$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8aee1e40-ec6c-3090-bdd3-8739db457212.roa File: 8aee1e40-ec6c-3090-bdd3-8739db457212.roa (raw, json) Hash identifier: k3wKlShyQPk3ujhIZox/DLfPU4HXveVfyVX54iZR0S0= Subject key identifier: 7F:95:F8:84:13:2D:FA:60:5A:20:AD:2B:F6:09:33:A6:8D:AC:A3:AC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F268D0D3101FC42774F8DC500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8aee1e40-ec6c-3090-bdd3-8739db457212.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 8069 IP address blocks: 20.153.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:0d:31:01:fc:42:77:4f:8d:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=f415d2d3-8c71-4591-abf9-e5f8f0176b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1a:6b:ef:36:11:c8:3e:ac:95:fe:81:56:7e: 7e:d6:c8:b0:21:66:40:71:f5:20:4e:6b:e4:1c:9e: 00:69:a0:cf:23:c7:78:b5:49:48:80:2e:8c:7b:1e: 7b:3f:c4:b8:dd:15:f1:b5:cf:54:38:bb:f9:97:27: b5:32:3b:52:61:18:95:87:3f:61:35:46:2f:74:15: b3:b1:7f:d8:64:9a:5a:61:4b:8c:46:57:44:37:dc: 6e:4b:69:36:9b:30:7a:9a:3f:04:fb:2e:d8:a0:3e: 25:a3:96:51:32:02:9d:b8:86:39:f8:95:fe:78:41: 50:3d:fe:ac:21:31:22:d0:69:3c:9e:3d:c9:d8:33: 86:90:a3:a2:0e:34:82:f8:cd:0b:55:df:4f:1a:fb: 5d:2a:1f:03:85:03:67:d4:e5:43:a6:9d:f1:32:29: f7:ff:af:ff:db:09:cc:b4:74:d7:87:7d:77:3c:9e: 78:f2:40:5e:ec:59:39:08:20:c3:89:e9:0a:71:17: 25:a2:af:1b:e3:15:46:b7:da:f3:32:5a:b6:6a:99: b5:46:aa:81:08:a1:e7:d1:95:0c:b0:c9:f1:17:d6: 49:aa:9e:4c:4c:6a:9e:a3:b4:e6:a7:49:bf:c6:03: a4:10:52:79:0b:3f:dc:f3:9f:4a:49:1d:59:76:51: 8a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:95:F8:84:13:2D:FA:60:5A:20:AD:2B:F6:09:33:A6:8D:AC:A3:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8aee1e40-ec6c-3090-bdd3-8739db457212.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:14:f6:4c:bf:de:9d:2d:03:25:92:3d:dc:84:57:c1:06:1a: 9f:c3:ca:65:f8:d1:08:2c:ea:44:8d:a3:99:6e:d6:7a:42:82: e7:5f:0e:84:c4:5a:d9:10:07:3a:ab:00:93:da:cb:e9:d8:84: d6:99:e0:03:3f:37:66:cd:3a:6f:d8:6b:2e:fb:1e:02:b1:39: 9d:75:f5:7e:c5:a4:5f:6b:99:a0:5b:1c:fe:b3:65:f3:38:bb: 9a:23:69:68:3f:1c:8c:95:8b:74:bc:96:fc:5c:21:3c:84:a4: dc:f9:63:c7:0d:b7:dd:42:8b:1e:3e:65:5d:32:7d:54:9f:7b: 3d:9c:54:c7:74:97:cc:b3:81:da:16:51:01:4e:e0:8a:fe:32: 4f:d5:26:9d:63:7e:aa:a3:58:f0:7c:ab:9d:97:a2:7f:0b:72: bf:28:fd:04:cc:7f:fa:90:a5:b1:0d:54:b0:c2:61:73:8f:0b: 6d:9a:44:46:22:26:8c:f7:87:ab:f0:a8:d5:7b:fd:66:e1:c0: 8c:c9:f4:1e:ec:d9:de:fd:49:b6:00:ef:d6:42:cb:8f:02:18: 2d:bd:a0:6a:e1:08:64:04:87:4a:c8:c5:92:22:a2:ef:8d:4e: 31:a9:fe:9a:be:81:6a:c7:7e:00:67:22:4d:a9:82:78:8c:62: 97:93:8e:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQ0xAfxCd0+NxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk ZjQxNWQyZDMtOGM3MS00NTkxLWFiZjktZTVmOGYwMTc2Yjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRpr7zYRyD6slf6BVn5+1siwIWZAcfUgTmvk HJ4AaaDPI8d4tUlIgC6Mex57P8S43RXxtc9UOLv5lye1MjtSYRiVhz9hNUYvdBWz sX/YZJpaYUuMRldEN9xuS2k2mzB6mj8E+y7YoD4lo5ZRMgKduIY5+JX+eEFQPf6s ITEi0Gk8nj3J2DOGkKOiDjSC+M0LVd9PGvtdKh8DhQNn1OVDpp3xMin3/6//2wnM tHTXh313PJ548kBe7Fk5CCDDiekKcRcloq8b4xVGt9rzMlq2apm1RqqBCKHn0ZUM sMnxF9ZJqp5MTGqeo7Tmp0m/xgOkEFJ5Cz/c859KSR1ZdlGKdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+V+IQTLfpgWiCtK/YJM6aNrKOsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGFlZTFlNDAtZWM2Yy0z MDkwLWJkZDMtODczOWRiNDU3MjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJklMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkU9ky/3p0tAyWSPdyEV8EGGp/DymX40Qgs6kSNo5lu1npCgudfDoTE WtkQBzqrAJPay+nYhNaZ4AM/N2bNOm/Yay77HgKxOZ119X7FpF9rmaBbHP6zZfM4 u5ojaWg/HIyVi3S8lvxcITyEpNz5Y8cNt91Cix4+ZV0yfVSfez2cVMd0l8yzgdoW UQFO4Ir+Mk/VJp1jfqqjWPB8q52Xon8Lcr8o/QTMf/qQpbENVLDCYXOPC22aREYi Joz3h6vwqNV7/WbhwIzJ9B7s2d79SbYA79ZCy48CGC29oGrhCGQEh0rIxZIiou+N TjGp/pq+gWrHfgBnIk2pgniMYpeTjgY= -----END CERTIFICATE-----Generated at Tue Sep 29 15:51:22 2026 by rpki-client