$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e19c29c0-9b90-32c5-8f64-85fb3a59f907.roa File: e19c29c0-9b90-32c5-8f64-85fb3a59f907.roa (raw, json) Hash identifier: vcb/uss7qLLe3yfPQcRD9Sg8r/b8VbIm4s4L7BTMIT8= Subject key identifier: 9F:5A:03:6C:8A:0C:8E:3F:84:3D:0E:86:03:75:25:2A:F3:9A:32:1C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F19FCF8B501B98AA2A8252480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e19c29c0-9b90-32c5-8f64-85fb3a59f907.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f8:b5:01:b9:8a:a2:a8:25:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=0fbeb83f-672f-46bf-8a89-f1f56fae5f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:11:ac:b6:b6:fe:0b:44:c2:54:49:81:ab:00: cc:ce:dc:99:10:dc:e9:04:73:c6:63:9f:bb:98:07: ae:bd:d9:e2:49:88:e6:61:46:e6:dc:d5:15:fb:56: 80:68:af:9a:f4:16:51:9f:ef:57:fc:1a:5c:0f:35: b0:de:00:f1:a7:74:7a:51:c5:c1:8c:08:7b:6e:f8: ba:be:1b:27:f8:2a:a2:dd:f1:d3:ef:27:bc:11:3a: 8f:b5:57:80:d2:b1:c7:ab:37:73:13:80:97:45:8e: 21:90:55:20:df:76:40:ea:f9:2c:7c:e3:59:35:34: 0d:9d:28:f1:f7:7e:9b:85:e0:ba:bf:48:b9:cb:6c: 0a:08:f7:ef:d3:a7:53:91:00:34:3a:dc:ca:52:4a: c2:25:dd:44:13:b4:0e:33:2a:04:68:5e:cf:89:cb: be:39:b4:7b:80:5e:1f:4f:de:41:0d:da:83:e6:1f: 4b:c6:83:e1:83:3d:5f:3f:71:be:0b:eb:0a:0a:85: 43:11:e0:01:a5:20:b3:58:3d:2d:a7:7c:37:7e:65: 86:2b:fd:20:6b:0e:a2:75:1c:0c:27:73:38:aa:14: f6:88:9e:13:bb:d4:1b:34:88:98:09:40:5d:b7:b6: 98:46:ea:a8:73:12:ce:2a:d7:3c:d1:60:25:3f:ad: 45:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5A:03:6C:8A:0C:8E:3F:84:3D:0E:86:03:75:25:2A:F3:9A:32:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e19c29c0-9b90-32c5-8f64-85fb3a59f907.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:3a:b4:ff:8a:1e:4f:55:a0:d7:ea:85:0d:89:fa:b9:52:1b: bb:25:3d:5c:f3:52:de:3d:6f:51:55:2a:d3:13:92:5c:fd:4f: af:14:5b:cb:05:01:8a:35:85:9d:66:53:e4:ad:4e:8d:90:a7: 2b:21:38:fa:33:61:0b:5f:69:ab:10:82:21:e4:2d:76:88:02: 48:ce:4d:2f:c1:55:db:d4:80:fc:b2:86:f9:d5:8f:80:ad:36: f1:e2:e3:71:f4:b5:49:17:2d:67:be:23:c4:91:5c:35:e2:ef: ad:94:a3:1b:a9:d2:57:b1:b9:e0:34:6f:5e:d3:8c:63:f0:0a: 5b:ec:e1:a4:5c:ea:68:2e:c0:8c:61:dc:74:7d:25:64:b2:c9: d6:a0:0e:b5:b3:ce:8c:20:38:ce:7b:a7:6b:94:a6:a4:e7:be: 53:1b:0a:66:f4:c8:a2:2b:29:48:6d:69:4e:8e:5f:8c:87:49: 61:66:85:71:5d:e0:39:de:42:50:5b:37:b5:87:21:4f:e4:05: 72:eb:d6:a3:e4:7d:2c:72:46:98:5a:48:51:fc:3e:74:a0:fb: 17:d9:3b:37:b2:f5:1b:00:f8:a0:b0:7f:ed:46:d6:2b:2c:a8: 8a:59:03:1e:81:4c:b5:14:80:5a:69:5c:04:f0:32:c4:1b:7c: ff:30:32:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/Pi1AbmKoqglJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk MGZiZWI4M2YtNjcyZi00NmJmLThhODktZjFmNTZmYWU1Zjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRGstrb+C0TCVEmBqwDMztyZENzpBHPGY5+7 mAeuvdniSYjmYUbm3NUV+1aAaK+a9BZRn+9X/BpcDzWw3gDxp3R6UcXBjAh7bvi6 vhsn+Cqi3fHT7ye8ETqPtVeA0rHHqzdzE4CXRY4hkFUg33ZA6vksfONZNTQNnSjx 936bheC6v0i5y2wKCPfv06dTkQA0OtzKUkrCJd1EE7QOMyoEaF7Picu+ObR7gF4f T95BDdqD5h9LxoPhgz1fP3G+C+sKCoVDEeABpSCzWD0tp3w3fmWGK/0gaw6idRwM J3M4qhT2iJ4Tu9QbNIiYCUBdt7aYRuqocxLOKtc80WAlP61FtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9aA2yKDI4/hD0OhgN1JSrzmjIcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTE5YzI5YzAtOWI5MC0z MmM1LThmNjQtODVmYjNhNTlmOTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQ6tP+KHk9VoNfqhQ2J+rlSG7slPVzzUt49b1FVKtMTklz9T68UW8sF AYo1hZ1mU+StTo2QpyshOPozYQtfaasQgiHkLXaIAkjOTS/BVdvUgPyyhvnVj4Ct NvHi43H0tUkXLWe+I8SRXDXi762Uoxup0lexueA0b17TjGPwClvs4aRc6mguwIxh 3HR9JWSyydagDrWzzowgOM57p2uUpqTnvlMbCmb0yKIrKUhtaU6OX4yHSWFmhXFd 4DneQlBbN7WHIU/kBXLr1qPkfSxyRphaSFH8PnSg+xfZOzey9RsA+KCwf+1G1iss qIpZAx6BTLUUgFppXATwMsQbfP8wMgU= -----END CERTIFICATE-----Generated at Mon Oct 5 01:59:15 2026 by rpki-client