$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e008e9e-063b-3c05-919d-1af2b82b48cd.roa File: 6e008e9e-063b-3c05-919d-1af2b82b48cd.roa (raw, json) Hash identifier: wM3fUqG6/Ul7742gCAZ/cNKKb1Avu7mNRl+8yWYT8dc= Subject key identifier: 9A:3B:9F:49:D9:16:92:DB:D5:6C:A5:5A:F2:60:F1:9C:96:97:3D:20 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F4989F4B8B14AC6EE693CCC80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e008e9e-063b-3c05-919d-1af2b82b48cd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:f4:b8:b1:4a:c6:ee:69:3c:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bb221975-1ba9-4f69-b724-11363b11b9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ac:12:76:89:18:dd:4a:c5:cd:79:9c:af:ae: 2b:99:44:d9:13:b6:bb:49:8f:28:94:40:ba:a9:6b: c5:0e:8c:6a:de:3f:7d:3b:d3:2c:8a:7f:1a:4b:e6: cc:0d:0b:ac:ff:c0:e5:55:92:c0:6e:dc:4a:f1:3f: 8d:85:5b:4b:40:c8:25:93:25:d1:ed:52:41:9a:53: f3:05:6f:40:db:62:10:04:a7:4a:7e:03:be:b8:22: f9:ab:44:9b:a7:21:d3:c8:0b:4a:fa:02:22:c8:58: 22:af:96:f1:c4:b4:26:06:a7:57:a5:f0:0f:a0:c9: 93:09:2a:83:b0:04:41:b7:bb:53:c9:f0:05:60:fe: e2:3e:f7:29:40:31:f3:60:55:b2:bc:41:e2:58:43: 71:11:ec:df:77:94:d2:a2:13:03:05:ee:cc:cc:14: 6c:4f:3f:44:fb:9d:de:d7:61:10:eb:21:ff:f9:95: 2a:84:92:57:33:9a:d6:e5:0b:59:63:0d:b7:3e:d8: 0a:0d:50:30:ef:3d:e0:c6:83:da:44:74:da:e6:9d: db:a4:28:13:af:e0:77:62:aa:6e:fa:03:a2:03:16: 75:33:b0:b7:df:85:77:fb:a4:e6:b0:bb:99:9e:04: c2:77:eb:5a:01:d7:eb:4a:ac:c5:52:8f:0b:ac:42: b3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3B:9F:49:D9:16:92:DB:D5:6C:A5:5A:F2:60:F1:9C:96:97:3D:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e008e9e-063b-3c05-919d-1af2b82b48cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e1:9e:79:5d:40:53:ec:94:91:cb:f6:76:5b:bf:8e:44:9e: 5c:59:fb:92:c4:d7:f3:08:13:8b:c7:04:25:e4:97:03:27:5d: e6:57:a8:51:05:c6:06:90:cd:81:93:10:4d:de:49:a5:2c:2b: df:28:0e:be:47:4b:7b:66:64:3b:80:9e:d5:0f:e3:69:93:55: cd:cd:8d:ef:e6:04:2e:43:a9:2b:98:64:fc:0e:a0:a8:7e:36: d7:fd:24:4a:dc:cc:7f:47:98:f9:3a:77:fd:62:8c:d2:b7:6d: 43:e8:df:c7:12:dd:87:75:34:b5:89:25:17:dc:52:5c:14:93: b9:e7:8d:c6:60:ca:d0:b4:ce:7a:97:0b:7c:99:f7:d4:af:f4: ae:25:31:b9:b1:0e:3a:d5:53:6b:fa:b6:ae:c9:35:a1:7d:6b: 88:40:63:aa:3c:b5:a0:29:8a:6d:d9:3a:43:46:72:ae:8e:ad: 0e:83:cf:24:67:42:b3:d8:7f:15:e1:83:84:1f:3f:60:ce:e4: e6:a9:48:73:56:73:cf:3a:ec:db:c8:ec:c8:85:6a:4c:7a:c3: 77:9d:36:ef:41:f9:3b:dd:84:bc:f4:bf:82:80:dd:45:42:08: e7:b7:17:ce:f9:d6:11:ee:e3:bd:0a:03:33:3c:a6:5f:8e:3e: 24:3b:83:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JifS4sUrG7mk8zIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmIyMjE5NzUtMWJhOS00ZjY5LWI3MjQtMTEzNjNiMTFiOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKwSdokY3UrFzXmcr64rmUTZE7a7SY8olEC6 qWvFDoxq3j99O9Msin8aS+bMDQus/8DlVZLAbtxK8T+NhVtLQMglkyXR7VJBmlPz BW9A22IQBKdKfgO+uCL5q0SbpyHTyAtK+gIiyFgir5bxxLQmBqdXpfAPoMmTCSqD sARBt7tTyfAFYP7iPvcpQDHzYFWyvEHiWENxEezfd5TSohMDBe7MzBRsTz9E+53e 12EQ6yH/+ZUqhJJXM5rW5QtZYw23PtgKDVAw7z3gxoPaRHTa5p3bpCgTr+B3Yqpu +gOiAxZ1M7C334V3+6TmsLuZngTCd+taAdfrSqzFUo8LrEKzwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJo7n0nZFpLb1WylWvJg8ZyWlz0gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmUwMDhlOWUtMDYzYi0z YzA1LTkxOWQtMWFmMmI4MmI0OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJldMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjhnnldQFPslJHL9nZbv45EnlxZ+5LE1/MIE4vHBCXklwMnXeZXqFEF xgaQzYGTEE3eSaUsK98oDr5HS3tmZDuAntUP42mTVc3Nje/mBC5DqSuYZPwOoKh+ Ntf9JErczH9HmPk6d/1ijNK3bUPo38cS3Yd1NLWJJRfcUlwUk7nnjcZgytC0znqX C3yZ99Sv9K4lMbmxDjrVU2v6tq7JNaF9a4hAY6o8taApim3ZOkNGcq6OrQ6DzyRn QrPYfxXhg4QfP2DO5OapSHNWc8867NvI7MiFakx6w3edNu9B+TvdhLz0v4KA3UVC COe3F8751hHu470KAzM8pl+OPiQ7g14= -----END CERTIFICATE-----Generated at Thu Oct 1 13:30:24 2026 by rpki-client