$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a8abe513-c520-3d11-96b4-f85a047b037c.roa File: a8abe513-c520-3d11-96b4-f85a047b037c.roa (raw, json) Hash identifier: uKEGCIxpFU89nA+bFYapwp7AM6FIc5QVEEnOG0iiBFY= Subject key identifier: 5D:A5:9C:71:81:FF:35:AB:12:9A:93:AD:C5:56:BE:7D:8B:50:C6:95 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497437A2F5C7530BE34AB540 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a8abe513-c520-3d11-96b4-f85a047b037c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:37:a2:f5:c7:53:0b:e3:4a:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b1f55ed5-708a-48f6-9723-7068f3f2af24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:07:79:90:f5:df:f9:44:57:05:d1:ec:f6:82: 04:f2:65:75:b2:f7:a2:a3:36:29:2e:52:cf:59:9e: f9:0a:38:d9:15:bc:4e:3c:b3:3c:a1:b6:fa:85:e4: a2:ed:2d:80:03:c9:87:39:dd:ad:ca:0b:f4:92:60: 58:d7:06:c0:06:41:c0:44:c1:97:0a:46:db:d5:06: 52:c6:2f:e5:49:a0:f0:cd:d6:04:6b:3e:13:2c:19: d4:10:eb:54:5f:f5:0c:bf:40:f4:09:a3:08:70:8a: 4a:7b:de:00:27:0f:ad:27:03:4a:cd:12:c4:c4:24: b1:9b:86:81:40:74:82:9e:19:86:b8:24:2d:f0:7c: df:0f:61:ed:48:d9:ee:ab:13:46:2f:f8:41:ad:04: 11:6f:fa:ec:eb:29:5c:48:bc:9a:92:9d:a8:15:1f: 24:3c:14:6f:9e:67:70:3d:f6:b5:99:29:53:3b:55: 86:a4:cd:d5:83:7a:11:ea:ac:9f:f3:ee:55:04:20: 97:7b:06:0b:7f:13:3e:69:ee:1b:db:3b:66:b8:3f: 4e:af:7d:1a:9f:ea:23:f4:cb:4e:1a:20:b2:91:8b: aa:2a:c3:b5:99:b0:57:ab:83:71:da:1d:2d:53:8b: ac:0b:c6:f9:f1:3c:fc:2a:92:83:30:19:95:4c:1b: 6f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A5:9C:71:81:FF:35:AB:12:9A:93:AD:C5:56:BE:7D:8B:50:C6:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a8abe513-c520-3d11-96b4-f85a047b037c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:d2:12:9f:7c:0c:61:e8:d4:f7:f6:47:72:96:10:41:8c:f1: 7d:3a:70:ff:cd:e1:ac:b7:39:27:72:ac:60:70:cb:26:4d:9c: 11:0c:de:3e:cb:d0:fb:24:2b:da:4b:e0:3a:2d:85:14:37:28: 49:e6:77:f6:52:08:2f:97:c8:3e:e4:f0:bd:68:10:83:79:fc: 13:c1:73:b4:b5:39:ed:52:21:f7:9b:7a:f5:85:90:61:54:9f: 7e:2d:ed:ee:7c:5f:e8:50:95:22:70:ab:46:f3:5e:cd:ab:2e: ba:1a:e0:76:61:3b:e6:54:54:6f:f5:5a:cb:52:09:7f:98:41: d1:09:89:7d:03:53:e6:a8:96:d5:a7:1e:97:75:c5:03:ba:a3: 51:76:f0:44:f7:55:4c:5f:42:e0:f7:a5:a2:6e:51:11:a4:82: 83:2b:54:8c:7c:24:c7:69:ac:13:9e:a9:79:e0:3c:43:d1:ff: 67:7e:8e:7f:4a:63:97:4d:cd:43:77:f1:11:00:83:9d:9c:19: 31:f6:aa:8b:3b:52:ee:1a:51:ce:3d:67:e4:ae:7e:47:07:8e: 89:d6:71:8b:82:d3:26:1c:60:f4:f2:04:d8:ec:09:cc:d7:6a: c9:45:29:12:a1:52:ef:62:6e:10:2f:8a:31:5e:d3:45:5a:0c: 69:b0:b0:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdDei9cdTC+NKtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjFmNTVlZDUtNzA4YS00OGY2LTk3MjMtNzA2OGYzZjJhZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAd5kPXf+URXBdHs9oIE8mV1sveiozYpLlLP WZ75CjjZFbxOPLM8obb6heSi7S2AA8mHOd2tygv0kmBY1wbABkHARMGXCkbb1QZS xi/lSaDwzdYEaz4TLBnUEOtUX/UMv0D0CaMIcIpKe94AJw+tJwNKzRLExCSxm4aB QHSCnhmGuCQt8HzfD2HtSNnuqxNGL/hBrQQRb/rs6ylcSLyakp2oFR8kPBRvnmdw Pfa1mSlTO1WGpM3Vg3oR6qyf8+5VBCCXewYLfxM+ae4b2ztmuD9Or30an+oj9MtO GiCykYuqKsO1mbBXq4Nx2h0tU4usC8b58Tz8KpKDMBmVTBtvIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2lnHGB/zWrEpqTrcVWvn2LUMaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYThhYmU1MTMtYzUyMC0z ZDExLTk2YjQtZjg1YTA0N2IwMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTSEp98DGHo1Pf2R3KWEEGM8X06cP/N4ay3OSdyrGBwyyZNnBEM3j7L 0PskK9pL4DothRQ3KEnmd/ZSCC+XyD7k8L1oEIN5/BPBc7S1Oe1SIfebevWFkGFU n34t7e58X+hQlSJwq0bzXs2rLroa4HZhO+ZUVG/1WstSCX+YQdEJiX0DU+aoltWn Hpd1xQO6o1F28ET3VUxfQuD3paJuURGkgoMrVIx8JMdprBOeqXngPEPR/2d+jn9K Y5dNzUN38REAg52cGTH2qos7Uu4aUc49Z+SufkcHjonWcYuC0yYcYPTyBNjsCczX aslFKRKhUu9ibhAvijFe00VaDGmwsDE= -----END CERTIFICATE-----Generated at Sat Oct 10 13:19:51 2026 by rpki-client