$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/405e4284-f69f-3e95-b871-67ba6fa28d23.roa File: 405e4284-f69f-3e95-b871-67ba6fa28d23.roa (raw, json) Hash identifier: nrbFLBtpXnLpNjnWAzXPY2IvQ7/snW6EqqVLTd92IUU= Subject key identifier: AC:5A:2F:C3:57:DB:F1:E7:93:AA:AA:7D:FB:F2:88:FA:77:5F:FB:9D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957B7D9BCFB2521C44AC580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/405e4284-f69f-3e95-b871-67ba6fa28d23.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.153.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b7:d9:bc:fb:25:21:c4:4a:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=215a5bf5-06c1-4410-8b1b-40cd01f4276c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:e2:d4:52:06:4e:1a:71:b0:ce:95:75:96: 4f:d6:82:00:77:ac:24:c8:99:01:43:2e:98:75:16: d1:5c:49:81:14:36:94:f4:aa:13:fb:9c:93:25:b6: 81:85:3b:75:63:95:da:ca:9e:04:e7:4a:b3:60:c4: c5:67:06:e4:43:7e:f3:61:bc:10:31:68:45:43:1f: 9e:85:4e:21:54:58:bf:c6:aa:b2:ac:d9:1f:d2:de: 1c:ba:98:eb:d0:d9:e3:f4:d9:1c:25:3c:87:d4:51: 15:13:34:ea:51:e3:7d:e1:14:c4:c9:07:a3:e9:ce: 33:19:64:1e:0c:46:c0:bd:2a:45:42:14:9d:82:02: 7d:93:18:2c:34:b8:c6:a4:02:cd:84:22:b9:8c:d4: 31:4e:3c:e3:c2:a1:71:08:41:77:ad:d9:b9:d6:7b: ee:ed:c9:65:20:ec:19:f4:f7:15:3b:5f:91:81:19: f1:95:27:21:1e:13:74:38:77:81:da:0d:06:37:31: 8b:3f:73:92:e1:91:0c:eb:16:00:8e:e0:9f:e2:85: 0d:d5:96:ad:d7:9e:2d:e8:92:d7:07:f6:97:61:a9: a6:d5:4c:c5:b8:b8:3b:ee:0f:39:53:0d:cc:b2:45: 45:25:6c:24:04:80:9d:9e:f5:ac:cc:ae:17:37:0b: e8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5A:2F:C3:57:DB:F1:E7:93:AA:AA:7D:FB:F2:88:FA:77:5F:FB:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/405e4284-f69f-3e95-b871-67ba6fa28d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:7b:e5:4c:b5:64:50:1f:1b:13:95:3d:55:1d:84:fc:10:df: b4:24:70:45:d1:59:33:40:ca:25:6f:42:91:1e:6a:1d:9d:4d: a5:3d:d3:a1:e8:49:c8:49:36:04:bb:8a:00:9b:25:50:6a:83: 1c:db:76:4a:3d:7e:51:e8:1c:dd:0d:d4:42:03:4d:63:f4:15: 5f:21:88:e2:9b:89:41:56:2e:23:02:3f:6d:52:79:51:4e:73: a2:d3:da:8d:9f:78:c3:5b:df:9a:d9:c4:26:73:e4:23:2a:e1: c9:d9:7e:f2:d8:7e:3f:c1:e6:29:e5:6f:87:a3:51:49:02:e6: 1d:8d:0f:da:ff:db:7d:11:ab:1d:89:21:c7:2e:67:0a:02:0f: f5:3f:4a:7f:09:76:1e:d3:6a:c8:52:e6:37:a8:0c:68:3c:13: 26:6e:38:23:08:17:e1:54:73:ca:8c:7a:51:41:ef:85:2d:c4: cb:f7:83:97:6d:5c:c2:3c:e7:87:74:a2:45:3a:84:67:4c:19: cd:87:9d:5e:55:3d:28:80:c2:75:5b:e4:18:44:11:91:41:ef: fe:9f:e9:9b:f7:6a:39:3b:a7:ab:f0:c3:9e:77:a0:1a:b8:c3: 40:3f:a2:5e:ef:18:9e:36:00:24:8e:ed:5e:2e:2f:e6:87:91: a6:3f:e4:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7fZvPslIcRKxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk MjE1YTViZjUtMDZjMS00NDEwLThiMWItNDBjZDAxZjQyNzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3Hi1FIGThpxsM6VdZZP1oIAd6wkyJkBQy6Y dRbRXEmBFDaU9KoT+5yTJbaBhTt1Y5Xayp4E50qzYMTFZwbkQ37zYbwQMWhFQx+e hU4hVFi/xqqyrNkf0t4cupjr0Nnj9NkcJTyH1FEVEzTqUeN94RTEyQej6c4zGWQe DEbAvSpFQhSdggJ9kxgsNLjGpALNhCK5jNQxTjzjwqFxCEF3rdm51nvu7cllIOwZ 9PcVO1+RgRnxlSchHhN0OHeB2g0GNzGLP3OS4ZEM6xYAjuCf4oUN1Zat154t6JLX B/aXYamm1UzFuLg77g85Uw3MskVFJWwkBICdnvWszK4XNwvoPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxaL8NX2/Hnk6qqffvyiPp3X/udMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDA1ZTQyODQtZjY5Zi0z ZTk1LWI4NzEtNjdiYTZmYTI4ZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJn8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE175Uy1ZFAfGxOVPVUdhPwQ37QkcEXRWTNAyiVvQpEeah2dTaU906Ho SchJNgS7igCbJVBqgxzbdko9flHoHN0N1EIDTWP0FV8hiOKbiUFWLiMCP21SeVFO c6LT2o2feMNb35rZxCZz5CMq4cnZfvLYfj/B5inlb4ejUUkC5h2ND9r/230Rqx2J IccuZwoCD/U/Sn8Jdh7TashS5jeoDGg8EyZuOCMIF+FUc8qMelFB74UtxMv3g5dt XMI854d0okU6hGdMGc2HnV5VPSiAwnVb5BhEEZFB7/6f6Zv3ajk7p6vww553oBq4 w0A/ol7vGJ42ACSO7V4uL+aHkaY/5Co= -----END CERTIFICATE-----Generated at Sun Oct 11 06:27:16 2026 by rpki-client