$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c073bdde-3133-316c-aca0-6453facdfded.roa File: c073bdde-3133-316c-aca0-6453facdfded.roa (raw, json) Hash identifier: OPrODZcn5pLtkMfCPok8Kr9PpP4fyZ0Yi2Oax5EJ1zQ= Subject key identifier: 3B:EB:CA:EA:D5:CA:49:8F:F4:F2:71:91:FB:60:83:3F:2C:B4:D0:A6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EC0A756D404BAEFF638A9AC00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c073bdde-3133-316c-aca0-6453facdfded.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:56:d4:04:ba:ef:f6:38:a9:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=85cc7791-d891-4ab3-ae65-6dfe62e2b8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3a:e7:37:42:3c:3d:60:62:63:c4:ef:3c:e0: 15:41:e0:86:13:25:f6:2b:d9:9c:35:31:55:d8:73: 99:19:ac:00:3f:3f:1f:d4:47:dd:4f:a6:ca:c9:32: 30:c4:54:89:bb:8f:69:a1:2b:2a:69:fe:38:f3:36: f0:1b:53:3e:5f:8e:24:95:69:0f:fe:11:a8:ff:cd: 86:93:49:f9:1f:3f:2a:75:e3:0a:b3:54:77:4c:f7: 81:c0:e5:88:64:82:d7:ca:53:c1:5c:f5:71:1b:b2: 73:88:91:a8:f9:dc:e9:32:b9:6b:58:6c:f1:67:9f: fe:99:e0:04:e0:2d:23:9d:2c:32:a7:bf:30:88:fa: 8d:69:7c:8e:1f:c3:2c:52:2a:d1:58:f1:e9:41:ff: 87:3c:ec:40:2b:57:45:fe:8f:1e:bc:65:37:34:14: 5f:b4:de:86:0d:b6:62:3c:a0:78:b7:87:f8:aa:56: 01:d3:92:ad:42:26:fd:e5:c7:f8:0a:56:fb:ab:06: 7f:e4:a3:df:26:c2:2c:ed:ec:b9:96:19:8b:4c:de: 16:cd:9f:35:7e:96:cc:5c:f0:f9:f8:68:c0:98:da: 64:b4:87:7e:15:da:1d:ea:79:e0:44:f0:e7:2f:62: 07:23:d3:43:ff:3e:97:1e:0f:74:b1:63:a7:78:14: 4f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EB:CA:EA:D5:CA:49:8F:F4:F2:71:91:FB:60:83:3F:2C:B4:D0:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c073bdde-3133-316c-aca0-6453facdfded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:7d:bf:8e:ba:5c:15:9c:d5:6d:40:cf:52:39:6e:7e:fd:c1: 85:8d:e8:96:f2:13:c9:16:29:9e:e7:c8:ff:e1:c6:07:34:3b: 87:a9:9d:8c:9c:bb:4b:cc:df:2e:29:3d:ad:d7:c4:9e:7a:ef: 68:19:c0:a3:6e:1c:3a:1f:7c:86:3f:95:f7:e4:b1:2f:26:64: 2d:67:61:4d:ef:85:f4:95:45:69:af:49:7f:3a:ac:57:e8:12: e1:f8:51:97:a3:3f:ab:18:2e:9e:97:9e:9c:1f:1b:f2:d0:45: 83:47:53:02:6b:8d:82:b3:a5:63:a8:2d:24:54:d1:05:8e:aa: 03:29:23:75:8a:00:f7:ac:89:3a:d8:da:cd:04:64:08:90:da: d2:96:e1:75:0b:7d:d3:57:f7:f7:38:fb:91:80:37:c8:88:8d: 93:de:24:03:91:ef:f4:53:c3:43:15:19:5e:14:20:07:2f:21: c1:37:52:83:30:bd:de:3e:12:bf:2a:76:14:b8:5d:04:27:17: 96:7d:00:50:56:f3:f4:a0:46:83:e4:f5:71:5d:f1:ed:67:ea: e1:42:bc:fb:3e:0c:3e:b2:4f:cb:52:e9:64:f8:3a:fe:28:ea: 3b:24:9b:53:07:dc:28:ba:d1:8d:5d:f3:db:61:33:4c:3e:ff: ca:23:b6:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ap1bUBLrv9jiprAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk ODVjYzc3OTEtZDg5MS00YWIzLWFlNjUtNmRmZTYyZTJiOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjrnN0I8PWBiY8TvPOAVQeCGEyX2K9mcNTFV 2HOZGawAPz8f1EfdT6bKyTIwxFSJu49poSsqaf448zbwG1M+X44klWkP/hGo/82G k0n5Hz8qdeMKs1R3TPeBwOWIZILXylPBXPVxG7JziJGo+dzpMrlrWGzxZ5/+meAE 4C0jnSwyp78wiPqNaXyOH8MsUirRWPHpQf+HPOxAK1dF/o8evGU3NBRftN6GDbZi PKB4t4f4qlYB05KtQib95cf4Clb7qwZ/5KPfJsIs7ey5lhmLTN4WzZ81fpbMXPD5 +GjAmNpktId+Fdod6nngRPDnL2IHI9ND/z6XHg90sWOneBRPNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvryurVykmP9PJxkftggz8stNCmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzA3M2JkZGUtMzEzMy0z MTZjLWFjYTAtNjQ1M2ZhY2RmZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIp9v466XBWc1W1Az1I5bn79wYWN6JbyE8kWKZ7nyP/hxgc0O4epnYyc u0vM3y4pPa3XxJ5672gZwKNuHDoffIY/lffksS8mZC1nYU3vhfSVRWmvSX86rFfo EuH4UZejP6sYLp6XnpwfG/LQRYNHUwJrjYKzpWOoLSRU0QWOqgMpI3WKAPesiTrY 2s0EZAiQ2tKW4XULfdNX9/c4+5GAN8iIjZPeJAOR7/RTw0MVGV4UIAcvIcE3UoMw vd4+Er8qdhS4XQQnF5Z9AFBW8/SgRoPk9XFd8e1n6uFCvPs+DD6yT8tS6WT4Ov4o 6jskm1MH3Ci60Y1d89thM0w+/8ojtr4= -----END CERTIFICATE-----Generated at Sat Sep 5 06:41:54 2026 by rpki-client