$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70d7d4f6-bf66-36b0-9c7f-d14083a36a2d.roa File: 70d7d4f6-bf66-36b0-9c7f-d14083a36a2d.roa (raw, json) Hash identifier: tYaASlRaM3j3LD8cVBnGrwHzwhDnkPBwYLjlc0n2P6A= Subject key identifier: 44:2A:E8:88:C3:88:5F:A8:59:BD:FA:0B:E1:2C:61:CB:35:9F:64:49 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EED523B40F66D9A2C4F658180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70d7d4f6-bf66-36b0-9c7f-d14083a36a2d.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:3b:40:f6:6d:9a:2c:4f:65:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=6f0ebf35-bf30-4b70-a45b-fa0715fc798b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ff:40:2f:45:84:d6:c6:cd:ca:23:da:8d:1d: 44:78:39:b8:d0:cb:6e:94:80:2a:0a:97:94:ef:96: d8:0c:07:3d:57:b4:f0:86:82:cc:3b:17:af:16:66: a0:fb:33:8a:1e:d8:f9:7d:d6:1b:1d:6d:ab:97:a7: db:01:72:3e:76:7e:2e:7b:39:41:f9:4f:f1:8e:9f: 21:66:19:25:37:a0:76:b6:a4:78:2d:30:9f:7d:17: 5f:9b:23:2c:df:d8:8d:d6:74:36:b4:99:8c:7b:45: 7a:f6:4c:6e:8d:de:13:9c:3d:5f:52:84:96:cc:db: 91:25:bf:b1:e3:44:37:9a:9b:a5:c2:3e:ca:a0:1b: f8:f7:20:1e:8d:e9:73:8e:83:30:2d:58:f2:b8:cc: a1:c8:3a:78:90:e0:67:25:47:de:0d:66:89:38:a4: 39:9e:04:f8:99:4e:b5:b3:d0:01:6d:e3:6f:59:2e: 70:3b:48:78:f3:c5:3d:ac:47:ec:7f:ce:0c:66:85: 8d:f3:ef:4e:1a:96:46:6a:cf:0d:2d:63:01:d6:c7: fe:fc:10:91:dd:f8:03:5f:c0:6c:7b:e6:28:c0:0b: 07:18:57:31:d3:ab:9e:96:e3:24:90:65:26:86:52: 57:ba:ca:90:49:ef:14:c8:53:04:6b:33:6d:15:d2: ed:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2A:E8:88:C3:88:5F:A8:59:BD:FA:0B:E1:2C:61:CB:35:9F:64:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70d7d4f6-bf66-36b0-9c7f-d14083a36a2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ad:47:c4:3e:c0:52:b4:d1:1a:5e:5b:28:bd:b4:f4:8b:f8: c3:42:b9:92:7d:ba:c9:8c:ec:18:f0:c8:34:be:b6:6a:5c:b7: 89:7c:21:e0:1a:c2:b4:1e:05:62:27:7c:c1:51:c5:17:70:c9: cb:d3:ae:7f:09:b2:6a:98:8a:92:84:98:99:60:9a:7f:0f:42: 30:d4:8e:17:fb:2d:d5:61:c1:fc:b3:c6:41:d1:ea:09:86:ff: 6c:f7:7e:01:0e:d9:2e:f2:06:0d:7c:ff:fa:a9:37:63:d7:d2: 66:e9:1e:33:ec:0e:5c:61:19:2b:94:cb:99:d8:59:31:bd:d9: 42:af:dc:93:fb:98:15:01:ce:30:74:f6:3c:76:a0:e7:45:ef: 48:11:0c:3c:0c:91:f9:9c:e2:9a:12:df:5e:61:4d:fe:bf:0c: 18:ac:de:fc:3d:44:ee:fe:aa:c9:d3:2f:1b:cf:70:a2:64:44: ef:af:3a:c1:11:3f:1c:71:97:b4:de:e3:47:be:86:7e:38:33: 12:e4:b2:c3:6c:77:69:f4:00:b4:70:96:1c:25:40:3a:93:20: 61:7e:3e:9d:6d:49:47:7c:4e:e1:3e:34:62:1b:4d:d4:b2:67: fd:57:5a:6c:cc:45:d4:a6:3c:3f:52:1b:f9:ab:2b:cc:2e:bc: 81:df:3f:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUjtA9m2aLE9lgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NmYwZWJmMzUtYmYzMC00YjcwLWE0NWItZmEwNzE1ZmM3OThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP9AL0WE1sbNyiPajR1EeDm40MtulIAqCpeU 75bYDAc9V7TwhoLMOxevFmag+zOKHtj5fdYbHW2rl6fbAXI+dn4uezlB+U/xjp8h ZhklN6B2tqR4LTCffRdfmyMs39iN1nQ2tJmMe0V69kxujd4TnD1fUoSWzNuRJb+x 40Q3mpulwj7KoBv49yAejelzjoMwLVjyuMyhyDp4kOBnJUfeDWaJOKQ5ngT4mU61 s9ABbeNvWS5wO0h488U9rEfsf84MZoWN8+9OGpZGas8NLWMB1sf+/BCR3fgDX8Bs e+YowAsHGFcx06ueluMkkGUmhlJXusqQSe8UyFMEazNtFdLtIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQq6IjDiF+oWb36C+EsYcs1n2RJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzBkN2Q0ZjYtYmY2Ni0z NmIwLTljN2YtZDE0MDgzYTM2YTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCtR8Q+wFK00RpeWyi9tPSL+MNCuZJ9usmM7BjwyDS+tmpct4l8IeAa wrQeBWInfMFRxRdwycvTrn8JsmqYipKEmJlgmn8PQjDUjhf7LdVhwfyzxkHR6gmG /2z3fgEO2S7yBg18//qpN2PX0mbpHjPsDlxhGSuUy5nYWTG92UKv3JP7mBUBzjB0 9jx2oOdF70gRDDwMkfmc4poS315hTf6/DBis3vw9RO7+qsnTLxvPcKJkRO+vOsER Pxxxl7Te40e+hn44MxLkssNsd2n0ALRwlhwlQDqTIGF+Pp1tSUd8TuE+NGIbTdSy Z/1XWmzMRdSmPD9SG/mrK8wuvIHfP8s= -----END CERTIFICATE-----Generated at Sat Sep 5 09:31:54 2026 by rpki-client