$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa File: 25af00ca-4f76-3e40-b823-c83ad676aaa2.roa (raw, json) Hash identifier: T7d/N1ZLup+3kCPvFotr1tWncCmXtPj78TKGuGiGxlE= Subject key identifier: 7A:65:A6:9B:BE:70:78:DE:C2:E1:06:EE:55:5E:89:ED:BF:2B:A1:3F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F19FCF6EDA575BEE797DF2F80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f6:ed:a5:75:be:e7:97:df:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=f9fe53f3-ec8b-420e-9bf4-10d682eb74a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:aa:aa:ec:67:21:4f:42:92:e2:1e:65:f9: f2:df:9c:5d:ee:40:88:11:10:8b:e4:80:4e:59:32: bf:aa:11:86:8c:fd:ec:92:cc:46:b3:06:c9:88:fd: 0d:e7:86:20:ea:16:60:52:74:52:10:ae:c1:1b:00: d5:dc:7d:53:ac:e7:55:f7:9d:47:2b:e6:6e:51:7d: 3e:6b:a9:73:fd:b9:42:6b:02:c5:de:87:1a:92:65: c6:51:2e:9f:e8:a5:9c:51:dd:8a:d5:ab:e4:b9:5b: 46:dd:ba:30:f4:34:46:70:0d:f6:c4:91:8a:e5:2b: da:e0:a0:67:7d:a4:db:56:e6:00:8f:c6:80:48:e8: 8c:ea:eb:7b:5f:78:5e:d0:2c:e7:f2:0c:5c:54:36: 7c:38:40:a6:ff:ff:ce:64:42:5c:02:0f:6f:02:bd: ec:6f:e4:a1:87:cd:ea:04:bd:34:05:c4:e5:4d:c0: 66:4d:78:ce:b1:23:33:6d:77:c3:3a:3c:f4:a8:e3: f8:33:68:86:6a:2d:5a:a8:ff:39:37:4f:a0:ab:a6: 4d:e5:e8:b7:cf:59:7b:38:bd:62:13:62:1f:43:b0: 7e:59:72:45:f8:90:7c:69:3d:d0:48:56:90:32:f6: 87:ed:cf:31:cc:b0:98:e3:b9:c3:7c:0a:60:2d:fd: 43:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:65:A6:9B:BE:70:78:DE:C2:E1:06:EE:55:5E:89:ED:BF:2B:A1:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f7:46:89:1e:28:0b:65:2b:0c:7f:d1:0a:d8:22:9e:ed:97: 27:a3:e4:2d:3c:f4:3c:23:a5:6f:62:3d:3c:38:fc:2f:76:02: 2f:af:ce:8d:31:2c:ec:7f:f7:1a:70:06:dd:24:61:16:ca:f6: ba:25:9a:4b:7e:ff:46:09:53:55:86:5a:3f:74:ee:dd:d5:0a: 5e:1c:63:4d:7f:f4:9a:d8:03:d3:d9:3a:dd:97:08:3d:7b:b8: da:37:29:54:11:12:c8:1c:b7:90:61:28:9b:aa:95:21:2f:d8: ef:3d:e5:37:b2:4d:7d:3e:90:64:aa:7b:55:29:1c:93:85:a9: 15:1b:a2:37:47:c2:bf:42:f3:e4:98:c3:92:49:49:a7:38:14: e8:77:67:e9:4a:68:97:ae:a1:c4:5d:4e:6c:3e:99:ba:f8:5a: 29:0e:27:f9:b6:ce:44:b2:fb:e2:5b:ec:c6:e3:b6:25:10:83: 04:cc:df:13:53:c8:9e:84:4e:df:30:c3:67:f8:a3:22:2e:3d: 7c:26:9c:c8:86:4c:3d:cc:08:54:8b:d6:4f:c5:0d:78:7f:fa: 00:1a:81:dc:9b:f7:a3:de:e2:93:fa:0d:83:72:4d:07:a3:df: dc:a2:19:0e:38:10:be:2e:b2:6d:8f:59:f5:ce:1e:0f:64:20: f1:d6:38:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/PbtpXW+55ffL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk ZjlmZTUzZjMtZWM4Yi00MjBlLTliZjQtMTBkNjgyZWI3NGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHmqquxnIU9CkuIeZfny35xd7kCIERCL5IBO WTK/qhGGjP3sksxGswbJiP0N54Yg6hZgUnRSEK7BGwDV3H1TrOdV951HK+ZuUX0+ a6lz/blCawLF3ocakmXGUS6f6KWcUd2K1avkuVtG3bow9DRGcA32xJGK5Sva4KBn faTbVuYAj8aASOiM6ut7X3he0Czn8gxcVDZ8OECm///OZEJcAg9vAr3sb+Shh83q BL00BcTlTcBmTXjOsSMzbXfDOjz0qOP4M2iGai1aqP85N0+gq6ZN5ei3z1l7OL1i E2IfQ7B+WXJF+JB8aT3QSFaQMvaH7c8xzLCY47nDfApgLf1D7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHplppu+cHjewuEG7lVeie2/K6E/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjVhZjAwY2EtNGY3Ni0z ZTQwLWI4MjMtYzgzYWQ2NzZhYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL3RokeKAtlKwx/0QrYIp7tlyej5C089DwjpW9iPTw4/C92Ai+vzo0x LOx/9xpwBt0kYRbK9rolmkt+/0YJU1WGWj907t3VCl4cY01/9JrYA9PZOt2XCD17 uNo3KVQREsgct5BhKJuqlSEv2O895TeyTX0+kGSqe1UpHJOFqRUbojdHwr9C8+SY w5JJSac4FOh3Z+lKaJeuocRdTmw+mbr4WikOJ/m2zkSy++Jb7MbjtiUQgwTM3xNT yJ6ETt8ww2f4oyIuPXwmnMiGTD3MCFSL1k/FDXh/+gAagdyb96Pe4pP6DYNyTQej 39yiGQ44EL4usm2PWfXOHg9kIPHWODo= -----END CERTIFICATE-----Generated at Mon Sep 28 22:49:26 2026 by rpki-client