$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1ce6e781-5c0d-36ba-814c-679f5a41ae06.roa File: 1ce6e781-5c0d-36ba-814c-679f5a41ae06.roa (raw, json) Hash identifier: l3zmG47c9HC7L2vs8Pzwud8nV9ytK8ohAN29qd1hHYI= Subject key identifier: 33:D4:66:E3:9C:E5:98:2B:24:E6:26:20:29:25:87:35:34:98:97:A8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F268D032AAA6A38A1244EE2E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1ce6e781-5c0d-36ba-814c-679f5a41ae06.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 8069 IP address blocks: 20.153.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:03:2a:aa:6a:38:a1:24:4e:e2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=d54704bd-8af5-464b-8a48-25c63ec46b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8f:2a:5a:4b:4e:07:0f:bd:7c:9a:b4:78:96: fc:3c:97:cd:b1:de:18:65:1b:9f:cd:08:dc:e5:be: 4f:36:b4:00:b5:05:33:1b:d8:ca:c6:36:b9:13:db: 4e:42:81:7a:ab:1f:d4:df:5d:e4:be:80:85:c2:2a: a1:d8:2c:b3:0c:eb:55:f0:20:3b:4c:ac:93:7f:a3: cf:b0:d1:66:43:f9:bb:e3:91:a1:ce:38:59:40:f9: 82:22:14:22:cd:19:8b:73:1b:b6:1e:88:e8:ec:be: 29:dd:11:a6:07:c6:8c:cc:a1:0f:fc:99:7c:f1:53: 66:f5:8d:0d:db:9a:28:7b:e7:59:8c:70:9b:02:bb: 37:91:f8:53:49:af:00:60:64:8f:49:63:b5:ce:3a: bb:d7:9d:d4:39:01:be:e4:e6:d3:55:c0:4e:47:2d: 00:5a:2d:ff:b2:7b:d8:b9:53:ba:94:2f:c8:be:cc: 00:25:cd:f2:40:e0:bf:74:68:bb:21:d0:8c:db:62: 7a:86:b3:87:0c:a1:da:01:79:fc:b8:89:aa:90:00: 49:10:19:26:85:cf:7a:15:5e:a8:e6:d9:7f:04:2e: 3a:24:61:e4:67:9a:88:47:53:96:e3:d4:6f:1d:58: 95:be:54:3b:9e:cc:df:b0:8c:4e:ea:a2:05:d4:a9: d9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D4:66:E3:9C:E5:98:2B:24:E6:26:20:29:25:87:35:34:98:97:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1ce6e781-5c0d-36ba-814c-679f5a41ae06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:8a:37:c7:02:2f:53:bc:c2:fc:74:c0:22:00:42:bf:00:b4: 71:6f:cf:9e:1a:1e:d8:ac:81:cf:1c:cf:ab:bb:06:dc:a5:d1: 6c:55:8a:3e:dd:57:cd:d3:89:8b:04:8a:75:9c:20:d2:3a:a9: 3e:03:5e:61:45:5e:7f:4e:24:0f:76:b4:93:fb:9f:3f:b3:40: bc:eb:42:10:96:ff:c8:ce:4f:f8:97:ff:e9:4c:c1:20:74:82: 43:f3:b0:3b:55:6e:11:af:95:f6:d6:21:0d:9a:a4:8d:30:aa: 29:55:19:2a:39:cc:09:9d:76:cc:18:24:6a:03:35:ea:e9:b0: d3:72:4e:cf:5a:8f:ff:17:94:82:1e:85:f0:dd:90:45:40:17: 48:d0:2d:17:d6:dd:e4:c5:72:cf:10:95:1f:7e:f8:ec:d2:bc: b5:f0:35:00:39:d6:a1:89:99:86:aa:a6:a6:9c:b9:ce:55:f9: 96:a8:4d:98:7a:c9:6f:f9:52:c3:e0:a8:75:ba:b0:9f:bc:02: 5c:5d:74:e8:fd:a8:74:ff:b6:f6:0f:0f:64:17:12:3e:21:e9: 53:f5:60:ad:5b:36:6e:a2:8b:08:7b:b4:77:5e:0e:76:88:58: 4e:9e:52:62:08:75:aa:f0:1b:67:a2:4c:cd:2b:67:0e:b1:95: e5:35:b1:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQMqqmo4oSRO4uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk ZDU0NzA0YmQtOGFmNS00NjRiLThhNDgtMjVjNjNlYzQ2YjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq48qWktOBw+9fJq0eJb8PJfNsd4YZRufzQjc 5b5PNrQAtQUzG9jKxja5E9tOQoF6qx/U313kvoCFwiqh2CyzDOtV8CA7TKyTf6PP sNFmQ/m745GhzjhZQPmCIhQizRmLcxu2Hojo7L4p3RGmB8aMzKEP/Jl88VNm9Y0N 25ooe+dZjHCbArs3kfhTSa8AYGSPSWO1zjq7153UOQG+5ObTVcBORy0AWi3/snvY uVO6lC/IvswAJc3yQOC/dGi7IdCM22J6hrOHDKHaAXn8uImqkABJEBkmhc96FV6o 5tl/BC46JGHkZ5qIR1OW49RvHViVvlQ7nszfsIxO6qIF1KnZaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPUZuOc5ZgrJOYmICklhzU0mJeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMWNlNmU3ODEtNWMwZC0z NmJhLTgxNGMtNjc5ZjVhNDFhZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOKN8cCL1O8wvx0wCIAQr8AtHFvz54aHtisgc8cz6u7Btyl0WxVij7d V83TiYsEinWcINI6qT4DXmFFXn9OJA92tJP7nz+zQLzrQhCW/8jOT/iX/+lMwSB0 gkPzsDtVbhGvlfbWIQ2apI0wqilVGSo5zAmddswYJGoDNerpsNNyTs9aj/8XlIIe hfDdkEVAF0jQLRfW3eTFcs8QlR9++OzSvLXwNQA51qGJmYaqpqacuc5V+ZaoTZh6 yW/5UsPgqHW6sJ+8AlxddOj9qHT/tvYPD2QXEj4h6VP1YK1bNm6iiwh7tHdeDnaI WE6eUmIIdarwG2eiTM0rZw6xleU1se0= -----END CERTIFICATE-----Generated at Mon Sep 28 21:17:56 2026 by rpki-client