$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c96e5dc-d183-360b-abed-630e7d86fc75.roa File: 5c96e5dc-d183-360b-abed-630e7d86fc75.roa (raw, json) Hash identifier: iBf67uTVn8W84j5r8/A+bOLudC6l74E+fmEcfoXBjQ4= Subject key identifier: E7:81:AB:36:60:93:64:17:AD:FE:64:68:12:BB:3E:D7:C8:EE:5B:A0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE7BCCCD22F1C648152C37380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c96e5dc-d183-360b-abed-630e7d86fc75.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:cc:d2:2f:1c:64:81:52:c3:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=fa032d9b-2350-498d-a06a-7122297d64e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:21:c7:a1:63:80:59:8c:d6:44:e7:f9:68:11: 9a:c9:c6:75:2b:49:b6:10:3c:61:fc:6a:79:4d:ea: 5c:2b:92:2a:03:ad:6b:08:8e:31:40:56:19:a6:0f: 17:b3:13:ea:a1:bb:51:1b:17:26:87:3f:c2:98:ca: 67:28:42:b9:00:81:78:9b:c4:09:0e:1a:ec:c9:fb: 87:0b:cc:61:4f:2c:97:05:f9:49:f1:04:05:cd:f3: c7:66:21:7a:21:e1:d5:4d:f1:a9:ef:f4:bf:69:b4: 93:5e:85:64:7d:1a:8c:65:67:2b:c9:fc:43:57:99: e1:a9:8d:64:58:c8:ab:51:d7:36:36:db:63:b6:7c: 64:df:78:7a:ec:f0:12:7a:b7:3d:21:38:cb:08:4c: aa:27:1e:44:58:74:dc:9c:e1:3c:2b:79:eb:8c:0e: fe:ba:07:8b:94:bc:c2:e4:6c:ad:3b:95:45:89:79: 28:31:83:bb:b1:e4:c3:4c:f0:dc:a3:92:e0:97:8a: a3:92:0b:e9:84:55:08:dc:b8:7e:eb:bd:85:0c:ce: ad:5d:b0:c0:f3:c3:78:37:3d:f2:a9:35:21:2e:2b: dd:4a:03:70:ce:f6:c2:eb:56:ae:92:7f:36:70:9d: 36:4a:64:e6:33:f3:70:f4:7d:12:69:ff:2b:2a:f5: 1a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:81:AB:36:60:93:64:17:AD:FE:64:68:12:BB:3E:D7:C8:EE:5B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c96e5dc-d183-360b-abed-630e7d86fc75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:44:2d:8a:52:f8:29:b1:7c:49:ff:a4:c4:02:04:84:42:41: f9:1d:f8:ea:f8:c9:c4:c9:ce:fd:2c:e3:14:5f:5b:4a:db:71: 9f:ff:21:45:79:21:39:1a:e1:b4:6b:50:fd:b3:98:99:a5:50: a0:48:0d:7e:3e:78:d8:6c:bd:cf:01:e6:53:1c:a8:c0:34:a8: c6:b0:ea:a6:88:ca:e5:15:f6:ad:02:2a:17:9e:63:cb:cd:ca: 35:1c:fa:89:7a:a6:54:33:8f:d0:6b:89:ca:2d:18:51:61:cd: c0:88:1f:b3:03:31:bd:b9:1d:60:ab:32:c1:c3:00:c1:61:e8: f1:b3:b6:14:8d:f3:e9:ce:fd:79:b8:80:90:7d:71:56:83:91: 96:c2:00:36:a7:3c:c9:1a:16:96:b3:64:e8:63:5f:d5:d0:78: c9:b8:0c:35:14:ae:02:07:8a:53:ff:41:73:2d:eb:fe:58:de: 92:f7:74:58:c8:9b:2e:c7:d3:55:83:d4:f9:9c:40:c5:f0:48: 41:42:1f:34:08:72:a4:b9:38:4f:85:2d:14:bb:12:33:d7:c4: e3:a3:cf:3e:1e:ac:aa:43:85:57:65:9b:f6:19:cc:25:14:57: a3:5b:82:4f:35:77:4d:f8:17:51:c5:36:89:28:26:ab:86:38: f1:1c:54:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvMzSLxxkgVLDc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ZmEwMzJkOWItMjM1MC00OThkLWEwNmEtNzEyMjI5N2Q2NGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCHHoWOAWYzWROf5aBGaycZ1K0m2EDxh/Gp5 TepcK5IqA61rCI4xQFYZpg8XsxPqobtRGxcmhz/CmMpnKEK5AIF4m8QJDhrsyfuH C8xhTyyXBflJ8QQFzfPHZiF6IeHVTfGp7/S/abSTXoVkfRqMZWcryfxDV5nhqY1k WMirUdc2Nttjtnxk33h67PASerc9ITjLCEyqJx5EWHTcnOE8K3nrjA7+ugeLlLzC 5GytO5VFiXkoMYO7seTDTPDco5Lgl4qjkgvphFUI3Lh+672FDM6tXbDA88N4Nz3y qTUhLivdSgNwzvbC61aukn82cJ02SmTmM/Nw9H0Saf8rKvUaSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeBqzZgk2QXrf5kaBK7PtfI7lugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWM5NmU1ZGMtZDE4My0z NjBiLWFiZWQtNjMwZTdkODZmYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJnBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhELYpS+CmxfEn/pMQCBIRCQfkd+Or4ycTJzv0s4xRfW0rbcZ//IUV5 ITka4bRrUP2zmJmlUKBIDX4+eNhsvc8B5lMcqMA0qMaw6qaIyuUV9q0CKheeY8vN yjUc+ol6plQzj9BricotGFFhzcCIH7MDMb25HWCrMsHDAMFh6PGzthSN8+nO/Xm4 gJB9cVaDkZbCADanPMkaFpazZOhjX9XQeMm4DDUUrgIHilP/QXMt6/5Y3pL3dFjI my7H01WD1PmcQMXwSEFCHzQIcqS5OE+FLRS7EjPXxOOjzz4erKpDhVdlm/YZzCUU V6Nbgk81d034F1HFNokoJquGOPEcVCo= -----END CERTIFICATE-----Generated at Sat Sep 5 08:08:44 2026 by rpki-client