$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5b719d4-4447-35da-a6f8-e4663027e94d.roa File: f5b719d4-4447-35da-a6f8-e4663027e94d.roa (raw, json) Hash identifier: Q0On3++PPoJmgRKUa+vD7SgvRkuH2P2bNOMhN4emJlc= Subject key identifier: 80:41:C9:49:0F:09:ED:8D:B0:E1:E7:12:A9:A8:63:E5:D0:C3:39:1E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F497F1B06F77DA0D7C19BC280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5b719d4-4447-35da-a6f8-e4663027e94d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:1b:06:f7:7d:a0:d7:c1:9b:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0347ca21-5ba8-414e-b8d9-3fa0dcef414a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:22:89:1d:34:39:45:1d:f5:d4:50:b1:37: 3a:c0:63:8b:f6:46:76:27:cf:d2:d1:84:e8:3b:df: 2b:d1:cd:f3:d2:11:0a:da:d1:9b:cc:7e:39:f8:83: 90:7b:59:05:d8:5b:63:0e:4b:95:b5:d1:63:90:f5: 2a:a3:c1:02:99:c9:63:c1:38:48:8d:d9:a5:96:59: d6:77:56:da:74:54:0e:77:54:fb:13:e0:cf:3b:03: 3c:12:51:a4:a3:e5:b5:9a:48:18:be:2a:5e:d4:91: 6b:56:54:17:64:a7:e9:06:b3:c2:25:1d:cb:1e:cd: 98:db:e3:09:39:75:07:90:d4:7f:fd:24:71:df:74: 17:67:15:bd:73:c4:12:fe:8f:af:b5:fe:1d:d9:20: 7d:16:e4:4b:f5:a5:17:23:ab:2b:97:83:b9:fd:b8: 07:77:33:56:c7:42:99:4d:3e:80:f5:2b:d6:79:43: e6:81:7e:33:37:b8:c8:b1:51:42:41:b7:f4:fa:38: 73:03:2d:d8:f4:35:f5:fc:6f:2a:b6:9a:ee:7e:43: 46:1c:06:40:dd:8a:ac:b3:09:1e:45:63:65:1b:90: c3:58:20:64:d6:ab:33:52:22:47:3c:ee:6e:9f:48: 93:1a:43:00:7f:14:06:18:e1:0b:1b:49:69:09:78: 8b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:41:C9:49:0F:09:ED:8D:B0:E1:E7:12:A9:A8:63:E5:D0:C3:39:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5b719d4-4447-35da-a6f8-e4663027e94d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b4:5a:36:84:72:9b:07:10:0f:7d:43:f7:d1:27:e6:1f:c7: 34:cb:7b:c9:b1:0c:09:53:5d:41:ce:f2:5f:ec:3b:17:54:ea: 9c:ac:3a:53:47:65:c0:d3:23:69:94:48:e6:83:a4:dc:a5:00: 77:af:5f:80:28:b4:9e:a3:d6:23:a4:2c:84:a0:e9:5b:3a:1c: 3a:5d:1c:fc:34:d8:90:46:a9:db:cf:2f:54:ae:85:ee:b3:fd: bb:2e:cb:2c:c7:b3:90:ff:fd:e6:ef:03:4e:54:d1:90:8b:0e: 39:a2:73:c0:b4:b0:5d:8b:ec:02:d7:b4:7d:d9:f7:52:06:30: 88:9c:e1:33:4f:b1:f0:7a:83:43:78:c6:2d:7f:a9:74:df:f7: 5b:f6:f0:c3:47:44:39:fd:06:c6:a0:71:ae:63:4a:a0:0d:2f: 90:f6:ab:04:ae:0b:4c:f0:71:2a:12:28:db:f3:01:f7:ea:f9: 4f:d0:07:be:48:22:8f:96:a6:20:d5:50:7e:99:d2:9b:ec:6a: 80:38:e2:42:b1:d6:80:c2:c5:e7:e9:39:b3:4f:e9:8b:a0:79: 1f:02:18:68:46:27:a7:bf:86:75:74:f6:07:e1:8a:a8:14:c5: 1c:d8:43:87:01:30:42:ae:84:8d:86:8d:d1:cc:31:6c:f2:d1: 43:e8:ac:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfxsG932g18GbwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDM0N2NhMjEtNWJhOC00MTRlLWI4ZDktM2ZhMGRjZWY0MTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx0iiR00OUUd9dRQsTc6wGOL9kZ2J8/S0YTo O98r0c3z0hEK2tGbzH45+IOQe1kF2FtjDkuVtdFjkPUqo8ECmcljwThIjdmlllnW d1badFQOd1T7E+DPOwM8ElGko+W1mkgYvipe1JFrVlQXZKfpBrPCJR3LHs2Y2+MJ OXUHkNR//SRx33QXZxW9c8QS/o+vtf4d2SB9FuRL9aUXI6srl4O5/bgHdzNWx0KZ TT6A9SvWeUPmgX4zN7jIsVFCQbf0+jhzAy3Y9DX1/G8qtprufkNGHAZA3Yqsswke RWNlG5DDWCBk1qszUiJHPO5un0iTGkMAfxQGGOELG0lpCXiLmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBByUkPCe2NsOHnEqmoY+XQwzkeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjViNzE5ZDQtNDQ0Ny0z NWRhLWE2ZjgtZTQ2NjMwMjdlOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS0WjaEcpsHEA99Q/fRJ+YfxzTLe8mxDAlTXUHO8l/sOxdU6pysOlNH ZcDTI2mUSOaDpNylAHevX4AotJ6j1iOkLISg6Vs6HDpdHPw02JBGqdvPL1Suhe6z /bsuyyzHs5D//ebvA05U0ZCLDjmic8C0sF2L7ALXtH3Z91IGMIic4TNPsfB6g0N4 xi1/qXTf91v28MNHRDn9Bsagca5jSqANL5D2qwSuC0zwcSoSKNvzAffq+U/QB75I Io+WpiDVUH6Z0pvsaoA44kKx1oDCxefpObNP6YugeR8CGGhGJ6e/hnV09gfhiqgU xRzYQ4cBMEKuhI2GjdHMMWzy0UPorHE= -----END CERTIFICATE-----Generated at Mon Sep 28 18:03:06 2026 by rpki-client