$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a42322e9-baf9-32b8-a667-d841ad9ba29b.roa File: a42322e9-baf9-32b8-a667-d841ad9ba29b.roa (raw, json) Hash identifier: X86QMLOyyZtfDVIsM+DLPcgR67iO6P4JEWqSDq+OaDs= Subject key identifier: 37:18:9C:F5:17:FF:16:45:B8:BE:9E:71:17:B0:EF:1E:E1:E0:E2:38 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE7BCB2FEB75246A5D9030680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a42322e9-baf9-32b8-a667-d841ad9ba29b.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:b2:fe:b7:52:46:a5:d9:03:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=759264b2-cc22-442e-83f1-2dfe3aab31a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:93:2b:65:c0:c9:32:65:8b:74:83:0f:44: 22:f7:cc:8b:db:5a:fd:44:f2:90:eb:15:25:f3:fe: e4:0e:6f:46:87:13:86:74:e8:d7:be:87:5e:dc:d1: 64:be:d2:6d:f6:1b:19:c5:58:27:3a:86:62:96:2d: 3f:34:cb:a9:6d:07:58:19:15:7f:1c:2d:e4:df:d7: 5e:b4:69:20:27:5b:69:a0:5a:ee:56:c0:a7:37:28: 1d:42:6f:05:31:24:e9:c7:33:3d:47:5c:ff:35:49: 8d:c8:ce:45:44:df:fa:9f:55:37:30:6c:19:7e:40: 85:d8:4c:19:09:23:b9:4a:7c:9c:c9:e6:1f:50:4d: d5:3d:1e:2d:f3:87:d1:22:13:f2:92:fb:2b:c1:14: 1c:c1:a6:57:92:73:80:04:ac:fe:80:bb:f9:cd:59: ac:82:7e:60:59:dc:8a:33:e4:a1:78:09:78:0e:cc: b7:fc:7a:92:dc:11:ec:d5:c6:8d:93:c5:83:4d:ee: 6f:29:0a:2d:36:42:37:57:fa:20:5a:51:95:aa:78: b6:b3:20:b9:d8:c3:a4:a3:ba:29:b4:f9:ac:55:d1: 3a:5e:ae:0a:27:e5:69:66:ac:5a:65:d6:50:9e:5b: 98:8e:19:78:72:fc:0b:d6:34:0a:2f:08:16:8a:92: 92:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:18:9C:F5:17:FF:16:45:B8:BE:9E:71:17:B0:EF:1E:E1:E0:E2:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a42322e9-baf9-32b8-a667-d841ad9ba29b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c4:9d:7e:19:90:7b:32:de:c9:ea:b1:0d:62:11:6a:56:01: 71:4b:d5:cb:4b:99:11:c1:d5:33:08:26:0e:dc:64:df:48:66: e0:df:7d:67:ef:2f:bc:56:99:92:3a:c5:0d:eb:45:5d:f5:b2: f9:ca:42:71:8c:4a:b5:44:b5:13:a8:ac:6a:b2:ef:9b:17:ab: fb:c6:21:b8:2c:9e:18:65:ca:4b:96:ff:1b:7c:6c:25:50:dd: dc:50:14:57:33:3c:0c:3d:85:ad:f0:74:a0:d4:52:ba:e6:dd: 16:be:7d:9e:a0:f3:41:1b:8c:63:62:b6:98:0f:08:7d:17:b9: 6a:ea:b6:c0:43:07:0e:7b:63:a8:0c:94:de:3b:b0:5c:bc:25: dc:c7:b9:d8:d9:70:17:b0:e1:c9:f0:66:c1:a6:4a:d0:c8:7d: f5:19:61:46:e7:b2:c9:ba:b3:34:f1:9e:25:a8:4f:25:67:43: e3:cb:b3:63:d2:24:46:00:23:c7:3c:9a:71:42:c8:ba:cb:6f: e6:99:bd:85:4c:83:86:ee:20:cd:a8:62:14:ca:23:b9:13:5f: 78:27:be:73:18:6d:ea:64:e7:e4:7a:04:12:1f:74:2a:f7:ed: da:fe:74:57:ef:c0:54:44:d0:9a:12:c2:08:58:34:ad:be:dc: ec:8d:98:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvLL+t1JGpdkDBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk NzU5MjY0YjItY2MyMi00NDJlLTgzZjEtMmRmZTNhYWIzMWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomOTK2XAyTJli3SDD0Qi98yL21r9RPKQ6xUl 8/7kDm9GhxOGdOjXvode3NFkvtJt9hsZxVgnOoZili0/NMupbQdYGRV/HC3k39de tGkgJ1tpoFruVsCnNygdQm8FMSTpxzM9R1z/NUmNyM5FRN/6n1U3MGwZfkCF2EwZ CSO5SnycyeYfUE3VPR4t84fRIhPykvsrwRQcwaZXknOABKz+gLv5zVmsgn5gWdyK M+SheAl4Dsy3/HqS3BHs1caNk8WDTe5vKQotNkI3V/ogWlGVqni2syC52MOko7op tPmsVdE6Xq4KJ+VpZqxaZdZQnluYjhl4cvwL1jQKLwgWipKSYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcYnPUX/xZFuL6ecRew7x7h4OI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTQyMzIyZTktYmFmOS0z MmI4LWE2NjctZDg0MWFkOWJhMjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzEnX4ZkHsy3snqsQ1iEWpWAXFL1ctLmRHB1TMIJg7cZN9IZuDffWfv L7xWmZI6xQ3rRV31svnKQnGMSrVEtROorGqy75sXq/vGIbgsnhhlykuW/xt8bCVQ 3dxQFFczPAw9ha3wdKDUUrrm3Ra+fZ6g80EbjGNitpgPCH0XuWrqtsBDBw57Y6gM lN47sFy8JdzHudjZcBew4cnwZsGmStDIffUZYUbnssm6szTxniWoTyVnQ+PLs2PS JEYAI8c8mnFCyLrLb+aZvYVMg4buIM2oYhTKI7kTX3gnvnMYbepk5+R6BBIfdCr3 7dr+dFfvwFRE0JoSwghYNK2+3OyNmCM= -----END CERTIFICATE-----Generated at Sat Sep 5 05:24:43 2026 by rpki-client