$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eec01589-1699-3212-9825-23f8f772ea6e.roa File: eec01589-1699-3212-9825-23f8f772ea6e.roa (raw, json) Hash identifier: i+oKSBtImWIithSy8sJBkoaOTxcd0ZkySRBnYkb7ncg= Subject key identifier: 63:4A:C5:B3:65:ED:18:01:CB:07:54:E7:C2:A1:CF:9A:2F:DC:5E:E8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F19FCF83DBEE2FC08F0BAF460 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eec01589-1699-3212-9825-23f8f772ea6e.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f8:3d:be:e2:fc:08:f0:ba:f4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=59b2793f-1a41-490b-af4b-5439cabc39b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b0:67:e5:cf:11:72:fc:df:4e:87:96:69:34: 44:14:58:07:77:03:fa:f0:fb:c0:71:38:75:13:6d: b8:6c:a2:18:ec:d2:00:b4:67:d0:75:a5:ce:b4:24: 3e:7b:33:f3:6a:89:02:80:5e:48:be:4d:22:9c:eb: 7b:9d:b0:39:1f:cc:45:ec:02:66:0d:ef:f7:31:03: 89:1a:9e:8b:56:6d:4e:6d:97:b9:1c:19:23:d5:ce: fe:d4:28:c9:50:b2:bb:3d:11:da:4a:36:e7:07:51: 7e:94:85:21:f6:4f:b4:ed:1f:ad:51:56:58:1a:9b: 83:93:9a:95:8e:80:64:9f:06:a8:48:14:36:78:95: 10:ac:36:52:27:d7:0b:f6:98:87:cb:05:11:ea:65: 11:60:cf:37:b2:33:19:6c:68:29:6c:bc:7d:f0:02: 32:43:c7:83:70:c4:a7:5c:7b:85:52:4b:e2:11:1f: 58:a7:26:a1:86:36:a5:cc:3c:0a:a7:22:0b:73:78: 29:20:c7:e1:36:9b:b3:32:29:e5:fb:f0:a7:02:d0: 75:7f:00:65:04:e9:ae:cc:a0:d0:5f:b2:34:67:5b: d7:4d:3e:1d:3b:45:4e:ec:25:a4:59:d8:91:d9:b4: 12:ca:f0:d3:1f:06:58:10:78:da:7a:3e:39:dc:75: d5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4A:C5:B3:65:ED:18:01:CB:07:54:E7:C2:A1:CF:9A:2F:DC:5E:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eec01589-1699-3212-9825-23f8f772ea6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:81:d4:ed:3a:59:5d:5d:bf:77:3d:5f:72:37:fd:32:72:3b: c1:db:92:c4:5b:ce:10:01:25:e7:5c:d3:7b:2a:b3:a9:1a:48: be:5e:7f:d3:c6:fd:a0:0f:2e:be:f7:ab:8b:6f:a0:ce:fa:97: 72:28:7d:e7:9f:f0:45:99:cb:eb:03:27:55:c9:3d:03:ad:46: 8e:69:d7:22:c9:e5:3a:33:bf:2a:0c:fd:55:95:14:fd:c9:23: 3b:11:c5:60:9c:7d:44:7d:c9:f7:17:f5:70:b5:fe:47:b6:b0: 44:68:7c:d8:e9:79:2c:68:9c:df:e6:5a:33:99:9b:3a:47:f9: d4:f6:75:f6:ac:4f:a8:f7:1b:f9:18:09:ed:cf:7f:dc:4d:b8: 99:07:9d:72:93:86:66:8d:67:29:0c:db:81:fb:16:a2:d0:41: ff:db:1e:92:98:a8:d0:ad:5a:aa:6b:dc:61:db:46:20:ad:d6: 7d:76:98:ba:fa:0b:f8:57:d0:cf:79:5a:5b:40:ad:05:48:16: aa:2e:6d:5e:b8:30:28:18:8e:2b:eb:a0:33:d4:40:33:d9:c1: 0d:bf:ce:40:7e:31:c6:08:21:87:51:28:4a:6e:31:dc:5c:e2: 59:ce:cf:02:19:f8:f9:d5:60:e5:30:73:65:a3:04:c6:b1:66: cd:7e:98:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/Pg9vuL8CPC69GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk NTliMjc5M2YtMWE0MS00OTBiLWFmNGItNTQzOWNhYmMzOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLBn5c8RcvzfToeWaTREFFgHdwP68PvAcTh1 E224bKIY7NIAtGfQdaXOtCQ+ezPzaokCgF5Ivk0inOt7nbA5H8xF7AJmDe/3MQOJ Gp6LVm1ObZe5HBkj1c7+1CjJULK7PRHaSjbnB1F+lIUh9k+07R+tUVZYGpuDk5qV joBknwaoSBQ2eJUQrDZSJ9cL9piHywUR6mURYM83sjMZbGgpbLx98AIyQ8eDcMSn XHuFUkviER9YpyahhjalzDwKpyILc3gpIMfhNpuzMinl+/CnAtB1fwBlBOmuzKDQ X7I0Z1vXTT4dO0VO7CWkWdiR2bQSyvDTHwZYEHjaej453HXVvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNKxbNl7RgBywdU58Khz5ov3F7oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWVjMDE1ODktMTY5OS0z MjEyLTk4MjUtMjNmOGY3NzJlYTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGB1O06WV1dv3c9X3I3/TJyO8HbksRbzhABJedc03sqs6kaSL5ef9PG /aAPLr73q4tvoM76l3Iofeef8EWZy+sDJ1XJPQOtRo5p1yLJ5TozvyoM/VWVFP3J IzsRxWCcfUR9yfcX9XC1/ke2sERofNjpeSxonN/mWjOZmzpH+dT2dfasT6j3G/kY Ce3Pf9xNuJkHnXKThmaNZykM24H7FqLQQf/bHpKYqNCtWqpr3GHbRiCt1n12mLr6 C/hX0M95WltArQVIFqoubV64MCgYjivroDPUQDPZwQ2/zkB+McYIIYdRKEpuMdxc 4lnOzwIZ+PnVYOUwc2WjBMaxZs1+mCU= -----END CERTIFICATE-----Generated at Sun Oct 11 09:03:17 2026 by rpki-client