$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/203eb203-ebc2-319a-865d-7e4936eb7b1b.roa File: 203eb203-ebc2-319a-865d-7e4936eb7b1b.roa (raw, json) Hash identifier: DpZYIlNhaUSfLOzmneDrf8quobQzOIU/PAZDKyoqFjE= Subject key identifier: E5:9E:B5:3F:21:82:95:13:30:80:15:07:4A:13:99:86:2C:8F:DB:E3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EED52429A0712822C8E7EDCC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/203eb203-ebc2-319a-865d-7e4936eb7b1b.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:42:9a:07:12:82:2c:8e:7e:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=afac6a7c-15c7-43ce-be8d-16511d602747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:66:d6:c8:a2:c9:8c:53:86:82:9f:56:05:75: 1d:ae:31:63:05:62:d7:06:eb:f3:2e:90:f8:ce:64: 91:c9:fa:4f:01:a9:53:fe:df:f0:fb:05:13:e4:6a: 0e:bf:05:36:49:b8:5c:fd:29:09:e5:c2:aa:ed:27: dc:df:0f:b8:d2:5b:16:aa:0d:5b:c7:76:92:2d:5d: e0:c3:89:9e:73:ce:6c:18:49:bd:24:8d:31:94:bf: 46:ab:bb:63:55:6a:dd:2f:b3:b1:37:51:e1:94:23: b5:e5:87:97:57:8d:23:07:7c:8b:f1:c1:b7:96:94: a3:fb:68:10:a5:02:a2:5e:e0:ec:00:e4:f5:71:95: b0:4f:94:40:1b:a9:eb:78:84:dd:e4:72:76:c7:f9: c3:3a:6f:b4:76:87:2f:77:79:88:da:ac:ca:57:86: db:c0:2b:97:42:2b:05:e7:c6:33:10:c3:74:76:74: 80:a0:b8:20:12:09:9e:0e:2f:d5:bb:b0:72:af:3b: ff:33:a2:0e:73:e4:db:fe:98:d3:51:d8:34:2c:b3: 11:53:c9:a8:60:5d:36:3c:35:85:86:30:18:c9:bd: de:36:3a:41:8b:88:fa:50:2d:28:02:d8:80:ba:2a: 98:09:de:e5:ee:7e:d6:d1:ee:8d:91:ca:c9:96:c6: fa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9E:B5:3F:21:82:95:13:30:80:15:07:4A:13:99:86:2C:8F:DB:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/203eb203-ebc2-319a-865d-7e4936eb7b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:dd:67:1c:03:c4:ef:39:66:ee:5f:8a:2f:b7:e7:9d:d8:e3: ef:35:8f:e3:b6:b4:fb:7c:c1:db:cc:43:14:85:67:9c:e8:41: ef:e1:dd:ce:10:bf:f9:61:36:e6:2a:8c:b2:4f:cd:0f:d2:40: 56:a8:26:cd:cc:7b:53:1e:b8:09:84:01:24:01:b1:b3:45:c4: 61:bd:59:39:c1:72:6b:f4:b7:09:e9:d0:69:32:b7:42:3e:d3: 9b:c6:9a:bf:00:da:1b:43:20:ce:b8:92:4d:29:3a:e5:4b:fa: a8:69:cf:89:5e:2d:64:ff:ac:96:3c:cb:0a:cc:29:6e:6f:4e: 69:93:48:2b:dc:3c:3e:9b:ab:9b:3d:09:86:36:a9:b1:38:71: 43:fc:1c:5d:a0:5e:03:32:f8:38:f5:61:cc:4c:84:19:46:9a: 97:b6:4f:7b:d1:bb:d5:07:6e:a3:85:6a:cc:97:c4:c4:1b:ca: c6:86:8f:d6:f8:5c:a2:0a:5d:b4:0d:31:cc:ca:5b:5b:03:8b: 8d:ec:a1:67:15:01:f5:74:5f:9f:23:6b:48:53:0f:0a:fb:7e: 56:b4:71:24:25:5a:7b:26:38:6e:0e:3f:bd:cb:9e:1b:44:ba: 5f:ea:0a:0a:56:1d:9e:03:db:09:7c:9d:45:44:b5:14:ee:72: 9b:ae:b7:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUkKaBxKCLI5+3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk YWZhYzZhN2MtMTVjNy00M2NlLWJlOGQtMTY1MTFkNjAyNzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWbWyKLJjFOGgp9WBXUdrjFjBWLXBuvzLpD4 zmSRyfpPAalT/t/w+wUT5GoOvwU2Sbhc/SkJ5cKq7Sfc3w+40lsWqg1bx3aSLV3g w4mec85sGEm9JI0xlL9Gq7tjVWrdL7OxN1HhlCO15YeXV40jB3yL8cG3lpSj+2gQ pQKiXuDsAOT1cZWwT5RAG6nreITd5HJ2x/nDOm+0docvd3mI2qzKV4bbwCuXQisF 58YzEMN0dnSAoLggEgmeDi/Vu7Byrzv/M6IOc+Tb/pjTUdg0LLMRU8moYF02PDWF hjAYyb3eNjpBi4j6UC0oAtiAuiqYCd7l7n7W0e6NkcrJlsb6kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWetT8hgpUTMIAVB0oTmYYsj9vjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjAzZWIyMDMtZWJjMi0z MTlhLTg2NWQtN2U0OTM2ZWI3YjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvdZxwDxO85Zu5fii+3553Y4+81j+O2tPt8wdvMQxSFZ5zoQe/h3c4Q v/lhNuYqjLJPzQ/SQFaoJs3Me1MeuAmEASQBsbNFxGG9WTnBcmv0twnp0Gkyt0I+ 05vGmr8A2htDIM64kk0pOuVL+qhpz4leLWT/rJY8ywrMKW5vTmmTSCvcPD6bq5s9 CYY2qbE4cUP8HF2gXgMy+Dj1YcxMhBlGmpe2T3vRu9UHbqOFasyXxMQbysaGj9b4 XKIKXbQNMczKW1sDi43soWcVAfV0X58ja0hTDwr7fla0cSQlWnsmOG4OP73LnhtE ul/qCgpWHZ4D2wl8nUVEtRTucpuutyQ= -----END CERTIFICATE-----Generated at Sat Sep 5 05:24:10 2026 by rpki-client