$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d7bdae5-f9f6-3c23-990e-51beed026d09.roa File: 7d7bdae5-f9f6-3c23-990e-51beed026d09.roa (raw, json) Hash identifier: LudLPpX1s6IGsxWlroJ8ZkjrOzwuwRfqfgvY2QClL0g= Subject key identifier: 9F:A5:94:6C:63:5C:0E:EA:67:7E:C4:0C:54:17:A4:76:71:E6:65:F9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3A17C6E1D272A91D10D76D9E Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d7bdae5-f9f6-3c23-990e-51beed026d09.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.153.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:c6:e1:d2:72:a9:1d:10:d7:6d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=c9c8048c-0034-430d-94ff-7b478dad2ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f7:f9:e7:db:ee:a2:e0:0f:4c:f9:47:e0:62: 44:46:37:54:d9:00:18:90:d3:9b:a1:61:72:0b:88: 42:be:52:4c:f8:91:ca:c4:b1:ef:bd:e1:e5:39:36: 8e:21:6b:d3:57:41:42:36:0b:22:f9:eb:c3:59:d5: 6c:9c:d1:ba:ad:6d:44:d4:78:1e:50:cc:72:a1:3f: 87:45:6e:9d:d1:46:8a:81:29:24:e5:a3:bd:e9:14: e4:fa:3b:7e:83:d8:7f:58:1f:0a:8c:d6:cd:60:91: c4:f0:9b:bd:39:5d:aa:ce:76:93:10:2a:59:e1:75: 9b:77:c1:a6:6b:e4:a5:91:5a:af:1d:a8:68:b2:a3: 6c:c9:aa:5e:8b:dc:98:43:c4:0e:4c:0d:bb:cd:37: 65:01:4e:3a:f5:95:30:76:b8:77:6b:d6:be:1d:17: 8a:3b:d7:bd:61:e4:d3:05:97:98:34:c3:e4:fb:d4: 1f:ca:31:f8:10:0a:70:07:ae:24:c2:29:1d:7f:66: 33:65:de:0f:a6:ba:90:75:15:0e:99:ff:f5:c5:0f: 5b:5a:4a:9f:70:46:b0:f2:b8:99:78:7d:8a:8c:45: 46:37:45:9a:1b:93:68:bd:66:35:f3:21:26:ee:01: 1c:af:e8:b4:b7:d8:60:ca:4a:b4:d0:5d:b5:98:bd: fe:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A5:94:6C:63:5C:0E:EA:67:7E:C4:0C:54:17:A4:76:71:E6:65:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d7bdae5-f9f6-3c23-990e-51beed026d09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f5:ae:56:fd:f3:06:c8:df:44:01:c4:1c:66:c3:24:ad:e1: 17:23:95:f6:35:4b:aa:10:d0:e5:b4:39:b5:52:60:15:0e:29: 08:46:27:84:32:96:08:e0:66:07:1f:f9:ac:81:e5:fc:9e:7a: bc:92:d5:73:ec:69:23:e3:80:3a:cb:80:e8:19:2b:57:51:10: ef:20:d5:1f:2d:34:3c:80:28:a9:4d:19:91:06:61:a9:74:2c: 9b:1e:a3:cc:39:83:3a:03:1a:e8:33:7e:ff:94:c4:4f:9b:34: ea:a6:12:d4:b3:1b:d1:35:51:5e:c1:84:cc:3e:11:35:21:5b: 29:92:21:00:a4:34:37:87:88:8f:41:af:e3:1d:2f:be:e0:3c: 66:87:d1:e6:8f:72:f1:6e:5f:31:1f:a5:e4:f3:73:16:c3:cf: 6d:ff:97:85:60:c1:a8:ef:3c:fc:68:f1:76:f6:08:d4:09:b8: 0c:5b:17:27:cc:d0:d1:ad:53:97:9a:17:38:1c:82:7e:01:b0: e9:d4:1f:11:e2:91:76:74:5b:15:5b:e9:97:d4:b9:7a:14:bf: 3c:9e:fd:20:ca:b6:d5:ed:63:94:df:a1:e6:fd:52:78:da:42: b4:d9:e3:f1:48:22:49:e5:c8:25:e9:97:e3:de:1d:7c:65:d2: 87:80:e0:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8bh0nKpHRDXbZ4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk YzljODA0OGMtMDAzNC00MzBkLTk0ZmYtN2I0NzhkYWQyYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Pf559vuouAPTPlH4GJERjdU2QAYkNOboWFy C4hCvlJM+JHKxLHvveHlOTaOIWvTV0FCNgsi+evDWdVsnNG6rW1E1HgeUMxyoT+H RW6d0UaKgSkk5aO96RTk+jt+g9h/WB8KjNbNYJHE8Ju9OV2qznaTECpZ4XWbd8Gm a+SlkVqvHahosqNsyapei9yYQ8QOTA27zTdlAU469ZUwdrh3a9a+HReKO9e9YeTT BZeYNMPk+9QfyjH4EApwB64kwikdf2YzZd4PprqQdRUOmf/1xQ9bWkqfcEaw8riZ eH2KjEVGN0WaG5NovWY18yEm7gEcr+i0t9hgykq00F21mL3+eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+llGxjXA7qZ37EDFQXpHZx5mX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2Q3YmRhZTUtZjlmNi0z YzIzLTk5MGUtNTFiZWVkMDI2ZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr1rlb98wbI30QBxBxmwySt4RcjlfY1S6oQ0OW0ObVSYBUOKQhGJ4Qy lgjgZgcf+ayB5fyeeryS1XPsaSPjgDrLgOgZK1dREO8g1R8tNDyAKKlNGZEGYal0 LJseo8w5gzoDGugzfv+UxE+bNOqmEtSzG9E1UV7BhMw+ETUhWymSIQCkNDeHiI9B r+MdL77gPGaH0eaPcvFuXzEfpeTzcxbDz23/l4VgwajvPPxo8Xb2CNQJuAxbFyfM 0NGtU5eaFzgcgn4BsOnUHxHikXZ0WxVb6ZfUuXoUvzye/SDKttXtY5Tfoeb9Unja QrTZ4/FIIknlyCXpl+PeHXxl0oeA4Jc= -----END CERTIFICATE-----Generated at Sat Oct 3 11:20:19 2026 by rpki-client