$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3cbdb072-dea6-33f0-8624-e0763b4f0119.roa File: 3cbdb072-dea6-33f0-8624-e0763b4f0119.roa (raw, json) Hash identifier: 7j8X9otf/bch7vjKipwr5Ew85z/oCqEdsn+XCHX3fmA= Subject key identifier: A6:72:7D:20:83:7A:9F:0F:50:F2:C5:8D:F8:5A:41:66:4C:10:FF:CE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA796FFEB0AC74ED33A292140 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3cbdb072-dea6-33f0-8624-e0763b4f0119.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.153.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:ff:eb:0a:c7:4e:d3:3a:29:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f50e0acb-4d64-4808-b34e-2eba2a9e26ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:09:58:c6:a5:88:0a:37:b1:d0:4f:ca:21:e9: a1:93:f8:ae:59:02:9d:52:17:43:7c:25:73:dc:44: 79:1f:a2:64:16:ce:a2:34:14:14:4e:b5:c3:de:e5: 04:c4:95:75:af:a5:31:0a:ee:eb:9b:01:7a:e6:ab: db:17:fc:c1:33:19:54:ab:fe:5f:8c:15:8b:21:4c: f7:2a:35:66:84:e1:1b:8c:50:3b:b6:96:27:19:97: a8:4c:f4:f5:dc:a1:31:be:c4:02:7b:7f:6a:84:dc: c5:32:45:ad:fb:5d:2a:0c:06:9d:99:46:e8:66:a1: a3:a0:ee:20:e9:14:2b:b5:94:5f:a4:30:d1:5a:15: 5c:66:15:a9:19:dd:4d:07:14:96:99:16:9e:66:6f: 82:a9:57:de:26:5e:d6:c3:01:9f:c2:bb:7d:73:c7: 68:0d:64:ea:74:59:6e:fa:ba:fb:b9:04:4b:34:d5: d9:2c:70:a6:e1:d5:e6:67:30:4c:c2:91:4e:53:7a: d8:6c:e7:58:9c:07:0c:c3:87:ab:3a:76:3a:13:66: 3c:eb:6e:3b:97:b0:e3:40:bf:f4:88:14:dd:84:50: e5:e9:98:d1:ec:60:4c:01:ae:33:ff:43:47:ae:67: ab:b6:94:02:9c:d4:6e:21:8e:ed:0d:f0:72:91:f8: 51:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:72:7D:20:83:7A:9F:0F:50:F2:C5:8D:F8:5A:41:66:4C:10:FF:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3cbdb072-dea6-33f0-8624-e0763b4f0119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:aa:ae:7a:a2:e7:f2:04:6b:03:f1:02:7e:89:53:f9:67:e9: 0a:6e:2f:30:96:12:46:46:1b:6a:14:a9:8e:a4:03:6c:9f:72: f3:40:91:d3:28:6c:4e:c4:e4:02:46:01:e6:19:78:8a:c3:06: f7:c5:64:96:c2:a3:5e:eb:41:bf:ed:28:1a:c3:46:1a:fd:b0: fa:11:d2:8a:cd:a5:6b:ea:67:f0:74:69:46:ab:0c:d9:dc:40: bc:3a:69:7e:e1:14:c2:3d:fa:b9:67:d4:3a:28:e7:3f:25:37: a3:15:c8:d4:29:41:2d:81:a2:da:e7:f7:eb:ff:85:92:ac:e7: 3c:cb:2f:ff:7e:a3:75:b9:ec:34:96:f6:8c:d9:7a:56:bd:47: e2:c0:b9:96:54:8c:ce:1e:04:db:3d:e8:1d:36:c1:66:87:91: c0:9c:1f:a8:fd:8b:94:68:40:70:5f:cf:ee:06:bf:da:8a:ae: 8a:aa:cb:11:46:f6:02:0b:e7:22:de:51:53:e4:82:d7:4a:ee: db:42:be:55:f6:26:1f:34:12:8f:64:af:c2:f7:2d:26:5d:31: 34:f8:30:0e:be:a4:ca:3b:45:da:30:de:c4:63:68:7a:0d:02: d8:f9:0b:9b:3c:69:f1:4a:4e:4c:8d:80:12:de:26:f0:58:03: 34:6e:07:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlv/rCsdO0zopIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjUwZTBhY2ItNGQ2NC00ODA4LWIzNGUtMmViYTJhOWUyNmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwlYxqWICjex0E/KIemhk/iuWQKdUhdDfCVz 3ER5H6JkFs6iNBQUTrXD3uUExJV1r6UxCu7rmwF65qvbF/zBMxlUq/5fjBWLIUz3 KjVmhOEbjFA7tpYnGZeoTPT13KExvsQCe39qhNzFMkWt+10qDAadmUboZqGjoO4g 6RQrtZRfpDDRWhVcZhWpGd1NBxSWmRaeZm+CqVfeJl7WwwGfwrt9c8doDWTqdFlu +rr7uQRLNNXZLHCm4dXmZzBMwpFOU3rYbOdYnAcMw4erOnY6E2Y86247l7DjQL/0 iBTdhFDl6ZjR7GBMAa4z/0NHrmertpQCnNRuIY7tDfBykfhRvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZyfSCDep8PUPLFjfhaQWZMEP/OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2NiZGIwNzItZGVhNi0z M2YwLTg2MjQtZTA3NjNiNGYwMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiqrnqi5/IEawPxAn6JU/ln6QpuLzCWEkZGG2oUqY6kA2yfcvNAkdMo bE7E5AJGAeYZeIrDBvfFZJbCo17rQb/tKBrDRhr9sPoR0orNpWvqZ/B0aUarDNnc QLw6aX7hFMI9+rln1Doo5z8lN6MVyNQpQS2Botrn9+v/hZKs5zzLL/9+o3W57DSW 9ozZela9R+LAuZZUjM4eBNs96B02wWaHkcCcH6j9i5RoQHBfz+4Gv9qKroqqyxFG 9gIL5yLeUVPkgtdK7ttCvlX2Jh80Eo9kr8L3LSZdMTT4MA6+pMo7Rdow3sRjaHoN Atj5C5s8afFKTkyNgBLeJvBYAzRuB90= -----END CERTIFICATE-----Generated at Sat Sep 5 06:03:34 2026 by rpki-client