$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6952396b-a10f-3821-b98d-b381344b9d00.roa File: 6952396b-a10f-3821-b98d-b381344b9d00.roa (raw, json) Hash identifier: NOY/fiQFYmB9qlcrPoYGQvOrRei6p+80GmwiCJTfzHY= Subject key identifier: 3E:27:91:E6:B4:FF:74:C0:B0:D5:D4:9B:46:EB:F0:A1:31:CB:57:D3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957CAEA47B53E3B26ABB800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6952396b-a10f-3821-b98d-b381344b9d00.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.153.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:ca:ea:47:b5:3e:3b:26:ab:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=20d6741a-2d9d-43fb-92dd-7f73e7f2b0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8b:e3:eb:9e:f7:71:a5:10:de:ae:0a:5c:5c: 47:7e:a2:fd:e4:08:d2:0f:98:9f:59:f6:37:ca:b7: 26:78:34:07:dc:68:ef:e2:e0:ac:71:a2:f0:46:86: 4a:a5:ea:44:8c:8d:78:5d:a7:79:54:b5:5f:22:d8: d1:c7:3c:32:f3:8b:01:3e:c6:c9:b5:0c:ac:79:d5: ab:7b:0e:73:99:f6:1e:6f:cb:b6:b7:6d:30:de:4a: a4:64:26:4f:73:63:b8:14:82:4b:d4:7c:4d:13:05: 3e:3a:aa:c9:1b:fd:d6:a8:44:5b:58:90:76:bf:f7: d3:2f:fb:c0:1d:ce:b6:8d:c6:5f:ca:59:d7:1e:ae: 2e:35:b5:f2:54:ad:75:21:44:5c:a9:09:76:2a:38: a1:59:37:a7:3f:d2:74:5d:16:19:05:3a:12:2e:ad: c3:8c:10:7b:a4:86:bd:71:b5:71:8e:92:e9:0b:da: a9:3f:99:1a:78:19:19:0c:28:ef:ee:14:22:25:07: 1b:f8:9e:24:c4:d6:3b:bb:2f:fc:ed:04:dd:cc:30: aa:34:8b:53:f4:ff:3b:d0:1d:ae:57:ed:8f:9f:a0: 4e:9a:93:0c:56:23:5c:d2:c5:5d:51:90:9a:d9:70: 0f:5e:78:b9:25:a6:b8:c1:fc:d6:56:b6:8e:a7:8a: 3a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:27:91:E6:B4:FF:74:C0:B0:D5:D4:9B:46:EB:F0:A1:31:CB:57:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6952396b-a10f-3821-b98d-b381344b9d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:57:95:80:10:bf:8f:13:76:87:7c:f4:96:6e:e1:f3:3c:4a: e3:e2:7a:ff:8f:4c:48:5d:32:a3:1f:09:7a:27:6e:d9:a7:e1: d9:62:c8:b4:47:9a:6a:12:cb:3c:d6:c5:e7:67:4a:cb:a0:eb: dd:0e:09:60:0f:f6:72:b0:7c:9d:b9:22:2c:a1:4c:31:88:ea: d8:19:70:3f:cb:c9:34:24:3b:da:6e:99:fa:89:e2:5f:ad:71: 63:ca:fc:0e:1d:bf:be:d1:4e:05:18:45:82:f6:0e:1d:57:9a: 52:66:d7:25:8c:4e:9c:47:52:c3:bf:74:57:5c:c6:a0:a9:44: f6:69:49:38:b5:cc:98:c3:7e:e8:79:92:50:13:ab:31:5f:94: 98:31:40:12:c7:93:9c:b4:56:12:51:d0:9b:1f:13:0d:f8:55: 11:10:0b:74:ca:75:4a:17:bb:f7:92:c8:2f:ea:99:11:d8:f3: 8c:86:4c:ec:64:73:41:83:0e:e1:f2:94:a2:8c:cc:81:92:f7: e1:a3:7c:d7:1a:63:1c:68:bb:71:08:40:06:e2:7e:a3:21:e3: 26:33:53:1b:3a:3a:48:ab:8a:62:f9:12:c0:5f:b6:f4:24:c1: be:fe:54:3e:f3:12:e5:8a:dc:ea:8a:21:61:f8:17:71:a1:5d: 35:6e:4e:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8rqR7U+OyaruAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk MjBkNjc0MWEtMmQ5ZC00M2ZiLTkyZGQtN2Y3M2U3ZjJiMGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4vj6573caUQ3q4KXFxHfqL95AjSD5ifWfY3 yrcmeDQH3Gjv4uCscaLwRoZKpepEjI14Xad5VLVfItjRxzwy84sBPsbJtQysedWr ew5zmfYeb8u2t20w3kqkZCZPc2O4FIJL1HxNEwU+OqrJG/3WqERbWJB2v/fTL/vA Hc62jcZfylnXHq4uNbXyVK11IURcqQl2KjihWTenP9J0XRYZBToSLq3DjBB7pIa9 cbVxjpLpC9qpP5kaeBkZDCjv7hQiJQcb+J4kxNY7uy/87QTdzDCqNItT9P870B2u V+2Pn6BOmpMMViNc0sVdUZCa2XAPXni5Jaa4wfzWVraOp4o6DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4nkea0/3TAsNXUm0br8KExy1fTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjk1MjM5NmItYTEwZi0z ODIxLWI5OGQtYjM4MTM0NGI5ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxXlYAQv48Tdod89JZu4fM8SuPiev+PTEhdMqMfCXonbtmn4dliyLRH mmoSyzzWxednSsug690OCWAP9nKwfJ25IiyhTDGI6tgZcD/LyTQkO9pumfqJ4l+t cWPK/A4dv77RTgUYRYL2Dh1XmlJm1yWMTpxHUsO/dFdcxqCpRPZpSTi1zJjDfuh5 klATqzFflJgxQBLHk5y0VhJR0JsfEw34VREQC3TKdUoXu/eSyC/qmRHY84yGTOxk c0GDDuHylKKMzIGS9+GjfNcaYxxou3EIQAbifqMh4yYzUxs6OkirimL5EsBftvQk wb7+VD7zEuWK3OqKIWH4F3GhXTVuTgo= -----END CERTIFICATE-----Generated at Thu Oct 8 08:34:05 2026 by rpki-client