$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/634d5c06-38cc-328c-b749-6599f74d293f.roa File: 634d5c06-38cc-328c-b749-6599f74d293f.roa (raw, json) Hash identifier: R/1nSqM/6PQuDRNa1i2w2/veNDInElstetOauxG7iQE= Subject key identifier: 27:66:A8:C9:8A:46:E0:95:65:20:A7:36:48:E1:52:D5:78:CA:2D:07 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3A17CA85BDB149116A83D180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/634d5c06-38cc-328c-b749-6599f74d293f.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.153.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:ca:85:bd:b1:49:11:6a:83:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=284708d3-85cd-4c3c-b53e-2aaa9a29636f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:66:28:3b:5a:d2:45:d8:22:59:bd:0b:c1:92: e8:57:8a:28:02:e1:20:b7:63:cd:fc:b1:97:b2:7d: 04:f8:50:7a:e0:f5:76:79:c4:32:ad:9d:be:5e:12: f2:d2:5c:70:a0:be:89:54:87:2f:f7:8e:bc:69:c5: 45:13:d8:55:8b:9c:fc:e2:f8:bb:51:2b:bb:b5:8e: db:7a:4b:0a:17:30:71:7d:c4:21:f2:70:5b:3d:f4: 0a:c8:4d:01:cf:9b:7c:39:4a:75:62:9c:39:db:b7: 2f:fe:00:0d:d4:e0:44:f2:5e:90:e0:38:80:80:7f: 25:98:65:e8:6e:b3:28:ce:76:a8:f8:58:69:4d:74: 0b:98:13:b6:0f:a1:f5:ba:ab:79:ee:a1:ae:f7:6d: 88:8f:b8:6e:a8:e9:2b:8e:9a:eb:f2:ef:b6:cb:da: 1d:cb:3d:a0:2d:8c:6f:9b:41:ce:dc:86:75:ab:68: b7:67:a3:4a:63:4f:c9:2b:33:95:0f:c5:2e:99:90: 13:df:b5:fa:4b:ad:5e:d6:cf:cc:66:0d:fa:4e:f1: 9b:2c:27:e7:0b:5c:d4:b6:cd:7c:77:d2:19:c6:72: a1:25:72:36:6c:d1:49:07:d0:78:da:fe:a0:af:dc: a5:72:e8:04:d0:a5:27:f3:74:8a:7c:23:8b:00:b7: c1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:66:A8:C9:8A:46:E0:95:65:20:A7:36:48:E1:52:D5:78:CA:2D:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/634d5c06-38cc-328c-b749-6599f74d293f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d5:0d:85:be:77:f6:da:3f:2d:ba:76:0d:c9:80:32:77:b5: bb:ca:e3:db:bc:5e:63:77:58:81:35:9f:2b:43:f7:c0:ba:ca: 9f:ff:87:84:d8:99:6a:12:75:30:72:21:c9:bf:36:ec:f2:d3: c9:30:49:16:e9:6f:77:4e:b0:a8:fb:f7:28:b4:ae:56:9b:e5: f1:fb:57:4f:0c:1a:dd:60:54:b8:f5:3e:e4:fd:aa:c8:fc:ab: 86:3f:bb:b8:04:43:d2:7a:03:4f:3d:50:5d:02:ad:4a:bc:11: fb:24:34:d5:e2:36:29:15:86:bd:18:4a:0c:9a:c3:66:0a:31: a4:78:3d:7c:07:44:75:4a:a6:72:d0:af:b5:f9:a5:5b:01:40: 2c:a8:00:ae:a8:ae:7b:26:6a:0b:f9:4b:b5:86:ef:49:bc:af: 28:19:9d:6e:63:30:d1:ee:41:74:30:99:86:1d:d7:04:21:c2: c6:d8:e9:8d:d8:02:79:dc:90:0a:bc:22:90:bc:d4:43:70:f2: 6e:f7:a9:c9:eb:ce:e7:d4:83:80:b3:18:48:90:50:01:49:2e: 66:d1:71:96:37:e7:1b:a5:fd:40:9e:af:c5:0d:c6:1c:c1:1b: 23:70:db:ef:63:78:6d:7a:b7:46:13:77:29:fe:e3:f3:c8:a9: f0:81:85:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8qFvbFJEWqD0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk Mjg0NzA4ZDMtODVjZC00YzNjLWI1M2UtMmFhYTlhMjk2MzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmYoO1rSRdgiWb0LwZLoV4ooAuEgt2PN/LGX sn0E+FB64PV2ecQyrZ2+XhLy0lxwoL6JVIcv9468acVFE9hVi5z84vi7USu7tY7b eksKFzBxfcQh8nBbPfQKyE0Bz5t8OUp1Ypw527cv/gAN1OBE8l6Q4DiAgH8lmGXo brMoznao+FhpTXQLmBO2D6H1uqt57qGu922Ij7huqOkrjprr8u+2y9odyz2gLYxv m0HO3IZ1q2i3Z6NKY0/JKzOVD8UumZAT37X6S61e1s/MZg36TvGbLCfnC1zUts18 d9IZxnKhJXI2bNFJB9B42v6gr9ylcugE0KUn83SKfCOLALfB5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdmqMmKRuCVZSCnNkjhUtV4yi0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjM0ZDVjMDYtMzhjYy0z MjhjLWI3NDktNjU5OWY3NGQyOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPVDYW+d/baPy26dg3JgDJ3tbvK49u8XmN3WIE1nytD98C6yp//h4TY mWoSdTByIcm/Nuzy08kwSRbpb3dOsKj79yi0rlab5fH7V08MGt1gVLj1PuT9qsj8 q4Y/u7gEQ9J6A089UF0CrUq8EfskNNXiNikVhr0YSgyaw2YKMaR4PXwHRHVKpnLQ r7X5pVsBQCyoAK6ornsmagv5S7WG70m8rygZnW5jMNHuQXQwmYYd1wQhwsbY6Y3Y AnnckAq8IpC81ENw8m73qcnrzufUg4CzGEiQUAFJLmbRcZY35xul/UCer8UNxhzB GyNw2+9jeG16t0YTdyn+4/PIqfCBhXU= -----END CERTIFICATE-----Generated at Sun Oct 11 07:11:35 2026 by rpki-client