$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa File: 34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa (raw, json) Hash identifier: vfeJoTJO8/79+egRmZdSl6MB7R7uEp2stbmLrPaAt5I= Subject key identifier: 41:53:29:69:95:29:BF:59:01:7B:EE:D2:06:55:03:8C:65:F1:B8:4F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EC0A756DEE275A99D441F5700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:56:de:e2:75:a9:9d:44:1f:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=1d6d289a-2226-477f-b494-4b22c8e590d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ba:fb:5e:8c:d9:5c:f8:92:e0:ac:fd:38:59: df:e6:05:fa:3f:f9:35:31:82:2b:e8:b5:a8:8b:93: 42:9c:38:96:d3:2d:33:38:f3:8e:7c:b9:31:38:bc: 24:f1:54:0a:93:d9:62:c6:a4:ee:5e:bc:0c:97:b8: c8:8a:ea:4f:5e:5b:c6:ed:1c:84:67:68:d9:d5:e5: 22:3b:fd:15:7a:4f:04:8f:f2:21:c9:9c:7c:b0:20: 7a:76:9a:a5:f5:c0:45:93:84:b4:ed:f0:3d:50:bc: c4:35:61:33:1c:b6:ea:ec:e0:de:8f:d4:e5:dc:f8: e7:7c:87:91:a2:8c:ba:5f:2c:0f:28:c0:b9:13:63: 25:c0:76:29:60:9f:a0:88:d6:eb:f4:9b:54:1d:9f: 70:d6:3b:18:31:20:93:4a:ab:11:66:05:b3:4a:b3: 47:1a:39:8f:bd:4e:98:8f:96:69:6f:6f:5f:75:8b: 18:e4:72:7e:cd:88:3d:c2:37:3b:07:28:99:73:4d: 00:45:c4:5b:c7:65:1a:dc:f6:19:4d:f0:99:91:8c: 44:1e:e4:44:76:37:f8:4e:de:85:97:ca:24:a9:e3: 3f:d2:81:52:00:eb:10:88:c4:d2:dd:0b:e0:10:92: 59:ec:83:9d:68:c7:bf:a2:50:1b:13:a6:e1:1e:c7: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:53:29:69:95:29:BF:59:01:7B:EE:D2:06:55:03:8C:65:F1:B8:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3a:2a:39:13:d8:29:6f:e4:70:08:5d:12:01:af:85:31:28: 2c:c5:7c:67:73:e4:db:6d:8b:9f:ec:14:68:62:5b:b3:df:78: d4:4e:82:fc:32:49:47:be:84:89:bc:13:6a:90:36:37:0e:56: 5b:eb:92:44:77:b6:31:84:26:de:09:58:cb:5e:cf:2c:52:6a: 11:2b:0b:45:1b:ea:4c:66:e8:55:2d:2b:59:ad:22:25:3d:c6: f5:dd:84:29:a8:67:00:69:51:7b:5b:54:7e:64:c0:de:9b:56: 6f:c5:d4:a6:65:6a:cf:30:07:d6:aa:f2:41:94:c8:17:e9:1d: 5f:e2:1c:37:38:26:f3:97:4e:0d:c8:34:29:bb:d4:45:d9:ba: d5:2d:23:81:0a:3f:f6:91:28:68:35:c3:ba:e7:86:a8:d2:8f: b4:ee:65:cc:a1:02:9d:d1:9b:8c:c1:38:07:0d:99:d9:2e:61: 46:99:43:88:a5:ff:bb:ef:f0:87:f0:47:2d:7c:82:fc:78:62: d9:b5:a3:91:de:34:9a:2f:28:41:dd:6a:3a:c9:ec:10:1f:e2: 77:78:56:64:b3:39:43:38:b4:59:53:42:db:db:25:72:ae:21: 1a:5f:f4:48:fc:59:35:fe:7f:a9:d8:cd:1b:71:e0:b4:6f:db: 0c:b7:73:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ap1be4nWpnUQfVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk MWQ2ZDI4OWEtMjIyNi00NzdmLWI0OTQtNGIyMmM4ZTU5MGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLr7XozZXPiS4Kz9OFnf5gX6P/k1MYIr6LWo i5NCnDiW0y0zOPOOfLkxOLwk8VQKk9lixqTuXrwMl7jIiupPXlvG7RyEZ2jZ1eUi O/0Vek8Ej/IhyZx8sCB6dpql9cBFk4S07fA9ULzENWEzHLbq7ODej9Tl3PjnfIeR ooy6XywPKMC5E2MlwHYpYJ+giNbr9JtUHZ9w1jsYMSCTSqsRZgWzSrNHGjmPvU6Y j5Zpb29fdYsY5HJ+zYg9wjc7ByiZc00ARcRbx2Ua3PYZTfCZkYxEHuREdjf4Tt6F l8okqeM/0oFSAOsQiMTS3QvgEJJZ7IOdaMe/olAbE6bhHsfjqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFTKWmVKb9ZAXvu0gZVA4xl8bhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzRlYTY4YmMtYzZjZC0z MmUzLTgyMjItYTNlYTlkNjU4MzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU6KjkT2Clv5HAIXRIBr4UxKCzFfGdz5Ntti5/sFGhiW7PfeNROgvwy SUe+hIm8E2qQNjcOVlvrkkR3tjGEJt4JWMtezyxSahErC0Ub6kxm6FUtK1mtIiU9 xvXdhCmoZwBpUXtbVH5kwN6bVm/F1KZlas8wB9aq8kGUyBfpHV/iHDc4JvOXTg3I NCm71EXZutUtI4EKP/aRKGg1w7rnhqjSj7TuZcyhAp3Rm4zBOAcNmdkuYUaZQ4il /7vv8IfwRy18gvx4Ytm1o5HeNJovKEHdajrJ7BAf4nd4VmSzOUM4tFlTQtvbJXKu IRpf9Ej8WTX+f6nYzRtx4LRv2wy3c2U= -----END CERTIFICATE-----Generated at Sat Sep 5 06:22:24 2026 by rpki-client