ85/Dkn9SoiQm86j8Cyoj27u+sWEC053r1EH3PMWG+0sTDGd8UfouzvM QVIVMY/A0m+jIhaOuNGyF2pOi1w5591EitFU2QQF1Z7yB6oHBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1uHeJgHDD3WBb6+ARqXw/X5kTcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjc4YTU4NmEtNGFlYS0z YTBjLThkNTEtNGIwZGE1NzZlZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV1xjkBl1ggM/ppKzEgaUEiE4IPVcpa7dWDxzX/BXQB7KF+sjDg/aHq SPyexADAk+TxKIHB2nAFnPZo26FP7R8XNWy/c1amf65p1FN3CSav1/yNbBJBQqks g7523Q1n6ExymJ7XE/TmBz/r1ub1I/uxCOLNdQh8rHNza5k4fojuPHzrk9eC5VcD pRaucFeRrNV13ZuanW9M+E4clbj+y2m12BJ9xJlWzP/N1OcYAsoDp88JF0cwzwqD AtT0FDEsPQxPnIW2BfaCg0rpmrn2PNDtDArN6qP0fxRyQ37RKBFFeQEtLD2t6Uz4 7XUez/OQfnSAlllXbdRHDdFS6Z51ErA= -----END CERTIFICATE-----Generated at Tue Sep 29 04:47:44 2026 by rpki-client