$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e0bd01d-65c2-33cc-9974-f5fbd98fc2d7.roa File: 4e0bd01d-65c2-33cc-9974-f5fbd98fc2d7.roa (raw, json) Hash identifier: 8Xll78eEPYyzi/tLCIyI8RYvyAuffUvvZl4epUOu5EQ= Subject key identifier: EE:0A:67:9F:6B:91:68:AC:A5:79:90:0C:54:4B:D1:B4:13:51:49:55 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE7BC9A0BA4E5C87FA6D3A668 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e0bd01d-65c2-33cc-9974-f5fbd98fc2d7.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:9a:0b:a4:e5:c8:7f:a6:d3:a6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=0fa57db0-b6b5-4286-8cf8-89d81999ca3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9d:2b:ff:7c:12:53:d3:18:74:1a:ac:4a:6b: e4:68:1a:04:4b:6b:89:d8:9b:eb:73:f0:13:20:4d: fa:5f:8d:97:7a:6f:11:a9:90:23:12:04:0d:1c:37: 84:41:d4:63:5c:e4:d6:6b:8e:41:c8:2e:a4:03:c1: 1f:e3:a1:da:ed:a5:ec:17:69:52:a6:45:fe:7a:4e: 47:1d:dc:f6:46:b8:e2:8f:cf:23:33:50:80:24:8f: d0:d5:dd:85:44:87:48:3c:b7:45:53:f6:f3:67:01: 95:07:5a:0d:5c:b0:9e:7f:27:a5:13:be:10:d0:5c: 62:22:08:82:23:ae:b9:ab:ea:ec:80:ed:c5:58:59: d5:45:05:a0:cf:be:57:42:90:02:94:ad:b5:bb:15: c9:11:f3:44:b7:49:01:a2:7a:79:b8:4f:96:21:84: 5a:af:75:90:28:46:89:bc:e9:05:32:86:69:86:0d: ea:17:73:b5:fd:47:b2:67:ea:1b:f2:90:a6:ef:97: ab:33:96:89:72:41:aa:62:d6:9b:96:9f:3e:bf:4b: b7:c5:ca:ca:6a:11:e7:24:56:1e:07:ff:a3:25:b9: 49:29:54:13:60:36:28:8f:87:2b:0f:c6:44:04:d4: 70:58:48:17:3e:b1:20:74:dd:78:64:fe:5e:f4:f3: 09:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0A:67:9F:6B:91:68:AC:A5:79:90:0C:54:4B:D1:B4:13:51:49:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e0bd01d-65c2-33cc-9974-f5fbd98fc2d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:f7:70:7f:71:58:58:1b:05:1f:c1:a3:18:dc:0e:7c:24:8b: 0d:47:cb:2b:d6:56:b8:35:9d:b4:fc:4c:3a:46:0b:a3:97:7a: fa:94:b4:6a:fd:8d:fb:6e:63:f2:96:09:c9:9e:af:45:e5:9d: f9:ae:6d:7e:27:63:99:23:46:a0:79:01:3b:40:78:c2:86:9f: 47:f9:eb:91:40:d6:bc:d1:f7:12:f8:5a:3b:b0:b2:f1:1a:82: 54:09:8e:cc:f7:5f:4b:69:68:41:77:fe:20:60:37:00:8b:59: 09:cb:85:03:3e:f8:98:2a:ea:f4:8a:18:42:35:0d:a7:72:ac: 73:50:2d:e7:82:e1:89:aa:d8:42:65:a3:52:66:79:01:b0:ac: 08:8d:09:b8:9e:b1:29:26:2a:da:e1:b6:40:e8:c6:8f:1c:84: 9f:a1:6b:2a:31:f2:20:42:3d:34:a8:79:19:52:db:16:41:d2: ce:a4:ce:71:d2:8f:12:48:ae:a9:05:7e:6a:ff:22:be:77:44: f2:5f:f4:7d:6c:4c:9d:b1:e8:48:54:e7:94:ed:ac:9b:d9:68: b3:7e:2c:8c:cf:09:d5:6b:33:88:37:3f:92:84:41:c3:b1:86: 6b:a0:13:41:64:10:de:2f:e2:ee:43:f3:10:35:ac:c3:1f:f1: 19:c7:87:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvJoLpOXIf6bTpmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk MGZhNTdkYjAtYjZiNS00Mjg2LThjZjgtODlkODE5OTljYTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu50r/3wSU9MYdBqsSmvkaBoES2uJ2Jvrc/AT IE36X42Xem8RqZAjEgQNHDeEQdRjXOTWa45ByC6kA8Ef46Ha7aXsF2lSpkX+ek5H Hdz2Rrjij88jM1CAJI/Q1d2FRIdIPLdFU/bzZwGVB1oNXLCefyelE74Q0FxiIgiC I665q+rsgO3FWFnVRQWgz75XQpAClK21uxXJEfNEt0kBonp5uE+WIYRar3WQKEaJ vOkFMoZphg3qF3O1/UeyZ+ob8pCm75erM5aJckGqYtablp8+v0u3xcrKahHnJFYe B/+jJblJKVQTYDYoj4crD8ZEBNRwWEgXPrEgdN14ZP5e9PMJ2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4KZ59rkWispXmQDFRL0bQTUUlVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGUwYmQwMWQtNjVjMi0z M2NjLTk5NzQtZjVmYmQ5OGZjMmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJm8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf3cH9xWFgbBR/BoxjcDnwkiw1HyyvWVrg1nbT8TDpGC6OXevqUtGr9 jftuY/KWCcmer0XlnfmubX4nY5kjRqB5ATtAeMKGn0f565FA1rzR9xL4WjuwsvEa glQJjsz3X0tpaEF3/iBgNwCLWQnLhQM++Jgq6vSKGEI1DadyrHNQLeeC4Ymq2EJl o1JmeQGwrAiNCbiesSkmKtrhtkDoxo8chJ+hayox8iBCPTSoeRlS2xZB0s6kznHS jxJIrqkFfmr/Ir53RPJf9H1sTJ2x6EhU55TtrJvZaLN+LIzPCdVrM4g3P5KEQcOx hmugE0FkEN4v4u5D8xA1rMMf8RnHh4s= -----END CERTIFICATE-----Generated at Sat Sep 5 07:04:56 2026 by rpki-client