$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c94cb722-73e6-3d84-8ff9-c329ac78b958.roa File: c94cb722-73e6-3d84-8ff9-c329ac78b958.roa (raw, json) Hash identifier: xohC/r2lEr+N+UnQ5wne+KxrHbXxH3qeLHc/2n8SrTw= Subject key identifier: 33:36:89:52:FB:4E:1B:A9:0F:D9:D4:C0:C9:6A:1E:42:6F:F6:DB:A2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F19FCF84A3AE4D494BB5ECC00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c94cb722-73e6-3d84-8ff9-c329ac78b958.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f8:4a:3a:e4:d4:94:bb:5e:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=37ca605e-9fcb-407a-b266-94173dd2a14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c4:e4:9f:90:16:e1:e3:1f:99:ad:a3:09:31: ab:35:ee:57:72:9a:07:cd:25:77:08:d0:a0:81:48: 98:c5:94:75:5c:31:f3:fc:44:a6:b9:19:fe:d2:3a: 6f:58:60:45:6c:6d:91:7a:52:85:8c:c1:7c:65:ff: c2:99:52:9b:a1:e9:06:84:d3:44:e4:05:cd:18:5f: 06:8f:c7:44:73:c9:4a:27:fc:d3:94:fa:9d:d8:01: 87:2a:e0:af:ce:d1:57:ce:72:53:95:57:b9:bb:a6: 2e:2d:b5:a9:e0:45:90:dd:68:29:18:ab:e8:7e:6d: 9c:81:94:fc:ae:67:b3:f1:a4:b2:c8:14:24:27:44: 4d:8c:13:f3:45:99:c2:1b:e4:90:74:f6:a2:7b:c2: 14:c7:b7:b1:dd:7e:60:29:df:2a:03:67:2a:bd:49: c4:ab:cc:25:65:7c:65:d0:ba:e5:2d:49:c0:30:23: e3:9c:74:95:05:9b:c0:0c:86:9b:dc:8e:cd:0d:7b: 8b:20:00:b7:92:b6:1a:31:8a:a2:9c:6b:65:ee:9d: af:9a:71:69:21:e1:3d:be:8c:4e:f7:85:81:f0:d7: d7:22:6a:ff:67:7c:32:50:c8:8f:8a:97:d9:fc:f2: 42:3e:0d:b2:5b:ce:a2:8b:f5:c4:90:0e:43:70:d0: 1c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:36:89:52:FB:4E:1B:A9:0F:D9:D4:C0:C9:6A:1E:42:6F:F6:DB:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c94cb722-73e6-3d84-8ff9-c329ac78b958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ef:e0:0d:10:95:af:85:6d:0c:84:b5:7f:0f:ea:71:fb:3c: ac:41:cd:1b:28:a8:ea:3e:a9:c8:9b:5e:f5:df:ff:44:21:fa: 74:0b:f3:b1:57:ff:bb:54:2c:70:fc:f2:ac:bb:82:82:c1:8d: d0:a6:79:af:87:a6:f9:08:5b:ac:65:7b:a9:8b:c8:b2:9c:3e: 06:4d:cb:1f:c3:e8:c8:72:90:9d:66:53:fe:3d:38:95:54:da: 36:8a:21:41:3d:78:90:d4:1f:06:09:89:de:6a:8e:b4:3c:2a: f5:d0:04:8e:5e:d4:83:d3:47:ac:20:eb:6c:1c:fd:58:42:5a: 5d:a0:95:0a:a2:26:2f:e3:ff:f5:35:df:e7:a2:2f:e4:33:04: 78:0a:71:26:e7:f6:a5:0b:df:49:f3:be:f1:ad:55:f7:2b:17: e4:8a:8b:dc:2c:1f:b7:95:a5:41:a5:19:6b:01:28:f0:ac:98: f0:ee:8c:7a:42:c3:d5:74:96:a0:97:c4:8f:76:a5:cb:ce:ac: 27:a8:03:9d:67:5f:4a:98:99:1f:35:f3:07:04:fd:e9:2f:ca: 9c:0b:ed:0f:14:ad:04:d5:e4:65:b1:b4:9e:85:70:c2:55:b5: 1a:fe:59:cd:48:70:8a:ac:f3:3d:be:48:d1:c8:e4:00:b2:0e: 13:20:4b:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/PhKOuTUlLtezAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk MzdjYTYwNWUtOWZjYi00MDdhLWIyNjYtOTQxNzNkZDJhMTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsTkn5AW4eMfma2jCTGrNe5XcpoHzSV3CNCg gUiYxZR1XDHz/ESmuRn+0jpvWGBFbG2RelKFjMF8Zf/CmVKboekGhNNE5AXNGF8G j8dEc8lKJ/zTlPqd2AGHKuCvztFXznJTlVe5u6YuLbWp4EWQ3WgpGKvofm2cgZT8 rmez8aSyyBQkJ0RNjBPzRZnCG+SQdPaie8IUx7ex3X5gKd8qA2cqvUnEq8wlZXxl 0LrlLUnAMCPjnHSVBZvADIab3I7NDXuLIAC3krYaMYqinGtl7p2vmnFpIeE9voxO 94WB8NfXImr/Z3wyUMiPipfZ/PJCPg2yW86ii/XEkA5DcNAcnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM2iVL7ThupD9nUwMlqHkJv9tuiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzk0Y2I3MjItNzNlNi0z ZDg0LThmZjktYzMyOWFjNzhiOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArv4A0Qla+FbQyEtX8P6nH7PKxBzRsoqOo+qcibXvXf/0Qh+nQL87FX /7tULHD88qy7goLBjdCmea+HpvkIW6xle6mLyLKcPgZNyx/D6MhykJ1mU/49OJVU 2jaKIUE9eJDUHwYJid5qjrQ8KvXQBI5e1IPTR6wg62wc/VhCWl2glQqiJi/j//U1 3+eiL+QzBHgKcSbn9qUL30nzvvGtVfcrF+SKi9wsH7eVpUGlGWsBKPCsmPDujHpC w9V0lqCXxI92pcvOrCeoA51nX0qYmR818wcE/ekvypwL7Q8UrQTV5GWxtJ6FcMJV tRr+Wc1IcIqs8z2+SNHI5ACyDhMgS9k= -----END CERTIFICATE-----Generated at Mon Sep 28 21:15:51 2026 by rpki-client