$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/799ddd93-8bb1-31db-b5aa-2f18d42eb259.roa File: 799ddd93-8bb1-31db-b5aa-2f18d42eb259.roa (raw, json) Hash identifier: NQg4DZmLi+LV5O7dwtrny77gA3lElALVbTn9ksywwUM= Subject key identifier: AD:6A:AB:C0:09:3A:BB:5E:05:79:7F:A7:B8:0F:2E:43:BB:00:D9:F5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F49739BFE8065CD224D803D74 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/799ddd93-8bb1-31db-b5aa-2f18d42eb259.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:9b:fe:80:65:cd:22:4d:80:3d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ea315d89-ffe4-4dc8-83a7-8de4f9a0332b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:30:ce:27:01:ef:ff:45:4d:07:4c:75:15:3c: f4:9b:96:c1:d5:33:8a:3a:2c:d2:12:2e:df:8f:aa: 12:41:32:8c:7a:8d:4d:90:83:5f:83:9b:19:5d:5e: 82:30:87:e5:02:48:29:37:07:98:f5:12:02:11:b8: 54:6a:bb:f7:83:e9:a7:b2:66:92:f4:20:5b:15:11: b9:b5:69:c6:65:a7:a4:b8:05:c2:46:11:5c:0b:8e: b6:48:75:cc:b2:20:b2:93:ad:db:a2:8a:e4:bf:08: 13:cd:e5:8d:87:9e:69:fa:63:92:d2:77:7c:c9:14: 8d:59:80:88:9a:8b:be:02:d5:26:73:89:6b:ea:dc: fe:62:78:0f:de:6c:e2:93:4c:12:09:03:f6:54:f1: cd:bb:06:ff:cf:3e:9c:ce:a4:0a:fa:5e:16:b5:3b: 76:20:9a:25:4c:21:47:f1:ca:d9:eb:54:8b:ae:b5: 84:57:ee:45:57:2b:c9:14:c9:33:5d:03:6a:4e:1a: 00:32:c3:e9:b4:3b:dc:ff:0d:94:79:9c:f8:7f:c7: 35:fa:ec:9a:eb:fa:c4:3d:54:3e:e5:f8:6c:d5:ea: fd:53:88:7a:25:4d:6b:d4:32:2b:dc:cd:e7:7c:06: 3f:2d:39:41:cc:7d:84:61:33:83:54:da:9f:06:f0: 9e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6A:AB:C0:09:3A:BB:5E:05:79:7F:A7:B8:0F:2E:43:BB:00:D9:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/799ddd93-8bb1-31db-b5aa-2f18d42eb259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b6:97:1a:13:62:8a:c6:1a:bb:33:e0:db:76:27:b7:11:ae: f9:f0:e6:a3:b4:ea:33:8c:0f:7c:46:53:92:88:e8:b8:55:ff: 7c:9d:bf:2d:91:e8:95:35:70:a3:5c:b1:f3:46:96:00:25:e7: 2e:41:b7:21:70:c7:b2:58:c9:67:4f:ea:fe:29:f8:fd:a6:08: 58:45:27:58:3b:ec:69:7f:e1:68:82:9e:db:01:b5:66:ea:19: 76:8c:b3:bf:de:14:e0:38:fe:c9:5c:9f:31:68:ee:9c:ce:ba: c6:3f:76:8b:68:de:a0:4f:f4:a1:57:c0:ee:b3:62:15:15:0f: 4c:ae:25:0e:49:93:05:c0:92:1b:10:08:80:8e:bc:78:49:39: 35:81:17:7f:7b:63:22:46:b6:b1:a4:de:94:19:79:84:aa:d0: 45:69:98:22:4a:d1:53:ac:57:9e:69:43:9a:af:1e:ca:81:0a: 93:0b:44:8d:72:26:f2:65:21:b4:b6:74:84:d2:5a:cc:c1:84: 7e:b2:8c:9b:ea:65:39:8e:50:a1:be:7d:00:0e:64:36:6c:c5: 2a:76:10:98:1b:16:3c:3b:69:57:a5:95:01:5d:e1:1b:25:73: 0e:aa:68:ec:39:68:04:91:0c:fc:d4:e1:0e:f0:aa:35:88:2a: d3:fe:a2:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5v+gGXNIk2APXQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWEzMTVkODktZmZlNC00ZGM4LTgzYTctOGRlNGY5YTAzMzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTDOJwHv/0VNB0x1FTz0m5bB1TOKOizSEi7f j6oSQTKMeo1NkINfg5sZXV6CMIflAkgpNweY9RICEbhUarv3g+mnsmaS9CBbFRG5 tWnGZaekuAXCRhFcC462SHXMsiCyk63boorkvwgTzeWNh55p+mOS0nd8yRSNWYCI mou+AtUmc4lr6tz+YngP3mzik0wSCQP2VPHNuwb/zz6czqQK+l4WtTt2IJolTCFH 8crZ61SLrrWEV+5FVyvJFMkzXQNqThoAMsPptDvc/w2UeZz4f8c1+uya6/rEPVQ+ 5fhs1er9U4h6JU1r1DIr3M3nfAY/LTlBzH2EYTODVNqfBvCecwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1qq8AJOrteBXl/p7gPLkO7ANn1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzk5ZGRkOTMtOGJiMS0z MWRiLWI1YWEtMmYxOGQ0MmViMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC22lxoTYorGGrsz4Nt2J7cRrvnw5qO06jOMD3xGU5KI6LhV/3ydvy2R 6JU1cKNcsfNGlgAl5y5BtyFwx7JYyWdP6v4p+P2mCFhFJ1g77Gl/4WiCntsBtWbq GXaMs7/eFOA4/slcnzFo7pzOusY/doto3qBP9KFXwO6zYhUVD0yuJQ5JkwXAkhsQ CICOvHhJOTWBF397YyJGtrGk3pQZeYSq0EVpmCJK0VOsV55pQ5qvHsqBCpMLRI1y JvJlIbS2dITSWszBhH6yjJvqZTmOUKG+fQAOZDZsxSp2EJgbFjw7aVellQFd4Rsl cw6qaOw5aASRDPzU4Q7wqjWIKtP+ogE= -----END CERTIFICATE-----Generated at Tue Sep 29 19:41:49 2026 by rpki-client