$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4da8097e-cbb4-35bc-9ec6-71f731776eae.roa File: 4da8097e-cbb4-35bc-9ec6-71f731776eae.roa (raw, json) Hash identifier: GG9LtQVDLlcoUh0amHQfirZNfSR7ES0UP1r4L+HVd9c= Subject key identifier: 60:12:ED:7C:CB:2C:EC:CD:2A:90:2F:11:2C:4E:71:CF:39:D0:00:9F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F49886A1D35B525ECF459ACC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4da8097e-cbb4-35bc-9ec6-71f731776eae.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:6a:1d:35:b5:25:ec:f4:59:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9a967f33-1de0-444a-87f5-38043c587887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:aa:06:b8:7a:89:7f:60:72:4b:17:1c:7e: a2:39:55:00:a6:d7:08:22:5b:fb:50:49:7f:f0:2a: ff:41:e4:b1:a4:b6:4b:2a:ea:79:3d:21:56:70:7f: 67:57:ed:57:63:ca:58:66:f2:58:fc:48:c5:0e:53: 12:a7:51:28:87:9d:b6:63:71:1a:cc:de:8e:78:37: 7e:bc:23:ea:8e:5f:7c:0f:98:e8:24:70:b0:30:6f: 05:6a:91:69:3d:5c:5d:b7:7c:1c:60:5f:58:56:1c: 0b:c9:c7:44:f1:be:2e:e0:ea:d9:70:89:03:94:1c: c6:f4:20:76:83:31:e1:0f:c4:b0:99:d2:f3:99:6a: 45:9e:04:1a:08:c4:ab:af:94:80:cc:4e:c5:df:97: c1:18:16:e8:1c:f2:a8:dd:f4:48:ab:4f:b5:60:cd: 46:dc:db:cf:cb:1e:6a:6a:e7:d3:a0:25:2c:7d:60: e4:af:cb:ed:c8:d7:9b:7f:99:3f:d2:69:93:3e:29: 3d:84:59:fa:d9:78:60:f5:0f:f3:66:a0:dd:e2:86: 42:51:16:66:20:07:12:b8:77:1a:93:b9:70:02:ad: f5:79:c6:4d:3e:cd:97:44:01:81:b2:c2:c0:42:ca: b4:73:2e:a7:45:ec:2b:79:aa:b8:c0:a7:73:e5:b0: 4b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:12:ED:7C:CB:2C:EC:CD:2A:90:2F:11:2C:4E:71:CF:39:D0:00:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4da8097e-cbb4-35bc-9ec6-71f731776eae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:de:f4:ae:69:8c:f1:50:6f:74:2c:dc:b2:16:a3:ee:ff:75: 69:c8:f8:9d:62:49:69:71:df:a1:b4:78:f0:42:51:e4:a1:8b: b2:a9:76:66:96:91:36:e6:a2:61:d2:41:bd:b6:0a:93:98:28: ae:d1:69:87:82:19:af:e1:64:fc:d7:da:8a:7b:53:12:76:9d: e2:7c:6a:99:29:92:8a:40:75:a8:eb:ad:76:89:45:0e:f6:41: 68:03:f6:d6:ee:dc:bc:3a:ad:4f:8a:09:2c:45:73:cc:a9:60: dd:6f:a9:1d:df:c3:88:40:01:bc:58:70:58:fb:a2:90:fc:dc: 12:2b:8b:fa:ad:0d:55:44:eb:9f:47:8f:2c:6d:cc:de:a0:b0: 76:26:36:10:f8:d4:c3:0c:df:c6:37:5b:ea:2d:d1:c4:36:fe: 6f:ce:82:08:67:af:7a:5e:94:ee:55:8a:23:34:d2:c0:7c:c2: 99:99:1a:8e:a2:23:c0:57:73:9c:83:b9:fa:1d:e8:c8:0b:74: 8c:a7:4b:66:2d:46:64:b3:e4:28:9b:32:73:fa:3d:91:a7:bb: 47:c9:41:fc:5b:2f:0e:dd:bc:9a:a4:db:61:d5:31:c7:82:94: 24:61:0d:79:00:91:c8:0c:64:e4:18:8a:c2:45:7f:fa:ff:7e: 01:a0:8e:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiGodNbUl7PRZrMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWE5NjdmMzMtMWRlMC00NDRhLTg3ZjUtMzgwNDNjNTg3ODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtniqBrh6iX9gcksXHH6iOVUAptcIIlv7UEl/ 8Cr/QeSxpLZLKup5PSFWcH9nV+1XY8pYZvJY/EjFDlMSp1Eoh522Y3EazN6OeDd+ vCPqjl98D5joJHCwMG8FapFpPVxdt3wcYF9YVhwLycdE8b4u4OrZcIkDlBzG9CB2 gzHhD8SwmdLzmWpFngQaCMSrr5SAzE7F35fBGBboHPKo3fRIq0+1YM1G3NvPyx5q aufToCUsfWDkr8vtyNebf5k/0mmTPik9hFn62Xhg9Q/zZqDd4oZCURZmIAcSuHca k7lwAq31ecZNPs2XRAGBssLAQsq0cy6nRewreaq4wKdz5bBLdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAS7XzLLOzNKpAvESxOcc850ACfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGRhODA5N2UtY2JiNC0z NWJjLTllYzYtNzFmNzMxNzc2ZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJliMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHe9K5pjPFQb3Qs3LIWo+7/dWnI+J1iSWlx36G0ePBCUeShi7KpdmaW kTbmomHSQb22CpOYKK7RaYeCGa/hZPzX2op7UxJ2neJ8apkpkopAdajrrXaJRQ72 QWgD9tbu3Lw6rU+KCSxFc8ypYN1vqR3fw4hAAbxYcFj7opD83BIri/qtDVVE659H jyxtzN6gsHYmNhD41MMM38Y3W+ot0cQ2/m/Ogghnr3pelO5ViiM00sB8wpmZGo6i I8BXc5yDufod6MgLdIynS2YtRmSz5CibMnP6PZGnu0fJQfxbLw7dvJqk22HVMceC lCRhDXkAkcgMZOQYisJFf/r/fgGgjrs= -----END CERTIFICATE-----Generated at Tue Sep 29 06:56:55 2026 by rpki-client