$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c330b76c-c296-304a-84c3-e600b3a83a94.roa File: c330b76c-c296-304a-84c3-e600b3a83a94.roa (raw, json) Hash identifier: /dfedex1ErHtUujkmfSCJHB73pD0nmZYhKd2KFx8wsw= Subject key identifier: 57:2C:71:B5:F9:29:34:7A:21:F2:08:70:BA:65:28:6D:CE:31:F7:B4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3A17DE90B9A79597E8AAD300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c330b76c-c296-304a-84c3-e600b3a83a94.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.153.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:de:90:b9:a7:95:97:e8:aa:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=95efa2ba-0c6d-4421-94cb-360f3f988219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ce:c6:8e:ca:d3:77:80:a3:d2:15:36:5e:41: 2e:a1:aa:60:c3:bd:ca:51:79:f0:95:40:2a:1e:1e: 3f:71:97:da:39:69:6f:1f:18:88:0a:95:46:11:64: 15:23:00:10:4a:af:3d:b9:72:d6:88:79:94:ce:db: ec:0a:98:01:5f:08:72:36:21:b0:8b:88:aa:ae:6a: 48:df:54:20:30:5c:a0:a9:3a:37:f2:90:37:60:e3: ea:3d:7f:b9:0b:af:29:2c:98:75:86:bf:17:d3:44: 5f:92:dc:e1:b4:2c:b3:0a:a4:11:9b:07:98:d0:56: 01:95:6f:2b:b5:3d:a7:34:57:12:6b:e5:83:97:13: c9:8c:dc:74:6e:57:6a:3c:c5:2d:9d:db:4f:01:88: cc:9b:e3:f7:0d:f0:74:bd:f8:2e:97:df:3a:4a:7c: 51:c2:c6:4e:8a:4e:82:a4:ed:2b:49:1e:22:0a:53: 8f:a4:80:95:da:35:63:2b:b7:ce:b2:a0:45:34:7b: f3:69:b1:a8:62:dc:92:b1:ec:61:cd:91:ba:c2:6f: df:b7:89:ff:65:a0:d3:f1:93:79:96:cc:10:c7:99: b9:27:7a:ff:f4:1c:41:64:3c:75:ea:5d:cc:58:06: a4:f4:b2:06:a3:cf:b2:d4:bf:2b:35:27:2c:58:fa: 81:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2C:71:B5:F9:29:34:7A:21:F2:08:70:BA:65:28:6D:CE:31:F7:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c330b76c-c296-304a-84c3-e600b3a83a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ad:d1:0f:eb:1c:ec:cd:c8:06:e2:9c:12:37:06:9f:2e:85: 26:28:77:42:55:ed:82:ed:ac:27:a8:1c:bc:e7:af:b0:63:7e: 4c:13:e1:76:89:a3:39:5b:43:d1:27:36:c3:db:0a:85:9d:d3: 40:4f:2e:64:29:61:3e:2f:1c:50:25:c7:77:8d:d0:a7:7c:3d: f7:74:16:be:6e:90:ec:a0:47:1e:f2:e4:6d:8c:a9:7b:e4:f0: 49:0e:f4:52:78:93:ca:af:c8:ac:6c:85:ad:2a:e2:69:d2:42: a6:2c:30:fd:69:10:f4:5f:e6:7f:32:dd:f8:33:4e:33:08:15: 31:2f:17:a0:f5:6a:cd:e3:69:16:5b:4d:6d:15:cb:d9:9c:6c: ee:c6:f2:c0:7b:ed:ef:46:5a:36:d7:01:7d:83:7e:56:d9:4e: 1c:aa:95:4c:b6:ab:23:42:ac:8a:2a:1d:c2:86:a5:31:27:1a: 6f:8d:47:63:7d:d5:01:f0:91:6b:31:33:15:b1:75:d2:4a:ac: 3c:40:bb:64:06:e9:57:3e:0b:35:83:7a:2a:1c:85:1f:25:94: cc:7b:6c:9f:f6:35:8b:df:5b:9e:ae:33:65:eb:53:f7:aa:8c: 3a:de:7b:bb:2d:50:88:38:bc:a3:65:58:46:6b:02:1d:f9:f4: 78:82:7b:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F96QuaeVl+iq0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk OTVlZmEyYmEtMGM2ZC00NDIxLTk0Y2ItMzYwZjNmOTg4MjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM7GjsrTd4Cj0hU2XkEuoapgw73KUXnwlUAq Hh4/cZfaOWlvHxiICpVGEWQVIwAQSq89uXLWiHmUztvsCpgBXwhyNiGwi4iqrmpI 31QgMFygqTo38pA3YOPqPX+5C68pLJh1hr8X00RfktzhtCyzCqQRmweY0FYBlW8r tT2nNFcSa+WDlxPJjNx0bldqPMUtndtPAYjMm+P3DfB0vfgul986SnxRwsZOik6C pO0rSR4iClOPpICV2jVjK7fOsqBFNHvzabGoYtySsexhzZG6wm/ft4n/ZaDT8ZN5 lswQx5m5J3r/9BxBZDx16l3MWAak9LIGo8+y1L8rNScsWPqB8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcscbX5KTR6IfIIcLplKG3OMfe0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzMzMGI3NmMtYzI5Ni0z MDRhLTg0YzMtZTYwMGIzYTgzYTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJknMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOt0Q/rHOzNyAbinBI3Bp8uhSYod0JV7YLtrCeoHLznr7BjfkwT4XaJ ozlbQ9EnNsPbCoWd00BPLmQpYT4vHFAlx3eN0Kd8Pfd0Fr5ukOygRx7y5G2MqXvk 8EkO9FJ4k8qvyKxsha0q4mnSQqYsMP1pEPRf5n8y3fgzTjMIFTEvF6D1as3jaRZb TW0Vy9mcbO7G8sB77e9GWjbXAX2DflbZThyqlUy2qyNCrIoqHcKGpTEnGm+NR2N9 1QHwkWsxMxWxddJKrDxAu2QG6Vc+CzWDeiochR8llMx7bJ/2NYvfW56uM2XrU/eq jDree7stUIg4vKNlWEZrAh359HiCe68= -----END CERTIFICATE-----Generated at Mon Sep 28 18:08:44 2026 by rpki-client