$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/71bcb2a5-fbd7-3bfe-ae76-8f119d661a78.roa File: 71bcb2a5-fbd7-3bfe-ae76-8f119d661a78.roa (raw, json) Hash identifier: 13irGUXhDH5FErQ6ToXg0o/KyxeATmt9o/KFtqvbzEA= Subject key identifier: CE:23:8F:B5:FF:52:4F:A7:12:12:B7:95:8C:4B:CB:C1:45:69:EE:4E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F498931676AD64FEB16634060 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/71bcb2a5-fbd7-3bfe-ae76-8f119d661a78.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:31:67:6a:d6:4f:eb:16:63:40:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c051457c-a50f-40b5-bf2c-342ea9b3718c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6f:c9:23:b9:2a:ec:4f:94:b6:52:16:bc:1e: f9:20:d6:7b:10:7f:45:81:3a:0b:c0:f7:3f:aa:38: c9:98:39:88:1e:d0:e5:75:eb:b5:cd:c4:7b:31:2e: a8:4c:82:ce:27:8c:76:f9:ec:4c:9f:08:e3:6e:85: 5e:00:9d:21:1d:96:51:e7:83:7d:60:59:73:eb:0c: 34:95:ae:8a:56:83:f9:57:aa:0b:20:9b:c3:fa:5b: f6:6d:ba:28:26:45:7a:8e:9f:75:69:4a:c4:40:3c: 26:48:99:6f:4f:68:3f:7b:b5:76:78:ef:73:04:23: 67:7f:b1:ed:0c:85:7a:f1:a8:3c:3d:99:d9:99:1c: 33:9e:80:f8:20:43:ae:30:51:c5:ba:c5:3d:e3:3f: 5a:f7:61:2a:2d:3a:a5:3e:d3:11:f1:2f:ff:17:35: 78:c3:03:95:57:2d:3f:3d:eb:16:64:89:36:de:1d: f7:d6:d1:f4:59:86:06:46:58:29:da:57:00:90:d6: 76:fe:62:01:f6:8b:8f:d8:87:e5:1f:61:aa:88:18: ec:a0:ca:79:af:b9:a2:b6:1e:d3:99:5b:8c:b5:1d: 2f:b1:54:02:c7:52:45:48:91:22:a7:a8:bf:ea:ea: 1e:bd:4f:95:af:86:8b:af:d1:4a:35:86:5a:45:18: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:23:8F:B5:FF:52:4F:A7:12:12:B7:95:8C:4B:CB:C1:45:69:EE:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/71bcb2a5-fbd7-3bfe-ae76-8f119d661a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:64:ed:ee:02:29:b0:b4:d9:f4:27:21:d9:93:c5:cd:b7:cc: 0e:22:f8:0a:c4:ac:3b:de:2a:cf:65:ef:8a:29:d5:cd:04:9a: 86:74:7c:44:80:54:40:e6:8c:82:3c:7a:58:76:55:3e:e3:e8: 89:26:55:21:4b:c2:a9:2a:35:02:1e:75:87:ad:34:25:62:ef: 1d:55:9b:0a:a9:4e:00:20:c7:19:12:e1:9f:4b:93:39:85:e0: 42:01:93:82:f8:cb:3e:92:63:a1:85:bb:43:06:39:8e:e5:3a: 9e:0f:2f:cd:f3:45:e3:41:c5:03:9a:09:32:78:a2:5f:d5:a2: 52:be:b4:88:26:fc:71:32:71:40:1a:ef:7c:3b:49:a1:20:f2: 1f:4f:b8:f8:15:0d:72:13:63:02:7b:0d:bd:91:a8:49:c0:0d: 16:4d:96:4d:bc:dd:53:57:ae:54:17:7e:ee:b7:74:05:b3:58: 1e:33:13:0c:41:57:88:34:75:5c:32:2f:31:a9:97:db:8e:38: dc:4f:64:f0:0c:55:1d:84:5c:f1:b5:21:fc:32:ed:2a:8b:e5: d1:b2:32:45:43:96:15:05:30:de:66:96:02:5d:d4:eb:24:25: c9:79:5c:38:22:53:48:46:57:ac:17:8b:22:47:3b:86:a4:e7: f5:43:5c:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiTFnatZP6xZjQGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzA1MTQ1N2MtYTUwZi00MGI1LWJmMmMtMzQyZWE5YjM3MThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2/JI7kq7E+UtlIWvB75INZ7EH9FgToLwPc/ qjjJmDmIHtDldeu1zcR7MS6oTILOJ4x2+exMnwjjboVeAJ0hHZZR54N9YFlz6ww0 la6KVoP5V6oLIJvD+lv2bbooJkV6jp91aUrEQDwmSJlvT2g/e7V2eO9zBCNnf7Ht DIV68ag8PZnZmRwznoD4IEOuMFHFusU94z9a92EqLTqlPtMR8S//FzV4wwOVVy0/ PesWZIk23h331tH0WYYGRlgp2lcAkNZ2/mIB9ouP2IflH2GqiBjsoMp5r7mith7T mVuMtR0vsVQCx1JFSJEip6i/6uoevU+Vr4aLr9FKNYZaRRiOEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4jj7X/Uk+nEhK3lYxLy8FFae5OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzFiY2IyYTUtZmJkNy0z YmZlLWFlNzYtOGYxMTlkNjYxYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBk7e4CKbC02fQnIdmTxc23zA4i+ArErDveKs9l74op1c0EmoZ0fESA VEDmjII8elh2VT7j6IkmVSFLwqkqNQIedYetNCVi7x1VmwqpTgAgxxkS4Z9LkzmF 4EIBk4L4yz6SY6GFu0MGOY7lOp4PL83zReNBxQOaCTJ4ol/VolK+tIgm/HEycUAa 73w7SaEg8h9PuPgVDXITYwJ7Db2RqEnADRZNlk283VNXrlQXfu63dAWzWB4zEwxB V4g0dVwyLzGpl9uOONxPZPAMVR2EXPG1Ifwy7SqL5dGyMkVDlhUFMN5mlgJd1Osk Jcl5XDgiU0hGV6wXiyJHO4ak5/VDXCA= -----END CERTIFICATE-----Generated at Mon Sep 28 21:15:53 2026 by rpki-client