$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b9116837-e5d6-3169-80de-95f0f7e66807.roa File: b9116837-e5d6-3169-80de-95f0f7e66807.roa (raw, json) Hash identifier: mK488fJTKRUWMEcHJSrWAcgef1JbYyBcaWIJdSuA/EQ= Subject key identifier: D8:F8:8D:E5:AF:35:EE:73:AE:68:C2:4C:5D:1F:98:5B:96:C1:50:F5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F03A770A829ABA6CB87D10C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b9116837-e5d6-3169-80de-95f0f7e66807.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:70:a8:29:ab:a6:cb:87:d1:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=33b004c1-f8ac-43ff-8882-2f4872fe6ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a8:ae:8f:51:b9:8f:45:c3:6b:a7:86:a0:eb: 4e:5f:76:2d:91:63:50:85:60:28:1a:43:cd:2b:17: 71:47:ec:aa:ab:0a:39:fb:12:28:c7:0c:76:a6:42: 36:26:05:22:29:4c:1f:ac:10:64:51:16:0e:42:d9: 54:5e:10:d1:77:7c:15:63:7c:8f:71:12:ae:0f:72: 2a:90:8c:aa:01:f5:c4:92:96:d9:5f:2b:98:2f:27: a8:fb:96:a7:73:b9:0d:20:8f:0b:9b:dc:6b:4d:96: 3f:e0:af:bc:f6:34:3f:c5:d1:04:97:4f:9e:f3:97: f9:70:56:dc:e7:ac:f6:e8:af:b2:1f:45:6d:39:b6: cd:b3:fb:f4:c4:62:0e:94:b7:f1:73:ad:ae:0e:ee: 79:92:e0:13:2b:2d:71:75:d7:9b:3c:de:6e:ae:49: 76:a1:20:36:96:a4:ba:c2:11:62:0b:b5:ca:00:8f: c3:86:20:7c:85:ea:60:54:ff:a0:ea:5f:5e:fa:e6: 10:35:ec:eb:d6:90:44:be:a6:9e:0d:16:f3:bb:fc: 14:7b:97:03:77:ba:98:b1:3b:4b:7f:f2:c9:01:5b: 4f:86:d0:e4:79:b9:3b:82:e0:bb:e7:2d:a0:ef:3d: cb:f6:c3:dc:35:f6:36:0e:fa:99:d7:f0:4e:32:c7: d9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F8:8D:E5:AF:35:EE:73:AE:68:C2:4C:5D:1F:98:5B:96:C1:50:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b9116837-e5d6-3169-80de-95f0f7e66807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a9:80:a6:79:5c:a1:c9:76:65:dd:26:9c:5d:c9:19:88:74: ae:e7:c7:35:10:b8:2f:2f:5e:df:e3:97:00:0f:18:c6:af:73: d4:03:41:19:a7:4b:b8:28:0a:56:3d:65:c4:34:1d:c6:bb:4e: 72:9a:eb:b3:5b:1a:72:93:34:38:33:d7:f1:c3:73:f9:b4:f6: 4e:66:e4:42:5d:df:88:1b:b7:5e:79:63:61:dd:c8:75:24:27: be:5e:e8:01:b1:8d:78:7f:3f:f2:b0:e4:42:18:96:6f:f4:bc: dc:41:36:5c:03:17:27:3e:45:04:af:2f:f4:a0:43:7e:0a:ed: 09:f7:b2:b9:a3:9d:6b:47:34:f8:da:cf:eb:94:17:85:a4:16: e9:8b:a7:b6:f1:7c:2d:73:30:eb:51:bb:90:55:3a:93:34:13: c2:4c:eb:d6:b7:0c:ba:ae:64:f5:3c:66:87:47:f8:5d:94:fd: 69:56:41:61:25:53:7a:4e:48:3c:62:64:a1:1d:40:e3:ca:8a: 9b:22:e5:99:ee:99:13:b0:2a:1e:d4:d6:6d:8f:e2:d5:1e:8e: df:08:80:56:0d:6b:de:d2:48:7d:34:2c:0b:f0:08:7b:e0:7e: fe:96:8e:d4:41:ae:a9:b5:71:c6:55:66:11:60:af:c9:74:5a: d9:f4:18:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp3CoKaumy4fRDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk MzNiMDA0YzEtZjhhYy00M2ZmLTg4ODItMmY0ODcyZmU2YWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaiuj1G5j0XDa6eGoOtOX3YtkWNQhWAoGkPN KxdxR+yqqwo5+xIoxwx2pkI2JgUiKUwfrBBkURYOQtlUXhDRd3wVY3yPcRKuD3Iq kIyqAfXEkpbZXyuYLyeo+5anc7kNII8Lm9xrTZY/4K+89jQ/xdEEl0+e85f5cFbc 56z26K+yH0VtObbNs/v0xGIOlLfxc62uDu55kuATKy1xddebPN5urkl2oSA2lqS6 whFiC7XKAI/DhiB8hepgVP+g6l9e+uYQNezr1pBEvqaeDRbzu/wUe5cDd7qYsTtL f/LJAVtPhtDkebk7guC75y2g7z3L9sPcNfY2DvqZ1/BOMsfZ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNj4jeWvNe5zrmjCTF0fmFuWwVD1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjkxMTY4MzctZTVkNi0z MTY5LTgwZGUtOTVmMGY3ZTY2ODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAapgKZ5XKHJdmXdJpxdyRmIdK7nxzUQuC8vXt/jlwAPGMavc9QDQRmn S7goClY9ZcQ0Hca7TnKa67NbGnKTNDgz1/HDc/m09k5m5EJd34gbt155Y2HdyHUk J75e6AGxjXh/P/Kw5EIYlm/0vNxBNlwDFyc+RQSvL/SgQ34K7Qn3srmjnWtHNPja z+uUF4WkFumLp7bxfC1zMOtRu5BVOpM0E8JM69a3DLquZPU8ZodH+F2U/WlWQWEl U3pOSDxiZKEdQOPKipsi5ZnumROwKh7U1m2P4tUejt8IgFYNa97SSH00LAvwCHvg fv6WjtRBrqm1ccZVZhFgr8l0Wtn0GF8= -----END CERTIFICATE-----Generated at Sat Sep 5 05:23:46 2026 by rpki-client