$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3fc124b-95da-3ef8-a27d-46036565139c.roa File: d3fc124b-95da-3ef8-a27d-46036565139c.roa (raw, json) Hash identifier: 5uNBQHm2Ii0wGCPyI7+0vmFT8ZLf+0sGCXmmBfcHucI= Subject key identifier: 5A:D0:D5:37:0E:54:1C:80:11:C6:97:80:E4:8B:B5:36:52:85:49:71 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F3A17C8B384CCB5C891CCFC00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3fc124b-95da-3ef8-a27d-46036565139c.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.153.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:c8:b3:84:cc:b5:c8:91:cc:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=fd83c1be-4fe9-4df5-bc60-6436ae1ce283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e8:6a:b6:86:cf:d2:fb:0f:f3:49:5f:3b:14: 5a:02:8d:f8:ff:7e:97:ba:0c:04:5d:da:f3:2a:72: 4e:f6:dc:8f:be:c9:81:26:c6:2a:ff:0b:dd:2f:d5: ef:a3:23:91:42:0d:6b:f7:38:81:65:d4:7b:e6:2d: 03:e3:88:5d:04:4b:02:32:e4:86:af:97:99:9d:ef: 85:d7:62:6a:63:28:45:41:07:11:1b:5b:0e:8e:97: 8b:a0:37:64:dd:2d:5d:6a:21:a4:05:6f:85:68:22: 6d:4d:ff:0f:e3:e2:1b:94:cc:54:a5:7e:83:ea:f6: a7:ee:64:e5:3a:38:e5:f4:af:ae:7c:3c:45:24:e2: 84:b7:a9:44:49:a2:a3:6b:1d:32:bf:e3:3c:58:db: bd:79:5f:72:01:5b:62:71:b9:2f:d4:b8:5a:63:9d: b9:14:eb:89:e0:78:d7:c3:97:40:f7:89:df:f9:77: 04:df:25:c5:32:00:12:e4:df:d7:3a:37:40:98:49: 84:6c:9d:56:fa:15:1e:71:a6:b8:b3:7b:9b:41:cc: e9:03:ec:b2:f7:db:5f:86:e8:c2:30:65:44:be:dd: 87:bc:f9:b7:00:9e:42:52:9c:4f:67:d4:9f:e8:2c: 3e:10:44:58:b4:14:a7:c9:96:2a:a6:9b:03:d6:ac: 1d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D0:D5:37:0E:54:1C:80:11:C6:97:80:E4:8B:B5:36:52:85:49:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3fc124b-95da-3ef8-a27d-46036565139c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:68:50:8d:83:92:48:04:47:cb:6b:b1:67:ee:b2:c6:de:72: 0a:ec:78:e2:4a:ec:c9:8b:01:40:a9:1a:d9:f8:4d:18:8c:86: 75:cd:6f:b2:43:16:e2:a2:e8:79:63:fa:b0:b2:52:14:96:ba: 13:1b:03:2f:74:ce:46:4e:1b:ac:a0:53:a4:02:a5:a0:8a:f0: ab:76:96:18:0d:59:46:fa:ab:d3:1f:29:67:4b:e2:44:f2:f6: 18:f2:8b:69:66:a8:6b:37:20:31:48:81:ae:15:df:a3:1e:e2: f3:cb:58:f6:a4:2f:eb:65:76:63:2d:68:be:31:47:74:78:86: 96:ac:4c:85:f9:58:fb:48:ee:6d:e7:6c:a4:e9:04:b0:b6:ac: 5a:b7:49:0f:9d:ca:c2:ee:27:77:59:ae:c4:15:02:58:63:37: 19:46:73:f7:79:ab:fb:e5:0b:00:d3:c8:ae:e1:18:ae:b2:5b: 95:96:9c:ed:14:d1:4a:e5:5a:a1:70:4e:2e:6a:fb:92:52:5f: 4d:ae:87:30:ac:e7:73:78:0d:f0:e7:22:f1:1f:28:15:34:e9: e6:a1:b4:46:e1:18:3d:78:bc:ad:ac:07:ff:ed:27:d4:be:dc: 8f:7b:ba:7d:e3:37:ec:30:16:89:8f:31:bd:48:d2:54:14:04: 56:e0:ef:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8izhMy1yJHM/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk ZmQ4M2MxYmUtNGZlOS00ZGY1LWJjNjAtNjQzNmFlMWNlMjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+hqtobP0vsP80lfOxRaAo34/36XugwEXdrz KnJO9tyPvsmBJsYq/wvdL9XvoyORQg1r9ziBZdR75i0D44hdBEsCMuSGr5eZne+F 12JqYyhFQQcRG1sOjpeLoDdk3S1daiGkBW+FaCJtTf8P4+IblMxUpX6D6van7mTl Ojjl9K+ufDxFJOKEt6lESaKjax0yv+M8WNu9eV9yAVticbkv1LhaY525FOuJ4HjX w5dA94nf+XcE3yXFMgAS5N/XOjdAmEmEbJ1W+hUecaa4s3ubQczpA+yy99tfhujC MGVEvt2HvPm3AJ5CUpxPZ9Sf6Cw+EERYtBSnyZYqppsD1qwdJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrQ1TcOVByAEcaXgOSLtTZShUlxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDNmYzEyNGItOTVkYS0z ZWY4LWEyN2QtNDYwMzY1NjUxMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEloUI2DkkgER8trsWfussbecgrseOJK7MmLAUCpGtn4TRiMhnXNb7JD FuKi6Hlj+rCyUhSWuhMbAy90zkZOG6ygU6QCpaCK8Kt2lhgNWUb6q9MfKWdL4kTy 9hjyi2lmqGs3IDFIga4V36Me4vPLWPakL+tldmMtaL4xR3R4hpasTIX5WPtI7m3n bKTpBLC2rFq3SQ+dysLuJ3dZrsQVAlhjNxlGc/d5q/vlCwDTyK7hGK6yW5WWnO0U 0UrlWqFwTi5q+5JSX02uhzCs53N4DfDnIvEfKBU06eahtEbhGD14vK2sB//tJ9S+ 3I97un3jN+wwFomPMb1I0lQUBFbg70g= -----END CERTIFICATE-----Generated at Sun Oct 4 07:59:40 2026 by rpki-client