$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a96e2e41-ace8-3197-a149-40e9c904d0fe.roa File: a96e2e41-ace8-3197-a149-40e9c904d0fe.roa (raw, json) Hash identifier: H3UIrAHU2dRJZoUgYILJal+xVyCOW+cotUy7SN8ciOI= Subject key identifier: 38:01:83:D9:5E:C4:78:9D:25:AF:11:7A:39:08:38:DD:0F:3D:23:1B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA7964330D9B4FF410F053780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a96e2e41-ace8-3197-a149-40e9c904d0fe.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.153.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:43:30:d9:b4:ff:41:0f:05:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=47800ab3-040b-4724-97cb-e97f66ec7ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:05:b2:31:a3:44:25:33:e1:1a:a5:dc:25:aa: 5e:21:d1:19:30:76:4f:36:67:ac:e1:7f:58:0a:54: dd:4e:5a:5d:81:f5:d6:b7:db:8f:7c:26:4e:a1:b0: ca:05:b0:43:88:e2:6d:dc:6c:53:ee:7a:49:e7:99: 72:65:8f:7c:8f:6f:46:09:2e:45:e8:1c:42:b0:3a: cf:02:81:ac:ec:a5:f4:2b:43:09:15:e1:d5:32:95: 21:93:cd:88:3e:02:51:0d:6b:3d:e8:e1:83:cf:d2: a1:29:38:cf:3a:13:60:10:11:c6:c1:34:01:73:c5: d2:63:0d:37:88:c1:77:75:6e:da:a0:ed:49:1c:aa: 10:e0:89:51:d3:b3:39:ee:15:dd:24:da:15:d1:dd: a5:32:b6:a4:04:bd:1c:9d:63:3e:64:6b:df:e4:70: ac:5c:ad:2e:16:f7:aa:57:5e:f7:6b:ca:12:6d:27: cf:67:2f:f2:f1:b7:f5:41:e3:24:1c:40:ac:52:dd: 75:ed:60:db:7d:02:0b:4f:dd:7e:ad:10:3d:b7:4d: 7d:22:72:b1:e1:23:12:cf:91:f9:e5:3b:60:ba:e3: 50:40:f7:d5:1c:e7:08:f0:71:8f:a3:25:d7:12:88: 85:2c:a2:00:18:30:33:b4:d0:95:a8:c3:ca:20:4a: 41:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:01:83:D9:5E:C4:78:9D:25:AF:11:7A:39:08:38:DD:0F:3D:23:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a96e2e41-ace8-3197-a149-40e9c904d0fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:7f:1b:8e:e4:be:98:7c:ef:c2:09:7e:9f:83:ab:33:8f:3b: 8c:ea:23:78:bd:0d:58:99:7f:2d:d2:09:dd:c8:95:36:82:e2: de:78:69:04:7c:d5:e7:ef:65:8a:3f:06:12:7e:bb:e9:57:2d: 0a:d6:15:5c:5f:4e:c9:cf:cc:cf:28:8d:92:c6:74:e1:65:0b: 87:4a:89:6e:e4:63:2a:53:3a:4c:af:48:4e:9c:40:f6:97:ed: 9a:0f:7e:ad:df:74:2b:c2:e0:ec:8a:32:3a:40:fd:82:65:3b: b8:80:b5:d4:de:5b:bc:58:10:36:98:bf:0c:18:87:8e:aa:3b: 6b:01:da:9e:21:95:5b:38:59:7a:e7:3b:99:fb:25:c1:03:d1: 32:7b:0b:8f:ac:99:f5:b0:8f:f7:1d:28:df:9b:c7:7e:a2:1f: a3:ef:ab:67:cd:d6:81:8f:4a:0c:af:a4:f8:ac:7e:58:18:24: c6:fe:a9:7c:b5:5d:f8:b7:ad:48:91:c7:ea:7d:1e:c5:34:fa: 4e:0b:53:40:42:92:7f:a9:42:fa:a0:1e:61:63:ba:a6:4d:95: 43:42:59:db:dd:ca:b2:60:81:1f:b6:f7:3c:a7:11:27:a5:23: 43:47:a4:d2:46:1c:fc:97:c8:ae:2d:74:27:2b:76:57:01:9a: 97:03:04:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlkMw2bT/QQ8FN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDc4MDBhYjMtMDQwYi00NzI0LTk3Y2ItZTk3ZjY2ZWM3YWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+gWyMaNEJTPhGqXcJapeIdEZMHZPNmes4X9Y ClTdTlpdgfXWt9uPfCZOobDKBbBDiOJt3GxT7npJ55lyZY98j29GCS5F6BxCsDrP AoGs7KX0K0MJFeHVMpUhk82IPgJRDWs96OGDz9KhKTjPOhNgEBHGwTQBc8XSYw03 iMF3dW7aoO1JHKoQ4IlR07M57hXdJNoV0d2lMrakBL0cnWM+ZGvf5HCsXK0uFveq V173a8oSbSfPZy/y8bf1QeMkHECsUt117WDbfQILT91+rRA9t019InKx4SMSz5H5 5TtguuNQQPfVHOcI8HGPoyXXEoiFLKIAGDAztNCVqMPKIEpBowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgBg9lexHidJa8RejkION0PPSMbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTk2ZTJlNDEtYWNlOC0z MTk3LWExNDktNDBlOWM5MDRkMGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKp/G47kvph878IJfp+DqzOPO4zqI3i9DViZfy3SCd3IlTaC4t54aQR8 1efvZYo/BhJ+u+lXLQrWFVxfTsnPzM8ojZLGdOFlC4dKiW7kYypTOkyvSE6cQPaX 7ZoPfq3fdCvC4OyKMjpA/YJlO7iAtdTeW7xYEDaYvwwYh46qO2sB2p4hlVs4WXrn O5n7JcED0TJ7C4+smfWwj/cdKN+bx36iH6Pvq2fN1oGPSgyvpPisflgYJMb+qXy1 Xfi3rUiRx+p9HsU0+k4LU0BCkn+pQvqgHmFjuqZNlUNCWdvdyrJggR+29zynESel I0NHpNJGHPyXyK4tdCcrdlcBmpcDBKg= -----END CERTIFICATE-----Generated at Sat Sep 5 05:01:19 2026 by rpki-client