$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/29f8e2b8-20ab-3389-be34-ce6826b0bc51.roa File: 29f8e2b8-20ab-3389-be34-ce6826b0bc51.roa (raw, json) Hash identifier: z+m7hgdTj6B1r+UMKvy4vouo+5DUnydcQ/LIMHkvZcg= Subject key identifier: B5:E8:05:04:7B:E3:49:28:DC:76:9E:F9:9C:F9:72:39:E0:DE:90:8E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F49732384BF5986852744E800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/29f8e2b8-20ab-3389-be34-ce6826b0bc51.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:23:84:bf:59:86:85:27:44:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=59798ed8-b72f-461a-9761-919aaf538b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3f:57:d9:fb:0d:9f:be:77:05:63:89:69:36: 9f:61:f0:dd:86:29:c7:fd:e7:0d:5b:05:15:71:97: ee:4f:9e:b2:47:60:67:70:03:87:ec:75:54:f2:4a: 10:04:35:eb:22:2a:df:e1:72:7b:de:7d:18:b3:3a: 9c:3f:62:59:71:6d:fe:e0:da:54:dc:90:18:ac:89: 79:44:7b:af:f9:ce:e6:c4:b2:37:54:8f:39:f5:8a: f3:3a:80:d5:e7:43:e8:e6:7a:ca:a3:4e:32:f2:21: c8:b3:6c:e9:b9:80:38:49:67:ee:c5:a1:fc:ce:db: 5c:9d:c7:5e:5b:2b:fa:e1:03:74:c4:9c:86:37:49: 4f:72:4b:b1:86:e0:68:37:81:3b:25:6f:0c:53:2b: fc:2b:c2:b5:d1:63:b2:2a:e9:12:fa:74:61:d5:2e: e4:27:d0:40:b6:14:be:ee:f2:d4:5c:7e:85:0e:57: 9a:a1:07:a3:ed:2c:33:67:f9:2c:50:c8:c1:eb:bb: fd:ce:30:34:8d:74:0b:96:9a:a8:37:f2:35:e9:1d: 38:25:d9:05:ea:49:92:bb:0f:b6:b6:83:35:1f:aa: fc:8f:b7:2d:51:38:72:ed:c0:22:46:be:fe:f0:81: 9c:5e:d8:54:9a:df:54:ce:ff:6b:8e:98:84:4c:1e: 00:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E8:05:04:7B:E3:49:28:DC:76:9E:F9:9C:F9:72:39:E0:DE:90:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/29f8e2b8-20ab-3389-be34-ce6826b0bc51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:fe:74:eb:e6:41:c0:8b:ac:36:36:42:f9:c9:cb:fc:53:eb: db:11:67:54:3f:d2:fe:07:a4:89:dc:2a:85:80:82:7c:9b:76: 86:30:b9:72:8d:3e:47:2d:3a:3b:77:7c:ca:c1:65:59:9d:e2: fb:50:35:37:d4:f7:a0:8c:69:33:3d:fd:d6:15:91:4d:aa:90: d4:18:ce:22:a5:80:f2:d6:f3:41:25:64:7b:15:4a:41:1d:5e: cb:f3:79:06:a4:fb:32:5b:42:d8:ab:95:49:a9:d7:be:c7:62: 0d:17:84:11:a6:30:b7:c9:4d:69:29:4a:b9:5f:a3:1e:f3:9e: 22:4b:b2:3a:ba:6d:94:2e:2c:2b:4b:fe:be:79:41:e0:0a:ac: 64:8e:5c:a8:7e:0b:f5:92:79:03:66:8d:27:57:bf:a8:72:bc: 7c:a1:3b:95:f3:e9:e2:af:6a:af:0c:cb:0e:4d:ab:46:2a:cf: 70:ee:21:4b:b7:9f:c2:f7:94:ed:b1:b2:f1:7c:83:0c:ce:09: 21:29:c8:63:83:16:90:78:e6:8e:be:68:a7:1b:d9:58:4b:51: 1e:a4:25:e5:41:03:83:3f:76:49:ac:57:00:29:17:96:f6:c4: 80:17:f2:7c:dc:97:69:4b:aa:10:4b:10:df:13:56:70:2d:5c: e5:dd:93:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcyOEv1mGhSdE6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTk3OThlZDgtYjcyZi00NjFhLTk3NjEtOTE5YWFmNTM4YjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD9X2fsNn753BWOJaTafYfDdhinH/ecNWwUV cZfuT56yR2BncAOH7HVU8koQBDXrIirf4XJ73n0YszqcP2JZcW3+4NpU3JAYrIl5 RHuv+c7mxLI3VI859YrzOoDV50Po5nrKo04y8iHIs2zpuYA4SWfuxaH8zttcncde Wyv64QN0xJyGN0lPckuxhuBoN4E7JW8MUyv8K8K10WOyKukS+nRh1S7kJ9BAthS+ 7vLUXH6FDleaoQej7SwzZ/ksUMjB67v9zjA0jXQLlpqoN/I16R04JdkF6kmSuw+2 toM1H6r8j7ctUThy7cAiRr7+8IGcXthUmt9Uzv9rjpiETB4AEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXoBQR740ko3Hae+Zz5cjng3pCOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjlmOGUyYjgtMjBhYi0z Mzg5LWJlMzQtY2U2ODI2YjBiYzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJltMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH+dOvmQcCLrDY2QvnJy/xT69sRZ1Q/0v4HpIncKoWAgnybdoYwuXKN PkctOjt3fMrBZVmd4vtQNTfU96CMaTM9/dYVkU2qkNQYziKlgPLW80ElZHsVSkEd XsvzeQak+zJbQtirlUmp177HYg0XhBGmMLfJTWkpSrlfox7zniJLsjq6bZQuLCtL /r55QeAKrGSOXKh+C/WSeQNmjSdXv6hyvHyhO5Xz6eKvaq8Myw5Nq0Yqz3DuIUu3 n8L3lO2xsvF8gwzOCSEpyGODFpB45o6+aKcb2VhLUR6kJeVBA4M/dkmsVwApF5b2 xIAX8nzcl2lLqhBLEN8TVnAtXOXdk7M= -----END CERTIFICATE-----Generated at Tue Sep 29 17:40:58 2026 by rpki-client