$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c251184-8a15-3f77-818b-ebd19b551ad2.roa File: 2c251184-8a15-3f77-818b-ebd19b551ad2.roa (raw, json) Hash identifier: VL+sKq2j74uSrRbhfsFa2eA454aolaucKPnU6viwv3w= Subject key identifier: 3F:69:71:9F:D9:90:BB:72:9F:F0:92:B5:DB:28:7E:6E:01:D5:F4:B6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA79711F5BA14025D3DB7F70C Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c251184-8a15-3f77-818b-ebd19b551ad2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.153.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:11:f5:ba:14:02:5d:3d:b7:f7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3562dddf-f45d-4a5a-8617-3fe82558afd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7a:29:68:38:64:d9:53:ff:5e:14:8b:81:c0: 41:23:ee:56:00:56:22:2c:e7:cf:15:f8:fc:61:5c: 4d:64:15:08:e1:ab:4a:03:53:3c:ec:7c:02:6f:4d: b6:04:a3:70:eb:96:3b:07:75:0c:8c:0f:be:62:12: a2:95:0b:89:98:37:22:9f:47:ff:5c:7b:74:37:45: 6a:09:c3:6c:f7:47:7e:5f:1c:23:81:1e:1a:82:bd: f9:1b:f6:29:c5:d2:0f:96:e8:10:0a:e6:44:e8:27: 61:cb:ed:78:53:98:70:57:76:de:c8:28:c7:0b:6c: 90:fc:3e:a7:16:87:9f:1b:d6:94:be:0a:a3:a9:dd: 9d:78:a3:df:da:26:af:07:cd:72:19:99:0c:2b:24: 46:80:38:70:7c:21:60:2f:27:8d:9f:f7:0c:df:c1: f1:a5:4f:db:84:a2:9e:ce:7e:ef:67:e8:d8:d0:c1: 96:6c:68:b3:c9:0b:06:0d:1c:01:d3:16:d5:6d:51: de:e5:2c:52:ad:62:e7:84:c5:7a:a9:b6:42:b1:4f: 47:74:e1:f0:ee:b7:bc:2c:c9:5f:51:76:79:0f:17: 83:83:0d:80:e1:b8:ce:57:98:c1:6f:e3:13:ba:b3: c2:56:61:f1:51:70:72:40:25:37:d6:f5:a2:ae:ed: 48:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:69:71:9F:D9:90:BB:72:9F:F0:92:B5:DB:28:7E:6E:01:D5:F4:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c251184-8a15-3f77-818b-ebd19b551ad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:27:78:8f:24:de:36:9e:3d:21:fc:2e:ce:cb:79:23:e1:28: 75:25:94:54:87:10:ed:16:ba:85:00:36:bb:fc:7a:fb:23:f5: 11:39:7b:6b:2c:aa:43:e6:20:28:e7:12:be:b9:b4:6d:15:e0: 33:38:74:72:e0:c3:d7:3d:7d:9d:36:e0:ba:95:ca:2a:49:f5: 64:36:9e:b8:79:20:fe:9c:55:93:85:ba:b7:cf:11:2c:51:4e: a6:ee:80:c6:52:6b:64:60:25:71:c0:bf:7d:53:a7:dd:f8:0a: aa:04:10:73:d9:8d:0c:4c:65:60:e5:30:c6:76:1c:c5:c7:f2: 79:69:c7:fb:cf:d3:a6:4c:90:25:97:61:49:04:eb:2b:0d:95: 11:8f:2b:ce:2c:78:f8:41:ce:da:fb:85:89:da:bf:23:fa:57: 9d:b1:c9:b3:7d:cd:f0:2f:ea:51:10:d1:87:3c:45:ca:93:75: 63:fc:ad:7c:5f:a6:6d:97:62:2a:6b:9b:65:f4:4d:4c:b7:50: 1c:b2:0d:8e:d5:70:2b:58:89:18:2b:9a:db:aa:cc:a6:e9:23: 5e:c3:e8:e1:4e:87:b3:26:fc:67:0a:b3:86:66:63:10:03:55: 61:c5:4c:af:fa:8e:d0:25:5c:69:70:82:ff:ce:a9:43:c9:fc: 6f:59:8a:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlxH1uhQCXT239wwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzU2MmRkZGYtZjQ1ZC00YTVhLTg2MTctM2ZlODI1NThhZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnopaDhk2VP/XhSLgcBBI+5WAFYiLOfPFfj8 YVxNZBUI4atKA1M87HwCb022BKNw65Y7B3UMjA++YhKilQuJmDcin0f/XHt0N0Vq CcNs90d+XxwjgR4agr35G/YpxdIPlugQCuZE6Cdhy+14U5hwV3beyCjHC2yQ/D6n FoefG9aUvgqjqd2deKPf2iavB81yGZkMKyRGgDhwfCFgLyeNn/cM38HxpU/bhKKe zn7vZ+jY0MGWbGizyQsGDRwB0xbVbVHe5SxSrWLnhMV6qbZCsU9HdOHw7re8LMlf UXZ5DxeDgw2A4bjOV5jBb+MTurPCVmHxUXByQCU31vWiru1IlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9pcZ/ZkLtyn/CStdsofm4B1fS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmMyNTExODQtOGExNS0z Zjc3LTgxOGItZWJkMTliNTUxYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8neI8k3jaePSH8Ls7LeSPhKHUllFSHEO0WuoUANrv8evsj9RE5e2ss qkPmICjnEr65tG0V4DM4dHLgw9c9fZ024LqVyipJ9WQ2nrh5IP6cVZOFurfPESxR TqbugMZSa2RgJXHAv31Tp934CqoEEHPZjQxMZWDlMMZ2HMXH8nlpx/vP06ZMkCWX YUkE6ysNlRGPK84sePhBztr7hYnavyP6V52xybN9zfAv6lEQ0Yc8RcqTdWP8rXxf pm2XYiprm2X0TUy3UByyDY7VcCtYiRgrmtuqzKbpI17D6OFOh7Mm/GcKs4ZmYxAD VWHFTK/6jtAlXGlwgv/OqUPJ/G9ZiuA= -----END CERTIFICATE-----Generated at Sat Sep 5 08:13:17 2026 by rpki-client