$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa File: d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa (raw, json) Hash identifier: ciguB+bMC4DwcSHNPYg6Vv+peR6hLf0hmZFU0ESGRjc= Subject key identifier: 4B:47:78:BA:59:8F:F7:61:61:16:BC:CF:2E:0A:0E:28:DA:CE:2B:B7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F4974618DDAEB32B366FAAB00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:61:8d:da:eb:32:b3:66:fa:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ef008765-ad93-4c08-9cbd-b18ea214bf77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fc:fb:97:90:a1:a0:f8:07:3b:90:a4:9f:34: 4e:ea:e9:5c:8d:48:7a:14:d5:e5:0e:f6:7a:61:20: 02:24:b4:77:35:ba:3d:b1:89:90:9f:d1:59:b3:31: fc:a6:8f:16:17:6b:b3:65:55:91:97:b3:4f:05:bd: 94:f4:d2:86:5a:66:e3:c9:43:e2:1c:b9:30:6a:29: 45:a1:91:f9:2e:39:81:3c:a7:2a:c2:14:cc:14:42: 94:e1:c6:f8:ed:89:63:18:2f:25:fd:34:16:8a:a8: 9e:06:95:22:bf:e4:55:93:c1:51:65:d1:a3:8e:f2: fe:4f:85:ae:21:78:4e:60:4b:34:04:b0:1c:bd:df: 84:66:6e:84:46:d8:b8:42:fc:6c:66:07:d1:9a:be: 32:ee:f0:c3:2e:0a:c2:a7:3c:f5:e3:3a:71:b5:6f: c0:6e:b2:aa:12:70:61:c3:48:4c:8c:2f:10:d9:71: 8d:20:ab:cd:fb:57:fa:17:2a:65:cb:f3:69:e1:be: 25:4f:8e:a0:20:cd:99:8a:b5:54:3d:94:4a:44:17: fe:23:ae:5b:13:ee:3d:2f:60:6c:16:ed:c4:5b:18: 0b:6a:99:fc:86:eb:08:32:2a:c2:87:9d:57:5d:66: a9:fd:7c:f3:35:b1:d4:ea:00:4a:09:54:e9:17:ee: 72:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:47:78:BA:59:8F:F7:61:61:16:BC:CF:2E:0A:0E:28:DA:CE:2B:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d6:5e:f1:08:be:54:c0:cd:a0:84:5d:de:10:18:c6:52:07: 19:63:ab:d2:b7:24:f0:09:20:50:6f:e3:3d:50:dc:2e:06:0e: 9f:aa:b8:d4:78:52:ae:55:00:a8:b0:1f:44:8b:bd:e4:74:bc: fa:aa:ad:e4:c7:6d:a6:99:87:1d:a5:3f:e5:7a:2d:9c:28:e1: cd:5a:ec:fa:c9:ad:51:55:ed:12:e5:17:94:67:cc:05:09:aa: 51:30:af:02:5e:f1:cf:75:a4:dc:25:f3:a2:fe:92:07:65:9b: 50:f9:f2:86:b4:94:1f:5f:4d:3c:cb:8f:b9:45:cc:a2:03:1e: f5:97:8a:af:ac:2b:1a:38:da:f9:30:1d:27:4f:53:b9:fa:8e: 8e:6f:89:ed:6c:3f:0b:31:b0:16:46:05:01:7a:fb:53:ba:b2: 7b:55:a7:b9:55:d4:b1:d3:8e:35:8b:5a:85:63:e0:37:53:c9: 57:e3:7f:70:03:90:b4:ad:ab:de:5c:c7:93:32:33:7d:3f:d3: 02:e8:98:d3:07:22:3b:3b:ad:80:04:51:c4:56:26:83:f6:ac: 5d:1b:df:8b:59:1e:7f:c4:6e:99:e8:66:01:4f:4d:52:a0:8e: 9a:8d:7f:dc:2d:0c:c2:c6:5f:46:25:8b:da:60:07:c9:2a:93: 5c:60:ba:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGGN2usys2b6qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWYwMDg3NjUtYWQ5My00YzA4LTljYmQtYjE4ZWEyMTRiZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/z7l5ChoPgHO5CknzRO6ulcjUh6FNXlDvZ6 YSACJLR3Nbo9sYmQn9FZszH8po8WF2uzZVWRl7NPBb2U9NKGWmbjyUPiHLkwailF oZH5LjmBPKcqwhTMFEKU4cb47YljGC8l/TQWiqieBpUiv+RVk8FRZdGjjvL+T4Wu IXhOYEs0BLAcvd+EZm6ERti4QvxsZgfRmr4y7vDDLgrCpzz14zpxtW/AbrKqEnBh w0hMjC8Q2XGNIKvN+1f6Fyply/Np4b4lT46gIM2ZirVUPZRKRBf+I65bE+49L2Bs Fu3EWxgLapn8husIMirCh51XXWap/XzzNbHU6gBKCVTpF+5y7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtHeLpZj/dhYRa8zy4KDijaziu3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDNiMzk5NmQtZWU4Ny0z MDc1LThiZWYtZjA5ZDFmN2IyMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDWXvEIvlTAzaCEXd4QGMZSBxljq9K3JPAJIFBv4z1Q3C4GDp+quNR4 Uq5VAKiwH0SLveR0vPqqreTHbaaZhx2lP+V6LZwo4c1a7PrJrVFV7RLlF5RnzAUJ qlEwrwJe8c91pNwl86L+kgdlm1D58oa0lB9fTTzLj7lFzKIDHvWXiq+sKxo42vkw HSdPU7n6jo5vie1sPwsxsBZGBQF6+1O6sntVp7lV1LHTjjWLWoVj4DdTyVfjf3AD kLStq95cx5MyM30/0wLomNMHIjs7rYAEUcRWJoP2rF0b34tZHn/EbpnoZgFPTVKg jpqNf9wtDMLGX0Yli9pgB8kqk1xguhk= -----END CERTIFICATE-----Generated at Mon Sep 28 22:34:49 2026 by rpki-client