$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ed885da4-8827-3389-9c4b-0565e2121678.roa File: ed885da4-8827-3389-9c4b-0565e2121678.roa (raw, json) Hash identifier: TcR0q2R/i/FFnYcVEVYwo3BJXVyvddN1rooTpbjvn6g= Subject key identifier: D6:EB:BC:EA:40:EB:26:ED:03:A7:29:5E:D0:8B:90:30:36:4C:E8:8D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA796F4505AE608A6EBF23C00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ed885da4-8827-3389-9c4b-0565e2121678.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.153.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:f4:50:5a:e6:08:a6:eb:f2:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=043795ce-e5e0-4bd1-afb1-8b951a272080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:40:46:dc:ac:bd:41:41:42:64:a1:9f:e7:56: 5b:f7:36:bd:bb:73:b5:e9:d2:4d:ce:04:c2:df:22: ff:62:a4:bd:fe:96:f8:c2:7f:a1:9a:83:b9:cb:f0: ad:8c:3b:8f:90:1b:4b:aa:f3:30:55:0b:03:77:63: 57:c2:6c:b4:14:59:74:a8:88:e6:b8:e1:af:e4:61: 3d:0c:06:a5:0a:0e:05:01:85:bc:c0:74:f7:2a:29: 17:2c:e5:3a:d0:d6:2c:24:36:35:f7:12:a3:c1:a7: 55:c7:1d:b1:3f:39:b9:01:90:d0:f9:24:1a:b8:03: 40:72:46:0c:e5:61:52:8a:93:30:a4:8b:ba:62:cd: dd:f1:e1:df:74:8e:2b:bf:6c:d9:e1:13:fa:79:03: d4:1b:b6:aa:3e:bd:e7:a3:e9:6b:f7:f4:a7:7d:3f: 33:81:be:a7:48:95:3c:b6:03:2c:80:93:26:c3:59: 25:03:4a:7c:0a:c4:41:90:5a:2e:0c:7f:49:bd:26: 53:49:22:83:74:5b:4f:d5:e3:01:f0:2d:f0:78:18: 45:a3:43:44:79:8b:c2:ec:e7:df:5e:3b:1c:0b:fa: aa:c6:cd:99:cd:55:eb:a4:f8:90:71:af:7a:09:18: 10:fb:d8:71:e9:dc:fc:9c:60:57:f4:04:0d:99:7e: e2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EB:BC:EA:40:EB:26:ED:03:A7:29:5E:D0:8B:90:30:36:4C:E8:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ed885da4-8827-3389-9c4b-0565e2121678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:23:8d:1d:1d:0b:b2:7b:df:3e:a9:f4:a3:8f:13:4b:36:4f: e1:a9:9b:47:e2:b1:21:74:aa:98:89:55:93:75:d2:82:f4:dc: 61:3e:e5:22:f4:ab:71:44:7e:47:72:a9:0b:4e:0e:5d:d7:1c: cb:9d:39:0d:81:47:2f:7a:bc:cb:d4:18:14:ba:5e:d5:47:4f: 37:47:bf:4c:9c:80:d8:cb:e9:01:81:b2:0a:93:64:06:cb:5d: 08:03:a5:0f:de:ae:95:4f:af:f1:73:0c:89:31:1b:8b:26:69: 6a:86:f5:e6:a5:08:9e:59:8e:53:6b:54:21:cb:46:8d:c5:ea: a4:32:7b:1e:f0:54:ba:91:eb:72:17:62:dc:41:c4:8e:5e:0f: c5:31:1e:ee:01:0c:e9:d0:8e:a4:92:5e:ff:bb:b8:c3:ad:c6: a0:68:a1:0f:06:c3:ca:a8:7c:8a:54:79:4a:2e:c7:40:85:2a: 30:2e:05:bd:c2:ff:14:9f:a8:34:a6:9f:0c:72:c6:d2:68:94: 82:3b:fb:02:26:24:33:eb:52:ae:77:8d:54:19:36:7c:c4:5e: 0f:f2:d1:b6:41:68:b3:38:42:94:b8:b9:1f:e5:7c:0e:10:f0: 1d:0d:76:0f:18:d7:ae:be:91:76:a0:c2:3f:b2:14:fb:c5:2f: 06:56:97:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlvRQWuYIpuvyPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDQzNzk1Y2UtZTVlMC00YmQxLWFmYjEtOGI5NTFhMjcyMDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80BG3Ky9QUFCZKGf51Zb9za9u3O16dJNzgTC 3yL/YqS9/pb4wn+hmoO5y/CtjDuPkBtLqvMwVQsDd2NXwmy0FFl0qIjmuOGv5GE9 DAalCg4FAYW8wHT3KikXLOU60NYsJDY19xKjwadVxx2xPzm5AZDQ+SQauANAckYM 5WFSipMwpIu6Ys3d8eHfdI4rv2zZ4RP6eQPUG7aqPr3no+lr9/SnfT8zgb6nSJU8 tgMsgJMmw1klA0p8CsRBkFouDH9JvSZTSSKDdFtP1eMB8C3weBhFo0NEeYvC7Off XjscC/qqxs2ZzVXrpPiQca96CRgQ+9hx6dz8nGBX9AQNmX7iNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbrvOpA6ybtA6cpXtCLkDA2TOiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWQ4ODVkYTQtODgyNy0z Mzg5LTljNGItMDU2NWUyMTIxNjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcjjR0dC7J73z6p9KOPE0s2T+Gpm0fisSF0qpiJVZN10oL03GE+5SL0 q3FEfkdyqQtODl3XHMudOQ2BRy96vMvUGBS6XtVHTzdHv0ycgNjL6QGBsgqTZAbL XQgDpQ/erpVPr/FzDIkxG4smaWqG9ealCJ5ZjlNrVCHLRo3F6qQyex7wVLqR63IX YtxBxI5eD8UxHu4BDOnQjqSSXv+7uMOtxqBooQ8Gw8qofIpUeUoux0CFKjAuBb3C /xSfqDSmnwxyxtJolII7+wImJDPrUq53jVQZNnzEXg/y0bZBaLM4QpS4uR/lfA4Q 8B0Ndg8Y166+kXagwj+yFPvFLwZWl4M= -----END CERTIFICATE-----Generated at Sat Sep 5 09:41:52 2026 by rpki-client