$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e379e7f1-fdfe-3099-a497-32c9a49df02a.roa File: e379e7f1-fdfe-3099-a497-32c9a49df02a.roa (raw, json) Hash identifier: /CZkIXyfLdUqPBKodwcrLyUfYXYG2yBmpnEoTnDsiyc= Subject key identifier: 14:06:62:11:B1:0D:AD:A0:E8:6F:3B:15:AC:DE:F5:54:A8:F5:36:B6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3A17CC3CCD177ABF7B0B8200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e379e7f1-fdfe-3099-a497-32c9a49df02a.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.153.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:cc:3c:cd:17:7a:bf:7b:0b:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=25e02e8c-a363-44a5-ad4b-eb33a2ded696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ed:63:04:fc:87:2c:6c:0b:3a:01:7c:00:b7: 07:e4:89:dd:32:c6:d4:d1:6f:97:dc:70:95:8c:fb: 15:e9:db:0e:c9:e6:76:5b:c1:2c:5a:19:01:1d:2b: 24:3a:74:d4:f1:76:fb:42:0d:88:4a:f1:bb:67:1b: 2d:0b:3a:22:be:c3:b9:4b:39:6d:c3:81:95:22:98: 5c:9d:ca:54:6d:7c:fa:30:c8:06:94:ca:98:40:77: 19:2d:de:01:09:db:bc:37:99:1a:5d:bd:22:25:51: 7d:22:b2:10:1b:79:e3:07:67:85:1a:c7:54:d0:82: 2d:87:6e:4b:fd:97:63:d3:5c:1f:a3:37:8c:14:51: 72:5e:fd:02:ed:59:3d:2b:f3:79:36:d1:14:fd:2a: ef:5f:7f:d8:3c:04:a5:a4:89:16:a5:78:fc:67:bc: e4:c4:55:75:92:d6:65:a2:17:0f:61:15:0e:a8:ea: ba:3e:9e:72:74:2e:26:44:d8:d2:50:de:1a:5e:68: 94:d1:83:3d:93:1c:29:7b:fb:41:ca:ef:d3:fc:1d: 53:8d:13:b1:8a:8c:2f:e2:f0:a7:e7:be:70:72:a0: 20:a4:0c:92:af:bf:5c:91:15:32:5a:5e:23:84:8f: 33:9b:18:5f:d2:c4:0a:b4:8c:5d:49:ce:d7:d9:1b: 2e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:06:62:11:B1:0D:AD:A0:E8:6F:3B:15:AC:DE:F5:54:A8:F5:36:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e379e7f1-fdfe-3099-a497-32c9a49df02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:22:ba:ce:86:ac:77:03:28:12:50:a8:75:0b:2c:c9:a4:d0: c7:41:71:d5:31:90:99:f9:97:7d:ff:3d:53:04:b1:2f:27:ac: b8:9c:73:c3:bb:42:33:e6:12:63:3d:80:e0:a8:7e:4d:38:85: a9:ac:d7:9b:aa:5d:06:3c:27:f7:a8:e0:da:94:6d:25:f0:47: e3:38:35:31:ae:56:33:79:f1:69:89:02:45:9a:48:78:95:15: 93:5a:ae:43:d8:f9:7a:57:4f:72:4c:ac:d9:3a:f1:a4:bd:0b: ad:d0:f6:e5:64:ae:d0:3b:9d:68:06:95:d7:ea:19:b2:6b:59: f1:d4:a3:61:6d:6f:94:fa:d2:86:f6:f9:c0:fa:18:cc:db:80: f6:73:65:2d:b0:da:33:34:0b:4e:f8:2f:fc:3d:83:aa:8e:ea: 6b:f6:7f:ab:49:7c:4b:50:0b:de:cd:1f:5e:13:7d:0d:12:21: 6e:d6:61:72:29:f5:d7:b5:7c:d0:04:b7:b2:53:ad:ec:c0:16: f0:b3:f9:01:89:d1:76:06:e8:7f:ef:9c:ca:aa:ab:1a:ab:b0: 03:3a:a2:3b:da:8a:e6:54:4e:d1:97:bf:17:fc:2d:3c:49:1d: 5a:98:5b:e1:e9:84:2b:b1:09:a0:32:0d:67:85:73:bf:57:c9: 2d:1b:16:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8w8zRd6v3sLggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MjVlMDJlOGMtYTM2My00NGE1LWFkNGItZWIzM2EyZGVkNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue1jBPyHLGwLOgF8ALcH5IndMsbU0W+X3HCV jPsV6dsOyeZ2W8EsWhkBHSskOnTU8Xb7Qg2ISvG7ZxstCzoivsO5Szltw4GVIphc ncpUbXz6MMgGlMqYQHcZLd4BCdu8N5kaXb0iJVF9IrIQG3njB2eFGsdU0IIth25L /Zdj01wfozeMFFFyXv0C7Vk9K/N5NtEU/SrvX3/YPASlpIkWpXj8Z7zkxFV1ktZl ohcPYRUOqOq6Pp5ydC4mRNjSUN4aXmiU0YM9kxwpe/tByu/T/B1TjROxiowv4vCn 575wcqAgpAySr79ckRUyWl4jhI8zmxhf0sQKtIxdSc7X2RsugQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQGYhGxDa2g6G87Faze9VSo9Ta2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTM3OWU3ZjEtZmRmZS0z MDk5LWE0OTctMzJjOWE0OWRmMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEius6GrHcDKBJQqHULLMmk0MdBcdUxkJn5l33/PVMEsS8nrLicc8O7 QjPmEmM9gOCofk04hams15uqXQY8J/eo4NqUbSXwR+M4NTGuVjN58WmJAkWaSHiV FZNarkPY+XpXT3JMrNk68aS9C63Q9uVkrtA7nWgGldfqGbJrWfHUo2Ftb5T60ob2 +cD6GMzbgPZzZS2w2jM0C074L/w9g6qO6mv2f6tJfEtQC97NH14TfQ0SIW7WYXIp 9de1fNAEt7JTrezAFvCz+QGJ0XYG6H/vnMqqqxqrsAM6ojvaiuZUTtGXvxf8LTxJ HVqYW+HphCuxCaAyDWeFc79XyS0bFqg= -----END CERTIFICATE-----Generated at Sat Oct 3 19:06:02 2026 by rpki-client