$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d22634a0-7a16-30fa-9aad-6db16427a897.roa File: d22634a0-7a16-30fa-9aad-6db16427a897.roa (raw, json) Hash identifier: 5FqZdn28LwyVNgb1gIaQfNY75R6wEIZ+IPa/VKWwArQ= Subject key identifier: 7A:0F:B7:A4:AA:6A:E4:2A:E2:7E:EF:00:6F:8A:4F:FF:D4:81:D7:DF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3A17DB7ADB9FB3D0EC2F2180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d22634a0-7a16-30fa-9aad-6db16427a897.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.153.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:db:7a:db:9f:b3:d0:ec:2f:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=447748a1-2e58-4413-8dba-5336b2e95157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:27:b5:ef:e0:86:db:1d:23:6d:86:46:5a:5b: ef:3d:ad:f8:d1:4d:08:b6:22:2b:75:34:38:01:0c: 80:f5:6f:b8:05:b5:81:06:b0:1d:98:40:19:b5:b7: ea:d9:83:2b:6e:aa:ed:13:55:6b:b2:fd:c0:a1:64: 7d:ac:1f:b8:83:62:30:0a:d8:f5:10:54:c4:c4:47: 5a:8e:63:b2:1c:6d:8c:37:bd:32:3a:41:b7:6d:1e: 12:0e:84:95:6e:e2:9b:cc:3c:af:16:4f:d1:f4:d6: e1:31:e6:34:47:48:5e:92:d3:94:82:7c:5f:0e:d0: 8f:72:0b:7e:35:9b:34:2c:cb:12:e8:17:e9:49:97: b4:75:fe:77:5c:60:b6:90:44:ec:58:ff:d4:11:74: 5f:98:c0:fc:01:f0:fe:16:49:6a:d1:c9:86:d6:d7: d4:39:c9:6c:33:a9:bb:02:73:4b:68:14:a7:fa:98: 43:ec:da:02:b7:d5:75:94:92:6a:80:7d:63:b9:56: 93:be:98:9c:86:20:1e:62:6f:54:14:fc:92:56:2e: 7f:51:4f:e4:2d:93:47:e7:74:88:9a:e3:c1:08:db: fc:e8:46:26:79:e2:de:cd:eb:ea:15:b8:f9:37:1e: b9:04:37:35:d8:7d:ac:f7:27:c4:f4:a5:86:75:be: 4b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0F:B7:A4:AA:6A:E4:2A:E2:7E:EF:00:6F:8A:4F:FF:D4:81:D7:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d22634a0-7a16-30fa-9aad-6db16427a897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:c1:44:bb:bd:43:31:89:c5:9f:6e:9f:d6:f0:90:77:fb:2c: d8:39:42:51:7b:90:41:d5:27:39:ea:68:92:64:60:3b:d5:60: 67:d4:96:76:6d:6a:6a:b8:79:10:77:ca:c8:55:bc:f4:bc:98: 4c:c3:fa:a9:60:3c:bf:03:1b:37:69:0b:a0:25:1b:89:59:2d: 8f:91:a0:4d:6a:d4:8f:88:2a:dc:78:67:e2:62:92:7f:65:f9: f6:eb:96:da:5f:f6:f0:70:84:3f:42:3e:7f:d0:66:d2:85:d7: f9:fe:4d:2b:21:1a:07:50:2e:d3:59:6a:ce:e8:bb:c2:72:58: 0d:fe:af:04:f5:40:fd:55:c1:23:f7:b6:98:e7:1b:5e:8c:49: c3:51:0e:ee:77:ea:9a:51:5d:5d:d0:99:27:b3:c5:c6:d4:ec: 89:6f:a6:dc:8c:d5:d2:fb:df:68:a1:86:2b:3e:00:40:ff:fa: 71:ab:ba:78:08:e6:1e:8e:cc:9a:7d:75:af:46:8a:1c:21:ed: 0d:01:21:11:0d:1b:4f:ac:24:64:a2:b1:03:8b:40:71:f0:d6: 32:5f:9c:9e:9b:9b:90:a4:48:3d:c4:2d:c7:d0:c9:cb:f1:41: 9b:65:16:7b:91:c3:cc:6e:5a:c8:69:bd:17:c0:f9:ff:ca:d6: c2:f2:b6:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9t625+z0OwvIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk NDQ3NzQ4YTEtMmU1OC00NDEzLThkYmEtNTMzNmIyZTk1MTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiie17+CG2x0jbYZGWlvvPa340U0ItiIrdTQ4 AQyA9W+4BbWBBrAdmEAZtbfq2YMrbqrtE1Vrsv3AoWR9rB+4g2IwCtj1EFTExEda jmOyHG2MN70yOkG3bR4SDoSVbuKbzDyvFk/R9NbhMeY0R0hektOUgnxfDtCPcgt+ NZs0LMsS6BfpSZe0df53XGC2kETsWP/UEXRfmMD8AfD+Fklq0cmG1tfUOclsM6m7 AnNLaBSn+phD7NoCt9V1lJJqgH1juVaTvpichiAeYm9UFPySVi5/UU/kLZNH53SI muPBCNv86EYmeeLezevqFbj5Nx65BDc12H2s9yfE9KWGdb5LkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoPt6SqauQq4n7vAG+KT//UgdffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDIyNjM0YTAtN2ExNi0z MGZhLTlhYWQtNmRiMTY0MjdhODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbBRLu9QzGJxZ9un9bwkHf7LNg5QlF7kEHVJznqaJJkYDvVYGfUlnZt amq4eRB3yshVvPS8mEzD+qlgPL8DGzdpC6AlG4lZLY+RoE1q1I+IKtx4Z+Jikn9l +fbrltpf9vBwhD9CPn/QZtKF1/n+TSshGgdQLtNZas7ou8JyWA3+rwT1QP1VwSP3 tpjnG16MScNRDu536ppRXV3QmSezxcbU7IlvptyM1dL732ihhis+AED/+nGrungI 5h6OzJp9da9Gihwh7Q0BIRENG0+sJGSisQOLQHHw1jJfnJ6bm5CkSD3ELcfQycvx QZtlFnuRw8xuWshpvRfA+f/K1sLythk= -----END CERTIFICATE-----Generated at Sun Oct 4 22:50:29 2026 by rpki-client