$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/686bda1e-0667-3f81-bc55-7f44920b456a.roa File: 686bda1e-0667-3f81-bc55-7f44920b456a.roa (raw, json) Hash identifier: 6I6MaJa4qq2/0nqFvqSEJKUknnhCfYgdmHB096IeFDY= Subject key identifier: 46:2C:43:75:82:86:96:94:C4:60:A0:0A:6B:65:8E:EB:2F:C3:14:C5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F268D0E3E64B7386A59D87EC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/686bda1e-0667-3f81-bc55-7f44920b456a.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 8069 IP address blocks: 20.153.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:0e:3e:64:b7:38:6a:59:d8:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=dcaf1ea5-2b14-41b5-aba2-019559e97d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:46:13:f6:94:04:3c:03:30:31:89:04:25:81: 28:a0:ec:f9:8c:d8:b3:20:9e:40:a0:35:ba:17:ba: 14:45:e2:32:7b:79:01:94:a8:75:67:e3:ef:87:ee: d6:60:05:3a:1d:7d:ea:c5:0c:c2:ef:9a:3e:aa:23: bd:06:0f:c8:e1:24:1b:de:5a:7c:37:20:9e:c9:a8: 1b:d1:30:85:e4:b9:46:be:21:e5:62:73:76:d1:9b: 93:30:aa:1a:27:a1:e0:45:bc:09:56:10:4b:51:fd: b1:03:a9:d0:79:df:08:4a:da:42:d9:f3:8a:fe:f2: 01:7f:fc:86:1a:fd:56:d8:bf:cd:81:3b:be:27:0c: af:f6:0c:f9:b1:5e:b1:21:c7:e5:2f:0c:ea:b6:a7: 46:cc:f2:63:81:3e:e7:39:7f:72:9e:4b:32:a1:5b: 84:fb:4f:73:fc:4d:69:33:6c:38:f1:ff:6a:2d:ff: ba:5d:22:12:3f:44:49:77:3f:b6:f2:6f:0c:2d:c7: 10:e2:78:e5:e5:93:f7:4d:9e:b7:32:08:4b:87:75: f0:52:ca:e9:1e:d4:b3:35:2c:07:3c:a0:8d:85:8c: 80:4a:fb:40:a7:70:43:6f:dc:7a:0a:43:82:d0:9b: e4:98:aa:f5:00:ca:a8:5c:e1:23:b4:b8:64:b3:bb: c1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2C:43:75:82:86:96:94:C4:60:A0:0A:6B:65:8E:EB:2F:C3:14:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/686bda1e-0667-3f81-bc55-7f44920b456a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:5b:aa:a9:06:f5:f2:a3:1b:53:a3:d7:21:77:88:ea:9f:1b: c9:2b:72:fa:c0:ef:1b:d2:9d:81:9a:c8:bc:f1:ef:ad:fc:68: 3f:d1:49:8c:41:91:a2:c0:16:80:60:67:b3:39:b7:c5:e4:3a: 6f:c8:56:a0:61:d6:b4:1a:fe:0b:c1:11:b0:60:0b:f0:41:94: 4f:46:23:50:f9:8e:62:29:59:c1:0b:ad:7a:e1:8f:e4:d6:64: f3:ae:23:69:26:8d:a2:b3:b3:97:33:81:1e:89:7a:e1:d2:d1: b4:4b:bb:00:a5:17:80:af:c7:dd:41:c3:b9:a0:aa:95:ae:3f: bb:22:d3:39:8c:6b:a1:4c:f8:d1:35:6c:03:75:28:cb:5f:88: 82:f0:5d:de:f3:32:79:9b:89:85:9c:11:98:0a:ee:d8:ef:04: 0f:17:10:f4:d5:d9:c4:f2:ae:ff:ca:e5:c1:b4:0c:58:cf:21: 8f:bf:a2:3c:25:d3:4b:7d:b1:5b:79:da:f9:2c:59:7e:2f:1a: 1f:66:59:ea:8a:bf:f8:5a:04:04:51:28:be:ef:d9:59:bb:75: 68:9a:42:68:f8:f4:b6:14:0c:d4:e1:60:20:70:3b:da:10:1a: f4:c4:c0:96:23:6c:69:4b:82:b4:b9:91:2e:9f:f7:8e:b3:35: 96:d3:ae:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQ4+ZLc4alnYfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk ZGNhZjFlYTUtMmIxNC00MWI1LWFiYTItMDE5NTU5ZTk3ZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUYT9pQEPAMwMYkEJYEooOz5jNizIJ5AoDW6 F7oUReIye3kBlKh1Z+Pvh+7WYAU6HX3qxQzC75o+qiO9Bg/I4SQb3lp8NyCeyagb 0TCF5LlGviHlYnN20ZuTMKoaJ6HgRbwJVhBLUf2xA6nQed8IStpC2fOK/vIBf/yG Gv1W2L/NgTu+Jwyv9gz5sV6xIcflLwzqtqdGzPJjgT7nOX9ynksyoVuE+09z/E1p M2w48f9qLf+6XSISP0RJdz+28m8MLccQ4njl5ZP3TZ63MghLh3XwUsrpHtSzNSwH PKCNhYyASvtAp3BDb9x6CkOC0JvkmKr1AMqoXOEjtLhks7vB2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYsQ3WChpaUxGCgCmtljusvwxTFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjg2YmRhMWUtMDY2Ny0z ZjgxLWJjNTUtN2Y0NDkyMGI0NTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZbqqkG9fKjG1Oj1yF3iOqfG8krcvrA7xvSnYGayLzx7638aD/RSYxB kaLAFoBgZ7M5t8XkOm/IVqBh1rQa/gvBEbBgC/BBlE9GI1D5jmIpWcELrXrhj+TW ZPOuI2kmjaKzs5czgR6JeuHS0bRLuwClF4Cvx91Bw7mgqpWuP7si0zmMa6FM+NE1 bAN1KMtfiILwXd7zMnmbiYWcEZgK7tjvBA8XEPTV2cTyrv/K5cG0DFjPIY+/ojwl 00t9sVt52vksWX4vGh9mWeqKv/haBARRKL7v2Vm7dWiaQmj49LYUDNThYCBwO9oQ GvTEwJYjbGlLgrS5kS6f946zNZbTrio= -----END CERTIFICATE-----Generated at Mon Sep 28 20:11:49 2026 by rpki-client