$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4ca8c3b-9666-353c-ac32-7b4bf191f70e.roa File: a4ca8c3b-9666-353c-ac32-7b4bf191f70e.roa (raw, json) Hash identifier: WvEjVbRW+9QyAUu1lB8vfv9OA66F3kqUMzJGAQVdVaY= Subject key identifier: 77:3E:66:93:76:56:DB:8B:D3:F1:B8:7C:91:10:D4:F8:D2:D4:9C:DF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3A17CC71F22D0A43592C9500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4ca8c3b-9666-353c-ac32-7b4bf191f70e.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.153.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:cc:71:f2:2d:0a:43:59:2c:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=a2311a15-84e2-4414-930c-2ba89d94d7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5e:73:60:01:c4:b0:c7:6e:c2:e3:c0:65:07: e2:50:9f:2e:df:76:2e:0f:a6:3c:3e:e5:61:1f:59: 64:bd:dc:39:17:71:49:1a:97:68:57:bb:5a:43:fc: 26:de:ba:02:c0:3d:1c:18:c5:d5:7f:19:fa:67:71: 3b:df:8a:fa:32:46:cd:7d:1a:36:f3:e9:09:7c:b9: 8a:b1:81:c5:75:15:0a:70:ca:9d:d9:43:ef:ee:35: 6f:38:ba:b4:48:18:5e:4a:e0:1d:ac:9a:c8:88:8d: 0b:e2:92:e7:ea:ab:25:6a:f5:17:fa:01:35:cf:1c: f2:8d:c3:81:9c:0d:84:cd:28:46:27:36:19:ef:5c: 48:1b:d7:ec:0f:49:35:8a:a1:d7:79:88:92:d6:6b: c8:de:7c:90:89:1e:3b:85:52:cf:53:78:ea:7b:2d: cf:4d:17:e1:00:b0:c2:e4:f7:04:24:a4:4b:38:af: 61:a6:e2:3b:39:99:50:82:c6:0c:09:9a:5b:d3:70: 44:ad:00:35:b7:a4:4f:7d:c2:5f:9b:01:98:5b:21: 92:6a:1d:35:23:85:14:3e:95:d5:8d:19:cf:15:16: 1c:be:6c:f7:63:26:14:9a:36:7f:4b:3a:16:ea:bf: 3e:26:b3:da:d0:26:c6:e0:3c:08:51:22:4c:52:5f: 51:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3E:66:93:76:56:DB:8B:D3:F1:B8:7C:91:10:D4:F8:D2:D4:9C:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4ca8c3b-9666-353c-ac32-7b4bf191f70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:76:47:8a:4b:57:30:16:d9:56:66:af:dd:69:bc:0a:d3:d7: 56:b9:74:ec:2f:25:d7:a5:fe:97:4a:1d:18:64:f4:b3:a4:a9: 6f:13:61:65:76:62:1a:3e:b0:8b:00:58:b6:7e:49:22:37:1f: 16:e2:0e:5b:f1:42:ed:49:73:88:ad:5b:49:af:04:46:e5:e9: 4d:54:82:6a:7d:87:ae:d0:f3:35:23:e4:f6:2f:6e:38:7e:43: ab:41:1a:2c:8b:a5:ec:4a:fe:9a:c7:ca:ed:fb:b5:bf:bf:a3: 0c:b4:5e:66:46:e7:20:9e:9c:39:b0:a4:ee:3c:6d:7a:af:70: 64:98:d1:93:48:d8:66:fe:24:c1:9f:c2:56:41:7e:4c:6a:16: 7c:3f:f6:7c:44:41:63:45:9c:d3:f2:bc:dc:ba:fb:f9:39:c2: ae:77:5d:b5:f7:49:3c:75:fb:83:99:05:8d:01:d8:58:c1:da: c8:81:61:c7:dc:5a:6b:93:f8:4c:8b:82:1f:08:aa:60:b6:41: 97:2d:98:ad:e6:37:ea:94:96:e4:15:90:6f:26:d4:26:a3:fc: 18:c0:ee:31:ca:f8:6b:28:37:b1:6f:62:7b:a8:aa:c4:d4:79: ae:aa:cd:fd:26:a8:40:0e:51:ad:ad:f5:2b:d1:40:49:4b:74: 19:9f:4b:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8xx8i0KQ1kslQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk YTIzMTFhMTUtODRlMi00NDE0LTkzMGMtMmJhODlkOTRkN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo15zYAHEsMduwuPAZQfiUJ8u33YuD6Y8PuVh H1lkvdw5F3FJGpdoV7taQ/wm3roCwD0cGMXVfxn6Z3E734r6MkbNfRo28+kJfLmK sYHFdRUKcMqd2UPv7jVvOLq0SBheSuAdrJrIiI0L4pLn6qslavUX+gE1zxzyjcOB nA2EzShGJzYZ71xIG9fsD0k1iqHXeYiS1mvI3nyQiR47hVLPU3jqey3PTRfhALDC 5PcEJKRLOK9hpuI7OZlQgsYMCZpb03BErQA1t6RPfcJfmwGYWyGSah01I4UUPpXV jRnPFRYcvmz3YyYUmjZ/SzoW6r8+JrPa0CbG4DwIUSJMUl9R2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHc+ZpN2VtuL0/G4fJEQ1PjS1JzfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTRjYThjM2ItOTY2Ni0z NTNjLWFjMzItN2I0YmYxOTFmNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKd2R4pLVzAW2VZmr91pvArT11a5dOwvJdel/pdKHRhk9LOkqW8TYWV2 Yho+sIsAWLZ+SSI3HxbiDlvxQu1Jc4itW0mvBEbl6U1Ugmp9h67Q8zUj5PYvbjh+ Q6tBGiyLpexK/prHyu37tb+/owy0XmZG5yCenDmwpO48bXqvcGSY0ZNI2Gb+JMGf wlZBfkxqFnw/9nxEQWNFnNPyvNy6+/k5wq53XbX3STx1+4OZBY0B2FjB2siBYcfc WmuT+EyLgh8IqmC2QZctmK3mN+qUluQVkG8m1Caj/BjA7jHK+GsoN7FvYnuoqsTU ea6qzf0mqEAOUa2t9SvRQElLdBmfSwY= -----END CERTIFICATE-----Generated at Mon Sep 28 18:04:41 2026 by rpki-client