$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3457f2c-3a55-3e62-87a9-8e24926a0545.roa File: b3457f2c-3a55-3e62-87a9-8e24926a0545.roa (raw, json) Hash identifier: tKJip+Oi10G6jLLgMgUgr3UPgRKBxgLoPDcTW3frqHM= Subject key identifier: 77:8C:F6:6F:45:82:4D:E1:72:3D:80:07:C8:13:8E:03:38:2F:0F:94 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957BB80D749E28EA3C16600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3457f2c-3a55-3e62-87a9-8e24926a0545.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.153.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:bb:80:d7:49:e2:8e:a3:c1:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=4b70b006-2d3e-4fc0-a994-ff5f0fd3cfe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:0e:79:cf:29:48:48:d3:15:eb:57:ec:a8: 79:74:bb:0d:89:72:6f:8d:fe:9e:f9:16:fb:95:8f: 77:87:fa:d2:d6:71:9a:d6:c8:5d:79:e6:95:39:6b: ef:3e:df:e7:31:b0:9c:67:a5:dc:86:ff:d2:87:d7: 6f:46:e6:fb:af:b2:f0:2d:5d:29:cf:ad:1b:c9:34: bb:3d:df:b3:a4:a0:71:27:b1:25:f8:45:19:22:b7: 2d:ad:80:6b:20:f7:85:cf:dc:3c:51:4d:7e:a1:84: 98:c3:b5:c8:c8:dc:b2:99:67:3e:d1:59:52:1c:a4: 45:29:a9:47:98:a4:09:e2:9a:e8:96:c7:71:59:9f: 44:c7:a3:b0:94:cd:91:e6:0f:07:66:64:41:e8:a8: 3f:90:02:91:ba:c2:1f:f9:c9:b5:a4:7b:02:c8:b7: dd:9a:4a:da:c8:35:1f:8b:75:db:05:79:39:77:c0: 8c:57:0b:40:46:65:e0:2c:5f:b2:87:ff:29:30:c5: d2:c7:27:0c:f2:80:80:4b:87:e7:ee:43:ac:11:1a: 4e:db:65:8c:c3:30:88:05:7f:e3:7f:9c:b2:8c:da: 60:1f:64:06:38:79:64:44:b7:d7:76:16:40:2f:d1: 54:7d:8e:5a:24:0d:20:7c:62:de:af:56:ec:90:44: 76:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8C:F6:6F:45:82:4D:E1:72:3D:80:07:C8:13:8E:03:38:2F:0F:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3457f2c-3a55-3e62-87a9-8e24926a0545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d7:9f:9c:f6:f6:dc:0e:44:9d:2d:4b:91:0a:86:d7:49:15: a4:4d:22:5b:ad:8f:19:7f:4c:cb:8f:9b:b1:fd:c4:67:44:80: 47:a0:77:a0:77:83:91:19:54:fa:7b:0c:b4:fc:4a:e8:f7:75: 5c:0c:fa:56:3f:e1:9c:e6:02:a5:ac:3c:8a:02:2c:90:29:1a: a0:b6:86:58:20:67:64:58:60:24:f4:23:2d:37:2c:dd:dd:c6: 3a:7a:1a:f4:88:d4:d9:eb:fc:5b:7a:59:94:c8:ae:da:63:a5: 11:92:c9:4b:f0:69:a5:4c:9d:63:ac:cd:0a:d5:01:15:cc:d7: 68:e7:45:69:3a:c1:18:58:7a:f1:0b:d6:36:56:db:c9:57:c7: 22:a4:48:78:bd:db:90:37:90:29:79:df:14:c7:23:ec:d0:94: f5:22:78:ab:ac:32:02:e2:87:31:2f:2b:7a:8d:f3:5c:cd:b8: be:e6:47:5e:e4:67:a3:3a:58:d8:0a:ac:f4:c4:52:40:2d:b3: bc:4f:7f:ac:1d:2a:89:53:56:3b:b6:fd:f8:7c:09:f7:d4:8f: 97:9c:93:12:60:a2:60:fd:5f:08:7d:c8:8f:03:f7:65:ed:c9: 01:74:7f:65:8c:94:05:81:ca:94:e2:fe:15:8a:9f:01:1d:41: 73:3e:dc:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7uA10nijqPBZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk NGI3MGIwMDYtMmQzZS00ZmMwLWE5OTQtZmY1ZjBmZDNjZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGAOec8pSEjTFetX7Kh5dLsNiXJvjf6e+Rb7 lY93h/rS1nGa1shdeeaVOWvvPt/nMbCcZ6Xchv/Sh9dvRub7r7LwLV0pz60byTS7 Pd+zpKBxJ7El+EUZIrctrYBrIPeFz9w8UU1+oYSYw7XIyNyymWc+0VlSHKRFKalH mKQJ4prolsdxWZ9Ex6OwlM2R5g8HZmRB6Kg/kAKRusIf+cm1pHsCyLfdmkrayDUf i3XbBXk5d8CMVwtARmXgLF+yh/8pMMXSxycM8oCAS4fn7kOsERpO22WMwzCIBX/j f5yyjNpgH2QGOHlkRLfXdhZAL9FUfY5aJA0gfGLer1bskER2tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeM9m9Fgk3hcj2AB8gTjgM4Lw+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjM0NTdmMmMtM2E1NS0z ZTYyLTg3YTktOGUyNDkyNmEwNTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbXn5z29twORJ0tS5EKhtdJFaRNIlutjxl/TMuPm7H9xGdEgEegd6B3 g5EZVPp7DLT8Suj3dVwM+lY/4ZzmAqWsPIoCLJApGqC2hlggZ2RYYCT0Iy03LN3d xjp6GvSI1Nnr/Ft6WZTIrtpjpRGSyUvwaaVMnWOszQrVARXM12jnRWk6wRhYevEL 1jZW28lXxyKkSHi925A3kCl53xTHI+zQlPUieKusMgLihzEvK3qN81zNuL7mR17k Z6M6WNgKrPTEUkAts7xPf6wdKolTVju2/fh8CffUj5eckxJgomD9Xwh9yI8D92Xt yQF0f2WMlAWBypTi/hWKnwEdQXM+3Lo= -----END CERTIFICATE-----Generated at Sat Oct 3 13:23:49 2026 by rpki-client