$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c476b60-f465-34b0-a266-d46d57400322.roa File: 7c476b60-f465-34b0-a266-d46d57400322.roa (raw, json) Hash identifier: 1TF+KQgpMtyhUoE2Z9p3ZlrIcjSwGwqzJPEcvJvFfCw= Subject key identifier: DF:B9:CB:B9:A5:86:ED:C2:E2:9A:00:28:CA:D4:CB:0A:C7:43:56:CB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F498B67C283867F745E5838D8 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c476b60-f465-34b0-a266-d46d57400322.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:67:c2:83:86:7f:74:5e:58:38:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=93f775cd-2da0-4cef-bba0-799327958775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fd:27:60:9f:7d:cf:d2:62:d4:2c:7b:30:96: 3f:1e:c2:c6:af:b3:23:06:b7:69:3f:a5:96:46:68: 15:28:d7:3f:6b:3b:98:02:85:5a:cc:0e:34:81:d4: 22:ff:cc:f5:01:b7:6e:2c:73:cd:0c:02:4a:64:0d: ce:ec:c6:18:8a:76:b4:a0:c3:13:0f:63:50:7e:be: f5:44:2d:ab:26:04:7c:a2:bb:13:a5:88:b8:2e:67: 2a:31:46:ca:99:d9:de:3b:9a:93:62:04:a5:cd:76: e0:1c:fb:80:15:e1:c3:8e:75:55:ce:03:0c:46:56: 39:3b:82:a4:36:35:18:aa:c4:a6:3f:62:d5:a1:6a: 07:e3:79:dd:4d:24:6c:e2:19:bf:69:91:17:c5:fd: 3a:7e:5e:1c:cf:3f:19:1a:6d:cf:e6:51:9b:87:b8: db:f5:fa:69:08:f1:68:e6:fe:30:da:c9:fd:cd:8d: 5e:2e:0a:a0:93:e2:31:25:5e:98:ed:2f:ef:88:d9: 8f:88:12:42:40:86:c3:f5:7a:45:4c:d8:8f:30:3c: 77:6b:8a:34:5b:db:d9:55:2c:f1:6b:b2:fb:15:c5: a9:c8:16:8f:d8:44:43:2d:ca:84:37:be:69:4a:54: 2f:dc:74:11:8d:bc:a7:37:e9:59:40:31:e2:af:8b: fa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B9:CB:B9:A5:86:ED:C2:E2:9A:00:28:CA:D4:CB:0A:C7:43:56:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c476b60-f465-34b0-a266-d46d57400322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:99:db:62:71:a1:90:24:b0:d9:ef:49:47:15:ed:8d:3e:10: 80:7b:e3:2a:72:9a:67:d5:b0:bd:22:d7:78:6f:3c:ce:20:c6: f0:3d:e1:ca:e5:0c:24:40:3b:ec:5b:33:70:c7:f9:69:99:79: bb:79:53:bb:3b:05:c1:ef:3a:39:16:bc:5a:50:fd:2d:17:5c: 7e:0b:d7:62:60:7b:a9:4f:aa:e9:21:fe:90:d6:51:44:43:eb: 38:6d:ba:2d:37:51:50:2e:e0:7a:ef:f3:a6:3b:db:98:24:ca: 06:15:e3:b0:d2:95:ed:a6:e7:db:7c:0b:97:42:5d:92:b4:fc: 6e:d5:cd:16:a8:52:ee:65:b4:f8:10:b6:78:0a:5f:c1:db:81: fd:e0:0e:44:f3:38:56:f9:59:29:28:46:e8:a4:03:bb:ba:11: 6c:44:b6:96:36:69:94:17:9c:f2:23:cd:1d:74:6e:5b:dd:de: 99:56:09:64:df:20:9c:65:b9:b1:38:a3:16:4f:68:cd:10:90: 9a:53:27:c6:f0:99:76:e1:6c:50:9e:60:6f:67:97:fc:b9:60: 04:ee:7a:d1:1f:3b:aa:b4:9f:87:62:76:ba:85:61:eb:be:26: 72:d2:b3:af:94:5f:c7:01:0e:6d:95:47:ab:2e:77:37:d9:c9: 0f:25:77:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji2fCg4Z/dF5YONgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTNmNzc1Y2QtMmRhMC00Y2VmLWJiYTAtNzk5MzI3OTU4Nzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP0nYJ99z9Ji1Cx7MJY/HsLGr7MjBrdpP6WW RmgVKNc/azuYAoVazA40gdQi/8z1AbduLHPNDAJKZA3O7MYYina0oMMTD2NQfr71 RC2rJgR8orsTpYi4LmcqMUbKmdneO5qTYgSlzXbgHPuAFeHDjnVVzgMMRlY5O4Kk NjUYqsSmP2LVoWoH43ndTSRs4hm/aZEXxf06fl4czz8ZGm3P5lGbh7jb9fppCPFo 5v4w2sn9zY1eLgqgk+IxJV6Y7S/viNmPiBJCQIbD9XpFTNiPMDx3a4o0W9vZVSzx a7L7FcWpyBaP2ERDLcqEN75pSlQv3HQRjbynN+lZQDHir4v6UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+5y7mlhu3C4poAKMrUywrHQ1bLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2M0NzZiNjAtZjQ2NS0z NGIwLWEyNjYtZDQ2ZDU3NDAwMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqZ22JxoZAksNnvSUcV7Y0+EIB74ypymmfVsL0i13hvPM4gxvA94crl DCRAO+xbM3DH+WmZebt5U7s7BcHvOjkWvFpQ/S0XXH4L12Jge6lPqukh/pDWUURD 6zhtui03UVAu4Hrv86Y725gkygYV47DSle2m59t8C5dCXZK0/G7VzRaoUu5ltPgQ tngKX8Hbgf3gDkTzOFb5WSkoRuikA7u6EWxEtpY2aZQXnPIjzR10blvd3plWCWTf IJxlubE4oxZPaM0QkJpTJ8bwmXbhbFCeYG9nl/y5YATuetEfO6q0n4didrqFYeu+ JnLSs6+UX8cBDm2VR6sudzfZyQ8ld38= -----END CERTIFICATE-----Generated at Tue Oct 13 19:16:29 2026 by rpki-client