$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b32841cc-04b7-32b6-80ba-42e688ea4078.roa File: b32841cc-04b7-32b6-80ba-42e688ea4078.roa (raw, json) Hash identifier: +Fi0xwwS9S8DqUQVCeqTWmO5k+6dJADXIYARIxtcVYs= Subject key identifier: 95:49:A8:D1:F8:24:B4:07:FE:33:05:7A:DA:47:EA:7C:6C:F5:47:B0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F03A789259027C0D5CD4E2E80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b32841cc-04b7-32b6-80ba-42e688ea4078.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:89:25:90:27:c0:d5:cd:4e:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=41b567f3-3720-462b-a752-1bb3ba6ada4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8b:01:2a:3a:5f:ca:0b:2d:21:a1:8d:8a:96: e0:93:e0:3c:cd:f3:01:a4:1e:0d:0d:6c:98:3e:bd: 99:bb:6f:9b:bd:2f:e4:c1:4f:28:c9:cc:40:ef:ce: 5a:d1:74:01:df:bd:c4:1c:84:b4:19:f3:cc:0b:d2: 4c:a7:a3:02:0d:95:f9:df:fb:a5:df:3c:15:8b:09: 3a:6b:9c:33:36:9c:3c:01:cf:5f:37:aa:94:cf:51: 20:d6:28:70:07:74:4d:ff:24:74:94:05:5a:b1:2c: ff:95:4a:5e:cd:55:fc:dc:0e:eb:12:e1:64:1b:32: 43:ff:83:08:54:e6:3c:3d:0d:05:bf:58:d5:4e:49: 75:d2:80:14:4a:3a:7f:6f:1c:ed:38:e7:e7:be:65: 9d:d4:5e:d1:46:68:fb:74:12:f3:ca:e4:e7:c4:0d: 89:8e:9c:f8:0f:4b:15:bf:4f:96:f3:57:c7:a8:8f: c9:0b:30:0c:e9:1c:d0:24:23:06:fa:71:dd:9e:31: e0:3f:33:a3:c9:f7:51:2d:c8:9a:f4:ee:d2:53:ad: 11:98:ce:67:b2:54:87:1e:66:33:69:e8:69:6c:2d: 98:5d:c1:88:c4:57:f6:75:0f:3e:4e:dc:70:24:bd: dc:24:31:ef:10:ad:bb:3e:73:a5:95:d0:7b:f2:35: 39:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:49:A8:D1:F8:24:B4:07:FE:33:05:7A:DA:47:EA:7C:6C:F5:47:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b32841cc-04b7-32b6-80ba-42e688ea4078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:0f:d2:dc:15:4f:5e:e5:70:ed:f9:80:06:0d:21:c5:70:2d: c4:51:8e:6c:67:7e:c8:b8:78:92:bd:a1:9b:e3:9e:a5:1d:3d: e5:3d:d0:47:f9:2c:e9:50:37:25:98:5b:a0:dd:89:74:b2:d2: ef:8f:f3:f1:af:29:b0:98:1f:8b:07:2a:a2:2f:55:2c:c6:5c: 0d:26:f3:80:7d:a2:1b:92:0c:37:9e:cf:e0:d2:28:f2:5e:40: fc:ba:84:37:61:42:b8:56:c0:36:9a:16:f5:4d:d9:75:0b:1d: 37:64:bc:67:81:25:f2:3a:7a:25:23:14:f9:d2:80:bd:42:cc: 80:b0:0d:a3:09:2a:ff:05:17:b5:78:c5:06:e6:b7:1c:bb:8f: 58:88:47:1d:ed:50:0e:86:b1:08:a7:ae:30:8f:af:c9:84:d5: 2d:63:11:cc:67:46:d5:86:e5:a0:08:20:26:55:c6:66:5d:a1: b1:74:9e:a6:d9:93:c5:f6:cc:d9:55:05:13:e4:b0:fc:2e:48: bb:8b:35:4c:eb:66:f3:a8:4b:33:9b:13:7f:12:3e:37:81:ed: 83:00:a7:96:a9:af:18:99:cf:3e:ec:b1:73:52:68:b1:47:50: ad:de:68:dd:df:8a:77:24:e9:7e:0e:be:32:60:03:40:cf:75: 19:2b:fd:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp4klkCfA1c1OLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk NDFiNTY3ZjMtMzcyMC00NjJiLWE3NTItMWJiM2JhNmFkYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIsBKjpfygstIaGNipbgk+A8zfMBpB4NDWyY Pr2Zu2+bvS/kwU8oycxA785a0XQB373EHIS0GfPMC9JMp6MCDZX53/ul3zwViwk6 a5wzNpw8Ac9fN6qUz1Eg1ihwB3RN/yR0lAVasSz/lUpezVX83A7rEuFkGzJD/4MI VOY8PQ0Fv1jVTkl10oAUSjp/bxztOOfnvmWd1F7RRmj7dBLzyuTnxA2Jjpz4D0sV v0+W81fHqI/JCzAM6RzQJCMG+nHdnjHgPzOjyfdRLcia9O7SU60RmM5nslSHHmYz aehpbC2YXcGIxFf2dQ8+TtxwJL3cJDHvEK27PnOlldB78jU5+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVJqNH4JLQH/jMFetpH6nxs9UewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjMyODQxY2MtMDRiNy0z MmI2LTgwYmEtNDJlNjg4ZWE0MDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4P0twVT17lcO35gAYNIcVwLcRRjmxnfsi4eJK9oZvjnqUdPeU90Ef5 LOlQNyWYW6DdiXSy0u+P8/GvKbCYH4sHKqIvVSzGXA0m84B9ohuSDDeez+DSKPJe QPy6hDdhQrhWwDaaFvVN2XULHTdkvGeBJfI6eiUjFPnSgL1CzICwDaMJKv8FF7V4 xQbmtxy7j1iIRx3tUA6GsQinrjCPr8mE1S1jEcxnRtWG5aAIICZVxmZdobF0nqbZ k8X2zNlVBRPksPwuSLuLNUzrZvOoSzObE38SPjeB7YMAp5aprxiZzz7ssXNSaLFH UK3eaN3finck6X4OvjJgA0DPdRkr/c0= -----END CERTIFICATE-----Generated at Sat Sep 5 05:23:50 2026 by rpki-client