$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e634bdba-bab1-34e5-b12a-ad3686ca282b.roa File: e634bdba-bab1-34e5-b12a-ad3686ca282b.roa (raw, json) Hash identifier: EqXjE7COYzQR75lADYgYxTaMo8QEIhmjMXAAJmmD0Ms= Subject key identifier: 6A:DB:1F:68:72:62:3A:C8:67:FD:EA:00:96:F7:35:8B:95:84:E2:C1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F1E2CFC36456E528E000D3AC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e634bdba-bab1-34e5-b12a-ad3686ca282b.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 20.153.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:fc:36:45:6e:52:8e:00:0d:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=eb664089-5259-4919-be8a-8bc0ab6f4adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:90:02:2f:be:e9:4c:95:4f:d1:4f:9c:ae:03: ab:73:25:16:28:f3:4e:02:8d:20:41:10:48:20:93: 8d:c1:d2:f3:92:56:ac:59:f0:3f:47:10:f2:8e:1d: bb:96:92:33:bb:a5:12:21:c9:30:ff:77:f5:40:82: 72:db:12:f9:fa:ea:fe:1b:db:ea:b3:af:fd:8f:ef: 42:63:bd:cc:42:5a:92:67:06:60:ad:3a:3b:94:6a: d8:c6:ab:61:86:ba:df:41:7a:79:56:8a:2c:36:63: ab:13:33:11:29:5e:f7:d1:98:1d:42:57:00:f3:5f: 64:8d:5d:0a:d7:dd:a2:06:36:88:ea:4f:78:69:d7: 09:bb:e9:75:d6:fe:f1:9a:ae:ff:5a:b0:8e:11:86: e6:73:05:23:3d:05:4d:2a:6a:16:01:1c:fa:9d:b5: 8d:58:af:58:9e:1c:01:76:73:70:da:65:c6:b9:dd: 78:ac:4b:8c:b8:9c:fb:c8:95:5a:50:8b:5d:70:bf: 65:50:de:5a:05:a9:8e:7f:24:56:5c:83:ce:b9:93: d0:ea:7f:1d:4d:8e:57:04:a4:a8:b9:84:8d:b4:4f: 0c:37:94:1a:bd:2e:19:33:f6:ad:d2:d3:0a:eb:cb: 8f:85:d9:bb:7e:44:88:2f:5d:69:b7:dc:cf:45:8f: 04:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DB:1F:68:72:62:3A:C8:67:FD:EA:00:96:F7:35:8B:95:84:E2:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e634bdba-bab1-34e5-b12a-ad3686ca282b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a4:6b:01:9e:5c:50:cb:9d:4f:69:ba:75:ca:9f:86:19:bf: af:37:82:1c:0f:73:ad:c8:c8:ec:5d:6a:66:9e:7c:51:b4:4f: ee:4c:ea:7f:1a:0d:74:ac:92:28:9e:8f:41:b0:8e:3c:57:49: f0:68:5f:b1:b0:07:5c:6e:32:70:66:49:79:d6:2e:de:19:48: fc:88:18:f2:73:8d:dd:cc:98:6d:7f:e6:99:53:53:7f:50:a4: 78:31:bd:e5:b7:fc:ba:4d:3a:43:8f:40:6c:bf:22:6d:39:ae: e6:9e:a6:fb:b4:d1:dd:61:1a:70:db:20:9a:eb:cb:37:8b:56: f5:c1:50:e1:d8:61:0c:18:30:c7:50:60:bd:86:9a:da:c0:25: 15:9d:8b:65:1d:58:4e:3d:12:5e:3d:e9:a9:28:f7:f5:52:d9: b7:84:53:a0:83:1b:11:53:de:0d:a3:dc:25:60:a9:fa:c0:76: bd:91:b5:45:f1:52:e5:05:45:27:23:59:4e:91:98:25:0e:24: a2:85:8c:f2:e5:76:65:8c:ea:28:9a:a2:8b:3c:cd:6b:0f:f1: 20:68:6b:d9:e7:ff:1d:92:2f:f7:ee:52:cf:f9:16:59:b1:87: cb:d5:3e:1f:cf:f3:ca:cf:e6:52:be:a5:ba:5e:58:b6:05:18: 0f:46:87:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPw2RW5SjgANOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk ZWI2NjQwODktNTI1OS00OTE5LWJlOGEtOGJjMGFiNmY0YWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JACL77pTJVP0U+crgOrcyUWKPNOAo0gQRBI IJONwdLzklasWfA/RxDyjh27lpIzu6USIckw/3f1QIJy2xL5+ur+G9vqs6/9j+9C Y73MQlqSZwZgrTo7lGrYxqthhrrfQXp5VoosNmOrEzMRKV730ZgdQlcA819kjV0K 192iBjaI6k94adcJu+l11v7xmq7/WrCOEYbmcwUjPQVNKmoWARz6nbWNWK9YnhwB dnNw2mXGud14rEuMuJz7yJVaUItdcL9lUN5aBamOfyRWXIPOuZPQ6n8dTY5XBKSo uYSNtE8MN5QavS4ZM/at0tMK68uPhdm7fkSIL11pt9zPRY8ECwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrbH2hyYjrIZ/3qAJb3NYuVhOLBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTYzNGJkYmEtYmFiMS0z NGU1LWIxMmEtYWQzNjg2Y2EyODJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+kawGeXFDLnU9punXKn4YZv683ghwPc63IyOxdamaefFG0T+5M6n8a DXSskiiej0GwjjxXSfBoX7GwB1xuMnBmSXnWLt4ZSPyIGPJzjd3MmG1/5plTU39Q pHgxveW3/LpNOkOPQGy/Im05ruaepvu00d1hGnDbIJrryzeLVvXBUOHYYQwYMMdQ YL2GmtrAJRWdi2UdWE49El496ako9/VS2beEU6CDGxFT3g2j3CVgqfrAdr2RtUXx UuUFRScjWU6RmCUOJKKFjPLldmWM6iiaoos8zWsP8SBoa9nn/x2SL/fuUs/5Flmx h8vVPh/P88rP5lK+pbpeWLYFGA9Gh48= -----END CERTIFICATE-----Generated at Tue Sep 29 05:09:34 2026 by rpki-client