$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa File: 9682b18d-084f-339c-8a00-ef1f480f78c1.roa (raw, json) Hash identifier: bW8o64pYcsbG3MsHqcrY8XUHBmzxdWZHcRjZtnsIUzU= Subject key identifier: F9:FD:12:67:C6:06:F2:C3:E1:B0:49:54:35:79:CA:C8:A5:EC:FC:54 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497F1B44BC3D1565E8721400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:1b:44:bc:3d:15:65:e8:72:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6fbeef30-4fde-4176-ab60-2a8fdcec341f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:47:46:cc:d3:04:f5:86:3e:92:72:01:09: 0b:a5:9d:1b:84:b5:96:9b:3f:ea:27:0e:59:0b:50: 8f:0a:34:c9:2f:a1:45:55:d7:ff:ca:73:c6:7a:71: 93:d4:ee:ad:e3:1a:65:59:7a:69:1c:8a:00:be:20: 7a:19:08:8b:29:c1:e2:f8:05:b1:d2:01:8e:ca:8b: 23:d7:74:bd:a2:04:d0:40:75:27:99:12:1e:42:45: 91:7d:44:9b:ce:c7:2c:0c:e1:e6:f7:4c:8c:cb:16: e2:e1:ad:bd:2e:98:2d:5e:5c:6c:59:bf:8b:d7:ff: f0:03:e5:ea:e4:19:75:d5:33:7a:02:de:55:0e:83: 43:84:d0:c8:8f:29:3c:83:fd:99:b6:4f:eb:12:69: 00:af:e0:9b:5d:66:90:0a:9d:60:35:3c:21:ab:a8: d8:75:47:c1:29:95:0f:c4:71:74:7d:56:fe:59:1e: 49:bf:10:e2:e8:a9:1c:57:3b:db:d7:02:72:33:e0: 9e:6a:a4:e7:7e:75:eb:76:92:c7:77:d0:8c:47:02: 43:06:c3:f2:96:c5:d1:28:75:87:ea:ec:55:f7:1c: 72:8f:35:2b:8e:ee:37:e5:81:e9:03:ed:f2:24:6d: 50:39:ea:e5:03:7a:d3:d1:73:33:c5:79:85:b9:8b: 2e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FD:12:67:C6:06:F2:C3:E1:B0:49:54:35:79:CA:C8:A5:EC:FC:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0b:23:71:b2:b6:ab:1b:6a:d3:de:17:0d:87:a1:8c:79:9a: 39:a4:20:cd:61:52:c8:ee:9e:f3:d0:1b:66:5f:aa:60:f6:6c: 7c:60:a8:ef:90:a3:fa:a1:ec:d3:ed:8b:84:a0:fc:93:76:5a: c3:11:59:3e:b9:61:e4:ba:a9:b8:79:bc:f2:cd:82:6f:89:a5: 38:91:00:1b:7a:7c:c0:ea:2a:11:8f:8f:c6:00:5d:34:24:6b: 31:96:9a:49:73:23:d7:4b:07:c9:db:ae:0c:4c:a1:4b:d9:11: 3a:54:83:19:4a:68:b4:1e:19:df:a2:d8:9d:62:ee:b5:86:68: 54:41:57:20:d0:d4:03:80:76:1e:66:6a:95:61:b7:80:c5:d8: 6d:54:92:0f:94:08:20:b0:12:ea:0d:59:2f:f0:c2:96:be:d1: aa:18:cb:93:8d:44:e5:76:17:8d:1a:ab:90:f6:0c:c3:c7:11: bb:3b:d3:35:17:b4:be:d6:f3:90:b3:ef:ab:ac:6d:a1:79:ff: 21:90:e8:75:af:45:61:d8:5f:96:ff:49:89:6e:03:59:e5:d7: 9f:b0:9b:db:7f:87:9b:8f:72:6d:85:0e:a4:48:c3:68:19:47: 0d:86:a0:e2:60:83:cf:de:ac:23:eb:6f:74:32:0f:13:4e:56: 6a:e8:92:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfxtEvD0VZehyFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmZiZWVmMzAtNGZkZS00MTc2LWFiNjAtMmE4ZmRjZWMzNDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTZHRszTBPWGPpJyAQkLpZ0bhLWWmz/qJw5Z C1CPCjTJL6FFVdf/ynPGenGT1O6t4xplWXppHIoAviB6GQiLKcHi+AWx0gGOyosj 13S9ogTQQHUnmRIeQkWRfUSbzscsDOHm90yMyxbi4a29LpgtXlxsWb+L1//wA+Xq 5Bl11TN6At5VDoNDhNDIjyk8g/2Ztk/rEmkAr+CbXWaQCp1gNTwhq6jYdUfBKZUP xHF0fVb+WR5JvxDi6KkcVzvb1wJyM+CeaqTnfnXrdpLHd9CMRwJDBsPylsXRKHWH 6uxV9xxyjzUrju435YHpA+3yJG1QOerlA3rT0XMzxXmFuYsu/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPn9EmfGBvLD4bBJVDV5ysil7PxUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTY4MmIxOGQtMDg0Zi0z MzljLThhMDAtZWYxZjQ4MGY3OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgLI3GytqsbatPeFw2HoYx5mjmkIM1hUsjunvPQG2ZfqmD2bHxgqO+Q o/qh7NPti4Sg/JN2WsMRWT65YeS6qbh5vPLNgm+JpTiRABt6fMDqKhGPj8YAXTQk azGWmklzI9dLB8nbrgxMoUvZETpUgxlKaLQeGd+i2J1i7rWGaFRBVyDQ1AOAdh5m apVht4DF2G1Ukg+UCCCwEuoNWS/wwpa+0aoYy5ONROV2F40aq5D2DMPHEbs70zUX tL7W85Cz76usbaF5/yGQ6HWvRWHYX5b/SYluA1nl15+wm9t/h5uPcm2FDqRIw2gZ Rw2GoOJgg8/erCPrb3QyDxNOVmrokvY= -----END CERTIFICATE-----Generated at Mon Sep 28 17:36:03 2026 by rpki-client