$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ccaf5cd-7a33-3126-99b5-c064ee0d6453.roa File: 4ccaf5cd-7a33-3126-99b5-c064ee0d6453.roa (raw, json) Hash identifier: 39g/YVatYoY1ZssRpJW8O6DJjOWTeGlmyWLgAm8fKZ8= Subject key identifier: 2C:29:FE:E4:26:8B:7A:5A:E6:DF:4A:06:CD:D9:DA:56:F9:7C:D8:18 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F49733D2317CD2E11A7B1B920 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ccaf5cd-7a33-3126-99b5-c064ee0d6453.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:3d:23:17:cd:2e:11:a7:b1:b9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8e950eeb-1840-458a-91b7-0b7b35f17b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6b:a3:3f:78:e6:f5:21:40:b9:5d:ac:d4:eb: 1c:18:38:00:4b:bb:c1:ec:42:e1:ca:21:d7:2a:f5: d1:63:73:0b:b3:5e:16:33:b4:30:8c:3b:22:01:a8: bb:91:3b:c3:9e:12:cd:18:46:e9:df:ce:dc:42:ce: ec:dc:0b:fc:fa:8e:cc:42:9a:3c:a7:66:6e:88:17: dd:ba:f9:25:33:2d:2c:c2:87:e6:69:aa:d7:9d:c8: 6d:44:96:03:03:92:0c:1b:7c:62:06:bf:80:e1:76: af:7a:f8:de:37:1f:fc:05:90:b0:6b:29:33:46:db: e5:e9:c9:f1:30:2a:9f:f3:58:6c:0d:a5:98:45:e2: 10:7a:7a:a7:c9:b8:ad:85:0d:0e:24:c9:c1:a3:b9: 3e:91:68:59:c3:99:6d:24:45:5b:d4:27:3c:b9:ba: 5e:b4:c1:0d:89:a6:d2:30:76:88:03:d3:fb:29:e3: 76:d2:85:16:29:5a:a4:09:95:4e:10:7e:ad:01:d6: f6:80:44:18:70:45:74:9d:39:85:ff:a6:86:81:34: dd:65:70:4d:eb:b1:1f:74:8b:78:ae:eb:95:70:48: 75:04:e2:61:90:ee:f9:9c:3b:5c:2b:0f:6f:4a:5a: 96:0a:2e:b4:81:38:5b:74:7c:eb:94:be:1b:24:b5: 63:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:29:FE:E4:26:8B:7A:5A:E6:DF:4A:06:CD:D9:DA:56:F9:7C:D8:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ccaf5cd-7a33-3126-99b5-c064ee0d6453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:48:88:26:46:79:76:a8:46:60:6d:32:08:af:5d:39:50:d1: 07:ea:6f:b8:fd:42:e0:89:c6:79:3a:07:c3:71:c0:be:9d:3f: 1e:51:55:d0:e1:5d:d7:e2:f4:dd:8f:59:69:2d:8f:c8:8d:01: e8:0a:3c:e9:44:9e:7d:13:9e:20:00:7e:56:33:ab:4d:96:ca: 5c:51:47:d2:77:eb:62:cf:0e:9c:29:25:06:0e:89:4e:b7:5a: ac:af:f3:09:a7:8c:0c:34:68:ab:6d:ed:5f:88:c6:e0:54:77: 0a:c9:54:ea:0f:b1:12:8e:25:77:ff:6f:c4:51:75:7c:cc:a5: 26:0d:df:52:97:f4:ca:53:a5:ea:ae:9d:62:f6:13:d2:af:98: 8d:38:37:b4:1d:67:0e:74:88:5f:3e:7e:27:bd:a2:c4:5d:52: 80:fb:57:8b:22:ae:23:07:11:1e:a5:5f:dc:4d:23:f5:34:26: c9:22:2b:fa:18:67:63:b2:55:1b:dd:8d:e0:1b:cf:f9:7c:8f: 56:92:bb:4a:fd:36:4f:14:2a:00:b4:29:d3:34:42:c4:09:90: d4:7b:81:1c:74:0d:9c:26:a0:37:3d:42:27:3d:0d:29:8f:d2: be:7b:18:61:6e:85:59:b7:a7:d0:29:30:56:d6:72:34:16:12: 91:32:06:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcz0jF80uEaexuSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGU5NTBlZWItMTg0MC00NThhLTkxYjctMGI3YjM1ZjE3YjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGujP3jm9SFAuV2s1OscGDgAS7vB7ELhyiHX KvXRY3MLs14WM7QwjDsiAai7kTvDnhLNGEbp387cQs7s3Av8+o7MQpo8p2ZuiBfd uvklMy0swofmaarXnchtRJYDA5IMG3xiBr+A4XavevjeNx/8BZCwaykzRtvl6cnx MCqf81hsDaWYReIQenqnybithQ0OJMnBo7k+kWhZw5ltJEVb1Cc8ubpetMENiabS MHaIA9P7KeN20oUWKVqkCZVOEH6tAdb2gEQYcEV0nTmF/6aGgTTdZXBN67EfdIt4 ruuVcEh1BOJhkO75nDtcKw9vSlqWCi60gThbdHzrlL4bJLVjpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwp/uQmi3pa5t9KBs3Z2lb5fNgYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGNjYWY1Y2QtN2EzMy0z MTI2LTk5YjUtYzA2NGVlMGQ2NDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJksMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVIiCZGeXaoRmBtMgivXTlQ0Qfqb7j9QuCJxnk6B8NxwL6dPx5RVdDh Xdfi9N2PWWktj8iNAegKPOlEnn0TniAAflYzq02WylxRR9J362LPDpwpJQYOiU63 Wqyv8wmnjAw0aKtt7V+IxuBUdwrJVOoPsRKOJXf/b8RRdXzMpSYN31KX9MpTpequ nWL2E9KvmI04N7QdZw50iF8+fie9osRdUoD7V4siriMHER6lX9xNI/U0JskiK/oY Z2OyVRvdjeAbz/l8j1aSu0r9Nk8UKgC0KdM0QsQJkNR7gRx0DZwmoDc9Qic9DSmP 0r57GGFuhVm3p9ApMFbWcjQWEpEyBkU= -----END CERTIFICATE-----Generated at Mon Sep 28 21:40:03 2026 by rpki-client