$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/aa4b6c02-c24b-3a78-99a8-626fddbe8610.roa File: aa4b6c02-c24b-3a78-99a8-626fddbe8610.roa (raw, json) Hash identifier: N7gR/3l5dQ2cHRxpZ68KyhVCLHx67hhIhalYP2wCpVw= Subject key identifier: 05:DC:26:F8:D4:B2:F4:13:5E:25:2D:91:E3:68:31:19:03:37:A7:F0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F1E2CFC127B8199E112A1C140 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/aa4b6c02-c24b-3a78-99a8-626fddbe8610.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.153.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:fc:12:7b:81:99:e1:12:a1:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=f76eda97-65fd-454a-a6c7-9df9548457d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c3:27:da:cd:ef:de:cd:89:af:e3:8e:af:61: 42:31:39:0b:a7:d6:86:0d:44:a9:c6:bd:fd:22:3f: a7:bc:91:a5:45:53:79:20:06:b7:ea:7f:80:2d:5b: 9b:b5:cc:b1:9c:95:03:24:5a:7e:93:5b:ad:cd:42: cf:a4:40:a0:48:a9:79:ea:ef:a6:39:18:c8:4c:80: fd:df:c4:85:f8:2c:bc:cf:2b:55:81:02:e5:43:79: 4e:ab:aa:0a:2b:e7:2f:39:a5:6c:87:00:26:40:c2: 84:87:2c:98:60:4f:a2:11:0e:c6:89:f5:20:13:d4: 21:17:5d:37:0a:f7:1d:3f:3b:11:91:9a:f1:44:12: c0:9d:5f:e4:67:08:2c:13:4b:a0:b2:40:e9:a9:05: 11:79:28:4e:16:68:53:c6:69:a3:09:d5:86:a3:95: 77:24:d0:d4:f5:2a:b4:04:1d:53:8d:c9:9a:d2:87: a4:9d:c0:11:53:a5:0a:33:94:ba:38:7c:68:09:4b: b9:ba:54:d6:5e:2f:63:0e:13:64:6b:35:60:ab:8f: 7e:86:32:5e:4a:63:14:79:cd:23:ad:53:11:6a:d2: 96:5e:61:6b:72:21:45:b1:c3:5e:02:cd:45:9f:d1: ff:5b:91:25:f5:96:dc:a8:a9:84:d8:f0:a2:87:34: 6b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DC:26:F8:D4:B2:F4:13:5E:25:2D:91:E3:68:31:19:03:37:A7:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/aa4b6c02-c24b-3a78-99a8-626fddbe8610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d6:f1:02:9e:82:b4:f4:3c:d1:bf:ff:81:f6:45:55:8f:5d: 11:93:e5:a6:a1:20:70:92:5c:07:b9:2a:78:ed:cc:84:9f:53: 42:ec:f9:5a:d8:bb:56:62:41:cc:3e:f3:ee:56:0c:5c:9c:39: ec:49:b2:9a:1c:37:10:93:a6:b3:b0:44:24:e5:4d:00:16:33: ec:5b:e3:da:b0:cd:2a:9b:52:53:8a:31:84:37:73:da:65:c6: 81:f4:be:52:24:b0:3a:fd:15:21:95:86:2f:d6:59:0b:0f:f5: d8:33:e7:cd:05:8a:06:fa:95:85:4c:1c:4f:1a:9e:1f:d3:a0: a0:5a:5e:ed:85:6e:b6:07:6b:38:95:28:fc:13:b5:62:0f:e7: 37:18:4d:ac:2e:a6:83:4c:ae:9b:8f:71:96:2a:61:ab:a0:e2: fc:d8:b7:e5:36:57:2d:62:fb:98:e5:ac:4d:92:a6:9d:f3:5e: 94:cc:cc:e5:b7:f2:24:8e:52:81:64:e6:57:28:d0:c6:4a:cc: 2f:ad:a0:39:12:d2:5e:13:83:4d:fb:51:ae:d1:e1:b5:5a:e6: 50:38:51:4b:f1:0b:dc:95:98:43:21:60:42:ee:1d:98:b8:ac: f9:aa:ad:15:2f:cd:24:db:00:55:f0:ea:e1:2d:fe:c4:4c:a8: d7:37:fc:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPwSe4GZ4RKhwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk Zjc2ZWRhOTctNjVmZC00NTRhLWE2YzctOWRmOTU0ODQ1N2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsMn2s3v3s2Jr+OOr2FCMTkLp9aGDUSpxr39 Ij+nvJGlRVN5IAa36n+ALVubtcyxnJUDJFp+k1utzULPpECgSKl56u+mORjITID9 38SF+Cy8zytVgQLlQ3lOq6oKK+cvOaVshwAmQMKEhyyYYE+iEQ7GifUgE9QhF103 CvcdPzsRkZrxRBLAnV/kZwgsE0ugskDpqQUReShOFmhTxmmjCdWGo5V3JNDU9Sq0 BB1Tjcma0oekncARU6UKM5S6OHxoCUu5ulTWXi9jDhNkazVgq49+hjJeSmMUec0j rVMRatKWXmFrciFFscNeAs1Fn9H/W5El9ZbcqKmE2PCihzRrJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXcJvjUsvQTXiUtkeNoMRkDN6fwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWE0YjZjMDItYzI0Yi0z YTc4LTk5YTgtNjI2ZmRkYmU4NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3W8QKegrT0PNG//4H2RVWPXRGT5aahIHCSXAe5KnjtzISfU0Ls+VrY u1ZiQcw+8+5WDFycOexJspocNxCTprOwRCTlTQAWM+xb49qwzSqbUlOKMYQ3c9pl xoH0vlIksDr9FSGVhi/WWQsP9dgz580Figb6lYVMHE8anh/ToKBaXu2FbrYHaziV KPwTtWIP5zcYTawupoNMrpuPcZYqYaug4vzYt+U2Vy1i+5jlrE2Spp3zXpTMzOW3 8iSOUoFk5lco0MZKzC+toDkS0l4Tg037Ua7R4bVa5lA4UUvxC9yVmEMhYELuHZi4 rPmqrRUvzSTbAFXw6uEt/sRMqNc3/JE= -----END CERTIFICATE-----Generated at Mon Sep 28 21:15:36 2026 by rpki-client