$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5a132b33-8fa2-3b6b-a3e2-f28e98063dd0.roa File: 5a132b33-8fa2-3b6b-a3e2-f28e98063dd0.roa (raw, json) Hash identifier: LHOudq4A8f7NZxNxuzjZu6zv/EFpktmg8dJLIff0k4M= Subject key identifier: 39:91:DA:8B:6C:7C:2E:51:9F:F3:D0:05:9E:C9:CF:81:18:3C:85:61 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EED5214E0709D52B258233040 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5a132b33-8fa2-3b6b-a3e2-f28e98063dd0.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:14:e0:70:9d:52:b2:58:23:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=83e5f6bb-4903-4237-8b63-2903dbf7da9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2c:30:68:45:83:ad:29:72:e7:85:ec:1b:2b: 1d:da:97:a1:ba:d4:e6:62:ee:ae:74:df:c7:7b:d6: 27:d1:ec:f1:be:1f:7c:cd:3b:9f:11:92:67:96:ac: 3f:58:a4:1c:f1:26:b2:6a:b0:bb:14:5f:96:31:20: d0:85:e6:7b:04:35:81:ee:87:99:37:0d:0e:fe:0f: 6e:11:0c:72:fd:b8:0f:3c:9b:91:48:2f:7f:24:7a: 1e:a1:14:4b:21:7d:24:7a:7e:d9:6b:a9:37:c9:eb: 62:74:b1:5e:f9:33:ae:44:65:23:09:3d:17:84:c1: d9:e7:05:02:57:4f:22:ae:c0:b2:33:61:54:68:a6: 9c:10:e3:dc:12:32:6b:69:a5:fb:15:63:82:cf:63: 7a:e7:4f:cf:20:5f:30:97:e4:90:e6:73:8a:43:cf: a1:be:8c:08:2b:8e:01:a5:99:4d:bc:04:a2:6d:75: 49:f6:dd:8c:4c:d7:b9:ca:34:51:42:81:dd:eb:c9: 18:4d:09:5b:c2:a5:73:d2:6a:d1:5f:32:11:3b:78: 59:b7:32:41:f9:a6:d9:a7:da:93:ff:00:20:1a:1c: 47:f4:ce:f8:16:a8:b5:0a:2c:18:45:cc:b5:51:70: e7:c7:32:86:de:92:92:ea:90:b7:7a:b8:d7:77:f4: 78:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:91:DA:8B:6C:7C:2E:51:9F:F3:D0:05:9E:C9:CF:81:18:3C:85:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5a132b33-8fa2-3b6b-a3e2-f28e98063dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:c2:d4:05:12:4c:c9:b1:6e:42:fd:37:e4:e3:91:0e:3e:ca: 65:aa:fc:e1:59:f4:6a:f2:d9:2a:35:ad:bc:49:eb:28:c8:a1: 64:ab:2c:da:5e:6c:57:69:78:af:b1:8b:7e:b2:a1:fe:d2:1c: 2a:2d:f8:fb:cb:5c:02:cb:54:d0:38:5a:92:88:da:5c:86:d4: f5:50:ff:70:fc:38:6f:35:25:c0:de:6d:aa:d5:5d:af:a4:f9: 95:a0:07:45:94:a9:44:3a:de:36:fd:6a:96:39:f6:e5:b4:ad: e8:34:81:c7:38:60:c0:e9:a5:54:4f:90:0a:ba:73:8c:29:10: 7e:cd:e6:01:04:df:db:56:a4:d0:07:24:2a:be:c8:bc:a9:89: d0:48:79:8c:30:33:25:fb:22:1d:56:f4:b5:ff:63:41:eb:ce: 59:3f:11:c4:e6:26:c6:af:4d:d9:00:87:23:b1:c5:79:a5:41: 5d:40:2c:f7:f2:42:45:46:28:06:4d:72:f1:df:7e:24:49:f8: 4d:3d:7c:2d:9b:ab:2b:87:2e:ff:b0:3c:96:27:62:eb:8b:23: 4d:a3:21:c7:9a:12:5d:99:84:eb:5c:9b:f6:ec:41:d4:32:b4: 52:34:28:0b:5d:0c:71:e8:9c:a9:ef:33:0d:02:fe:e2:33:4c: f0:4b:b6:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUhTgcJ1SslgjMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ODNlNWY2YmItNDkwMy00MjM3LThiNjMtMjkwM2RiZjdkYTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ywwaEWDrSly54XsGysd2pehutTmYu6udN/H e9Yn0ezxvh98zTufEZJnlqw/WKQc8SayarC7FF+WMSDQheZ7BDWB7oeZNw0O/g9u EQxy/bgPPJuRSC9/JHoeoRRLIX0ken7Za6k3yetidLFe+TOuRGUjCT0XhMHZ5wUC V08irsCyM2FUaKacEOPcEjJraaX7FWOCz2N650/PIF8wl+SQ5nOKQ8+hvowIK44B pZlNvASibXVJ9t2MTNe5yjRRQoHd68kYTQlbwqVz0mrRXzIRO3hZtzJB+abZp9qT /wAgGhxH9M74Fqi1CiwYRcy1UXDnxzKG3pKS6pC3erjXd/R4AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmR2otsfC5Rn/PQBZ7Jz4EYPIVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWExMzJiMzMtOGZhMi0z YjZiLWEzZTItZjI4ZTk4MDYzZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHC1AUSTMmxbkL9N+TjkQ4+ymWq/OFZ9Gry2So1rbxJ6yjIoWSrLNpe bFdpeK+xi36yof7SHCot+PvLXALLVNA4WpKI2lyG1PVQ/3D8OG81JcDebarVXa+k +ZWgB0WUqUQ63jb9apY59uW0reg0gcc4YMDppVRPkAq6c4wpEH7N5gEE39tWpNAH JCq+yLypidBIeYwwMyX7Ih1W9LX/Y0Hrzlk/EcTmJsavTdkAhyOxxXmlQV1ALPfy QkVGKAZNcvHffiRJ+E09fC2bqyuHLv+wPJYnYuuLI02jIceaEl2ZhOtcm/bsQdQy tFI0KAtdDHHonKnvMw0C/uIzTPBLtt4= -----END CERTIFICATE-----Generated at Sat Sep 5 06:23:10 2026 by rpki-client