$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a520f29-bff6-34eb-b254-1d131d623d04.roa File: 9a520f29-bff6-34eb-b254-1d131d623d04.roa (raw, json) Hash identifier: MLyCKm83xq+n/c+/qhBbxWk1CI1rztP17PPI0/i7AYw= Subject key identifier: B1:7B:AB:38:8A:BD:0B:E3:39:4A:C1:34:6A:B4:33:6B:B8:04:95:78 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F4973622AD0B8ED92EA0BB900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a520f29-bff6-34eb-b254-1d131d623d04.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:62:2a:d0:b8:ed:92:ea:0b:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8cbf1ac8-0c8f-4dda-986e-9636ee4a0fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6d:50:0e:27:eb:5b:f9:de:4b:ef:7f:24:f1: 75:7d:be:ea:39:22:62:39:3e:0c:23:76:67:ff:91: ff:97:40:bf:0f:f3:c6:31:84:b3:2a:c0:7a:84:8f: 06:c0:0a:ae:36:78:c2:7b:41:8d:af:82:ba:5b:05: 98:e8:38:18:17:25:0b:de:d0:cf:05:54:7e:db:7f: 1b:b3:31:41:23:46:6b:d3:b5:eb:ed:40:51:2d:af: ac:f5:79:d9:e4:84:5e:05:5c:e7:ee:41:76:7e:d8: d1:a0:de:39:48:62:52:ba:9b:b1:b2:74:eb:e4:b3: 08:80:e1:9f:c0:dd:0c:39:ea:b5:0c:a4:58:f9:9c: 77:a8:12:ed:10:4c:cc:e7:85:78:b6:31:e6:b6:3b: 4b:15:78:de:98:2d:4f:82:9b:3a:76:fd:fa:29:ac: a4:ae:6a:76:db:dd:c3:4f:a0:3a:cc:53:78:ab:ac: 0c:89:40:a0:e0:6e:18:98:f7:92:06:e2:db:b0:24: 8f:a6:5a:c5:f6:5b:63:3c:cc:f3:90:47:db:6b:c5: 44:b6:d4:9f:6d:8d:f0:b9:e6:ab:4b:93:01:b3:3c: 11:50:55:47:54:c7:c9:18:07:50:b9:08:60:62:54: b0:09:27:f5:fc:85:7e:05:b2:28:50:6d:71:cb:ca: f4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7B:AB:38:8A:BD:0B:E3:39:4A:C1:34:6A:B4:33:6B:B8:04:95:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a520f29-bff6-34eb-b254-1d131d623d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b4:9c:66:80:b4:e9:b2:b2:0d:8b:a1:8b:36:8a:32:dd:e4: 9d:e4:dc:02:87:27:03:b8:0f:a0:1a:fe:7e:c2:2b:f3:f5:de: 2a:d5:31:a4:77:6d:c9:02:20:45:21:19:18:15:5f:50:89:4a: e8:b9:8b:80:41:f7:12:5b:86:2a:e2:87:01:07:0d:0a:fe:dd: 5e:02:d1:0d:f2:49:51:4c:1b:db:43:46:27:03:24:d7:a2:dd: c4:6f:42:3b:3b:45:df:2a:c1:bf:46:f3:22:fb:e8:32:bf:55: 47:15:0c:46:5e:3e:76:4e:77:b2:48:11:92:02:ae:fa:b5:72: 00:db:83:78:a7:de:08:d5:68:f4:e4:41:b1:03:fd:d4:4f:c1: ed:84:5d:e0:e6:53:bc:ac:99:01:79:dc:2d:b0:6d:1d:39:91: dd:0e:b3:6b:ac:82:8e:c1:5e:c7:a1:28:91:19:2b:04:b7:02: e3:6b:67:38:da:6d:78:39:ee:91:3d:ed:e8:ff:b5:2c:44:fb: 85:d0:c4:63:1d:f2:7c:95:25:55:fb:56:e3:92:c4:b5:5e:37: 9e:26:8b:d2:49:51:9c:78:70:e2:1c:07:98:38:34:c4:0a:78: 50:b7:45:38:75:c7:5a:be:b8:e9:35:f0:bb:14:76:84:cd:30: 98:85:2c:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc2Iq0LjtkuoLuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGNiZjFhYzgtMGM4Zi00ZGRhLTk4NmUtOTYzNmVlNGEwZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm1QDifrW/neS+9/JPF1fb7qOSJiOT4MI3Zn /5H/l0C/D/PGMYSzKsB6hI8GwAquNnjCe0GNr4K6WwWY6DgYFyUL3tDPBVR+238b szFBI0Zr07Xr7UBRLa+s9XnZ5IReBVzn7kF2ftjRoN45SGJSupuxsnTr5LMIgOGf wN0MOeq1DKRY+Zx3qBLtEEzM54V4tjHmtjtLFXjemC1Pgps6dv36Kaykrmp2293D T6A6zFN4q6wMiUCg4G4YmPeSBuLbsCSPplrF9ltjPMzzkEfba8VEttSfbY3wuear S5MBszwRUFVHVMfJGAdQuQhgYlSwCSf1/IV+BbIoUG1xy8r0nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLF7qziKvQvjOUrBNGq0M2u4BJV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWE1MjBmMjktYmZmNi0z NGViLWIyNTQtMWQxMzFkNjIzZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIS0nGaAtOmysg2LoYs2ijLd5J3k3AKHJwO4D6Aa/n7CK/P13irVMaR3 bckCIEUhGRgVX1CJSui5i4BB9xJbhirihwEHDQr+3V4C0Q3ySVFMG9tDRicDJNei 3cRvQjs7Rd8qwb9G8yL76DK/VUcVDEZePnZOd7JIEZICrvq1cgDbg3in3gjVaPTk QbED/dRPwe2EXeDmU7ysmQF53C2wbR05kd0Os2usgo7BXsehKJEZKwS3AuNrZzja bXg57pE97ej/tSxE+4XQxGMd8nyVJVX7VuOSxLVeN54mi9JJUZx4cOIcB5g4NMQK eFC3RTh1x1q+uOk18LsUdoTNMJiFLKY= -----END CERTIFICATE-----Generated at Tue Sep 29 02:38:14 2026 by rpki-client