$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9836e2a1-56f5-3d9c-9327-7ae95cd88d7b.roa File: 9836e2a1-56f5-3d9c-9327-7ae95cd88d7b.roa (raw, json) Hash identifier: qP8UshW0w0zJWRgxJNe6fYAIQD8y6tzZtMglWu5002g= Subject key identifier: 28:F0:77:EC:0C:41:3A:1E:D4:EB:8C:80:A0:B6:46:54:AD:91:81:CE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE7BCC9F4AF13AD4350AC01B0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9836e2a1-56f5-3d9c-9327-7ae95cd88d7b.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:c9:f4:af:13:ad:43:50:ac:01:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=8056d286-be26-4db9-a317-8b28850cadff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:14:21:b6:52:e0:b5:fb:24:a4:52:21:93:85: 1c:52:84:03:3e:05:7a:ff:7e:e3:f5:df:82:ce:c5: 91:ba:b2:d2:7b:6e:bd:98:c1:fe:6e:dc:c2:8a:52: 0f:d3:34:91:6d:38:a6:73:c0:a9:7e:a1:1b:fe:0d: 17:5b:3d:0e:eb:ef:c5:ca:d8:0a:66:75:75:4f:8c: 25:b7:73:99:82:96:d6:6e:44:8f:ae:df:76:a6:48: 62:b7:45:15:f0:20:d6:36:68:75:d4:5b:94:56:47: f4:d1:9a:b6:31:9c:66:70:70:45:00:51:6a:e7:dc: 85:f2:6b:8b:02:93:ab:30:f7:3c:27:68:c3:21:c2: 7c:98:cc:cd:9f:ec:56:10:97:53:0a:e1:44:27:0b: a7:61:66:f3:35:4d:dc:3f:c0:dc:fc:b6:e1:79:ea: 3d:6f:6a:34:a8:93:d4:97:fe:3a:64:6a:41:2c:b7: 97:c1:5b:90:aa:ef:13:f1:3d:12:d1:e2:94:ba:65: 1f:d7:f6:7d:cb:b1:e6:a2:7a:1a:8f:6b:3d:de:a3: 1f:5b:1b:32:a2:d2:9b:92:f1:5c:a3:e9:c4:a3:7c: 52:2c:7a:e7:f1:3a:17:78:16:7a:b0:e5:a4:b0:8e: 31:54:dd:a1:25:46:ea:20:17:c5:6b:d0:00:e2:ed: 95:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F0:77:EC:0C:41:3A:1E:D4:EB:8C:80:A0:B6:46:54:AD:91:81:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9836e2a1-56f5-3d9c-9327-7ae95cd88d7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f3:58:ab:48:24:9f:4b:c7:54:49:a1:6f:bf:d0:8d:73:60: 90:c3:00:97:b0:5f:bc:7f:f5:3b:0b:8b:d0:3a:b7:78:6e:c5: ca:7b:71:1f:8b:32:de:af:0a:ef:5c:27:f9:e9:bc:13:89:17: 51:ab:2f:e2:c1:f6:dd:f5:ee:c1:7b:eb:58:0e:3e:af:a2:eb: b7:19:6e:b2:d2:97:89:db:fd:56:3b:29:93:d0:01:6f:11:2c: 7f:2f:68:c0:84:e8:1d:8f:12:df:1b:13:9c:a2:67:1e:b0:03: c9:a0:e3:11:d8:1e:c5:e0:65:40:60:56:64:f8:c3:2e:fe:2e: 64:d1:18:fc:90:2f:6c:24:5d:75:93:8b:6d:f2:a1:59:ff:46: 10:f9:34:5e:fc:d2:8d:af:21:19:fd:2c:42:49:d5:5f:41:c9: 30:25:54:b4:61:56:8d:7c:fc:62:88:95:2a:92:e5:61:c0:e8: cf:7e:59:32:a1:d6:6b:0a:e7:26:a9:69:16:5e:c6:76:36:44: d3:94:97:b8:15:23:fe:0c:b3:8e:a2:7e:9f:3f:f1:e2:81:76: df:e4:08:d9:7a:b9:ea:18:0c:76:48:32:88:ad:e4:a8:f1:3f: 56:7a:1a:c7:29:09:64:89:c7:be:8b:30:ee:90:72:49:1c:73: a1:58:16:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvMn0rxOtQ1CsAbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ODA1NmQyODYtYmUyNi00ZGI5LWEzMTctOGIyODg1MGNhZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhQhtlLgtfskpFIhk4UcUoQDPgV6/37j9d+C zsWRurLSe269mMH+btzCilIP0zSRbTimc8CpfqEb/g0XWz0O6+/FytgKZnV1T4wl t3OZgpbWbkSPrt92pkhit0UV8CDWNmh11FuUVkf00Zq2MZxmcHBFAFFq59yF8muL ApOrMPc8J2jDIcJ8mMzNn+xWEJdTCuFEJwunYWbzNU3cP8Dc/Lbheeo9b2o0qJPU l/46ZGpBLLeXwVuQqu8T8T0S0eKUumUf1/Z9y7Hmonoaj2s93qMfWxsyotKbkvFc o+nEo3xSLHrn8ToXeBZ6sOWksI4xVN2hJUbqIBfFa9AA4u2VIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjwd+wMQToe1OuMgKC2RlStkYHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTgzNmUyYTEtNTZmNS0z ZDljLTkzMjctN2FlOTVjZDg4ZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJnEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnzWKtIJJ9Lx1RJoW+/0I1zYJDDAJewX7x/9TsLi9A6t3huxcp7cR+L Mt6vCu9cJ/npvBOJF1GrL+LB9t317sF761gOPq+i67cZbrLSl4nb/VY7KZPQAW8R LH8vaMCE6B2PEt8bE5yiZx6wA8mg4xHYHsXgZUBgVmT4wy7+LmTRGPyQL2wkXXWT i23yoVn/RhD5NF780o2vIRn9LEJJ1V9ByTAlVLRhVo18/GKIlSqS5WHA6M9+WTKh 1msK5yapaRZexnY2RNOUl7gVI/4Ms46ifp8/8eKBdt/kCNl6ueoYDHZIMoit5Kjx P1Z6GscpCWSJx76LMO6Qckkcc6FYFuE= -----END CERTIFICATE-----Generated at Sat Sep 5 07:39:24 2026 by rpki-client