$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/03589c13-2674-3c2a-9613-1890ef2dc1c7.roa File: 03589c13-2674-3c2a-9613-1890ef2dc1c7.roa (raw, json) Hash identifier: zh5QgRcGE/mj0Lq1lNHdv+87nBB+3dnO2ZmE5dTT3jo= Subject key identifier: B6:54:30:2B:C4:11:F1:DD:42:6A:65:50:98:45:14:DD:FF:1E:CB:A7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F8F3DF3A953ECD22D7E08D100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/03589c13-2674-3c2a-9613-1890ef2dc1c7.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:f3:a9:53:ec:d2:2d:7e:08:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=0cecaa81-ce6a-4c81-80ac-e4e0a1e620bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d1:ee:4d:80:30:65:0f:b8:f8:02:c3:3e:6f: bc:ad:f9:e5:d7:c2:d5:d8:f1:20:51:26:d0:ed:ca: 03:ed:e4:c7:c2:29:31:ca:d4:84:a4:fd:6a:ce:bd: f9:28:0d:57:47:59:26:dd:aa:a4:42:93:c6:0a:40: 49:a5:a6:1f:26:18:0c:60:9c:eb:7c:3d:d9:3d:09: a7:42:9a:de:77:26:02:8c:d8:32:5b:38:95:f2:b7: b5:8b:f3:e5:13:40:46:9b:7e:76:f2:2c:cf:5a:d7: 3e:e8:de:fb:24:ac:07:f4:1e:71:cd:96:70:3e:31: 5a:95:8c:fe:ef:9f:02:cf:84:31:ac:b4:9e:c9:dc: 00:42:d5:3c:f0:23:8b:1b:1e:45:e6:a3:58:60:91: 55:73:58:a6:e3:8f:05:16:75:30:76:eb:59:b8:42: 40:e0:f5:a1:21:1e:89:c9:d3:80:e7:b6:d1:ad:d5: b0:38:0b:5c:1e:77:99:33:7c:3f:84:92:3a:ac:b5: 56:b4:80:be:0f:3a:da:3d:0b:b2:0a:1e:67:13:30: 21:4a:5f:65:08:5a:7f:cc:35:b8:27:6c:b2:3d:6a: b6:26:a8:b7:5c:d4:1b:eb:bb:d6:d0:03:58:62:52: 5e:66:ae:a8:ef:37:c8:36:b3:4e:75:c4:7b:c4:c8: d9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:54:30:2B:C4:11:F1:DD:42:6A:65:50:98:45:14:DD:FF:1E:CB:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/03589c13-2674-3c2a-9613-1890ef2dc1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:5f:35:2b:7d:95:96:76:1a:e8:23:1d:6a:e4:5a:24:75:0a: 10:ba:e8:6d:c2:bc:83:82:2d:78:89:6d:2e:26:e3:35:a5:ad: 74:56:0c:df:4f:dc:10:0b:94:1b:e1:6e:99:f0:0c:0f:a7:6d: 81:fc:a0:43:f8:b9:06:74:ab:4f:ec:ae:74:7a:77:29:a2:66: cb:8b:b9:5f:c9:4d:13:7f:ce:e9:30:16:14:54:15:85:df:12: 80:1c:66:c9:38:76:4b:24:92:57:55:83:02:81:bb:ab:ac:a9: b9:de:b2:0a:fd:5e:39:49:8a:ae:c6:72:56:05:de:26:ae:6b: b2:fe:de:f9:0a:3f:a4:a2:66:2a:0b:80:70:08:ff:32:f5:40: 30:8f:a1:34:d1:00:63:1f:49:74:23:2c:c7:1f:12:eb:31:32: 12:c5:81:17:bd:9e:82:d8:b0:de:dc:76:d1:22:e9:1f:1b:7d: 74:4b:e6:6e:a4:4b:11:54:7b:cd:85:35:0b:f0:97:6b:45:30: cf:0c:1c:ad:9c:25:d9:ed:84:5a:ef:cd:2b:57:10:31:2e:84: bd:a5:44:3b:af:d2:f7:e3:99:3a:51:68:97:cf:82:21:77:0e: 6a:ac:dc:25:d3:32:4d:47:c8:8f:d2:df:ee:f3:0a:d5:8c:80: 62:bb:98:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPfOpU+zSLX4I0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk MGNlY2FhODEtY2U2YS00YzgxLTgwYWMtZTRlMGExZTYyMGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9HuTYAwZQ+4+ALDPm+8rfnl18LV2PEgUSbQ 7coD7eTHwikxytSEpP1qzr35KA1XR1km3aqkQpPGCkBJpaYfJhgMYJzrfD3ZPQmn QpredyYCjNgyWziV8re1i/PlE0BGm3528izPWtc+6N77JKwH9B5xzZZwPjFalYz+ 758Cz4QxrLSeydwAQtU88COLGx5F5qNYYJFVc1im448FFnUwdutZuEJA4PWhIR6J ydOA57bRrdWwOAtcHneZM3w/hJI6rLVWtIC+DzraPQuyCh5nEzAhSl9lCFp/zDW4 J2yyPWq2Jqi3XNQb67vW0ANYYlJeZq6o7zfINrNOdcR7xMjZMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZUMCvEEfHdQmplUJhFFN3/HsunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDM1ODljMTMtMjY3NC0z YzJhLTk2MTMtMTg5MGVmMmRjMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNfNSt9lZZ2GugjHWrkWiR1ChC66G3CvIOCLXiJbS4m4zWlrXRWDN9P 3BALlBvhbpnwDA+nbYH8oEP4uQZ0q0/srnR6dymiZsuLuV/JTRN/zukwFhRUFYXf EoAcZsk4dkskkldVgwKBu6usqbnesgr9XjlJiq7GclYF3iaua7L+3vkKP6SiZioL gHAI/zL1QDCPoTTRAGMfSXQjLMcfEusxMhLFgRe9noLYsN7cdtEi6R8bfXRL5m6k SxFUe82FNQvwl2tFMM8MHK2cJdnthFrvzStXEDEuhL2lRDuv0vfjmTpRaJfPgiF3 Dmqs3CXTMk1HyI/S3+7zCtWMgGK7mGI= -----END CERTIFICATE-----Generated at Tue Oct 27 01:55:12 2026 by rpki-client