$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0fcfd684-59ed-3f87-ae05-3e27f96a14de.roa File: 0fcfd684-59ed-3f87-ae05-3e27f96a14de.roa (raw, json) Hash identifier: ZLWcXq2PPEeIWpU65oQh/Sx5in6M7IeCxAwoRmw6tpw= Subject key identifier: D0:D5:A0:D1:97:97:56:3C:90:88:AE:67:BE:AC:E1:6C:13:E2:CC:98 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F89A86C68090F57837F30EBC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0fcfd684-59ed-3f87-ae05-3e27f96a14de.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.153.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:6c:68:09:0f:57:83:7f:30:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=2308a550-8719-4671-97c0-52f8d76f23b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:59:5b:c0:a4:42:35:08:5e:5d:ed:e4:bc:ab: a4:6c:d6:9c:d9:4f:2f:a5:e5:d0:0f:c2:6e:ca:1a: 15:32:ce:3a:df:79:80:51:1e:20:50:ec:8c:df:a5: 15:d0:96:d9:82:27:75:bc:e9:93:c8:e6:fe:c9:84: 81:ce:2b:a5:e1:06:da:ca:9c:52:0e:c3:e9:d9:94: 27:09:b3:93:c0:9a:bf:9f:0e:a9:6e:52:76:b0:d1: 79:46:58:8a:1c:f0:75:36:d1:3a:0a:a8:ec:77:23: b1:09:1d:e1:8d:ac:87:1e:26:f4:b8:84:3e:8a:f7: 95:2d:6c:e3:cc:f3:56:ca:2c:c6:4b:51:cb:c7:37: 64:6f:e4:6b:0c:5d:54:af:55:3d:75:74:c2:d0:ff: 6c:13:be:87:66:4b:2c:a5:37:f0:6e:fd:7a:ff:87: e4:33:1a:c6:87:a1:93:3d:db:39:eb:8f:5b:d6:d8: c1:2d:c7:a7:f1:3b:4f:73:7d:1a:c3:66:e1:d8:ad: d5:e7:ee:7a:e5:f8:4b:33:fb:2f:66:99:9f:e1:e1: 06:e3:d3:d1:92:e7:d9:c8:56:c2:02:ac:77:cb:a5: 01:e9:29:0b:4a:67:53:94:27:53:14:a7:cb:50:d5: 87:a6:0f:12:d0:71:76:65:a1:76:ce:b6:71:ce:fd: 88:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D5:A0:D1:97:97:56:3C:90:88:AE:67:BE:AC:E1:6C:13:E2:CC:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0fcfd684-59ed-3f87-ae05-3e27f96a14de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:bb:1e:d8:b3:58:b4:dc:c5:ff:87:38:7a:11:67:46:31:09: 0f:8b:98:19:9b:de:90:89:59:5d:ec:54:0d:b4:4b:45:ce:ca: 37:cc:12:73:91:6a:07:21:d7:ae:10:2b:3b:e6:12:cc:9b:6e: 36:88:85:87:b9:01:4e:8a:a4:f4:0d:f2:ef:b6:f3:6b:e9:a9: 4f:31:4d:21:3c:20:16:b1:ec:0e:d1:44:a0:f2:a2:04:51:05: 8d:36:bc:8e:7a:d7:b9:cf:4c:42:59:e5:24:8e:d5:8d:b7:8c: 63:5e:73:d7:65:8f:00:01:0f:f9:10:68:03:b2:03:bb:c0:36: 58:b1:08:1c:fd:d0:11:c8:01:b5:12:b4:4e:93:87:9a:df:0e: 30:0c:ab:be:b0:4f:04:53:69:5d:7d:94:40:08:d1:d1:44:42: de:74:64:f3:e8:72:14:fe:25:61:03:fc:40:b1:d1:b5:57:8e: bb:18:40:78:5f:2d:ef:53:0c:b3:f5:2e:a8:73:7a:3a:b5:59: a6:02:0d:6f:c8:40:d1:4e:4e:fc:00:1e:93:2e:7c:80:9c:92: f8:85:dc:00:d0:2d:15:c5:ed:71:48:bd:db:14:87:ef:63:43: e0:15:18:aa:b8:d5:e3:af:7b:d5:bb:43:ac:3c:40:37:5a:ee: c5:b5:d3:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqGxoCQ9Xg38w68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk MjMwOGE1NTAtODcxOS00NjcxLTk3YzAtNTJmOGQ3NmYyM2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhllbwKRCNQheXe3kvKukbNac2U8vpeXQD8Ju yhoVMs4633mAUR4gUOyM36UV0JbZgid1vOmTyOb+yYSBziul4QbaypxSDsPp2ZQn CbOTwJq/nw6pblJ2sNF5RliKHPB1NtE6CqjsdyOxCR3hjayHHib0uIQ+iveVLWzj zPNWyizGS1HLxzdkb+RrDF1Ur1U9dXTC0P9sE76HZksspTfwbv16/4fkMxrGh6GT Pds5649b1tjBLcen8TtPc30aw2bh2K3V5+565fhLM/svZpmf4eEG49PRkufZyFbC Aqx3y6UB6SkLSmdTlCdTFKfLUNWHpg8S0HF2ZaF2zrZxzv2IvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDVoNGXl1Y8kIiuZ76s4WwT4syYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMGZjZmQ2ODQtNTllZC0z Zjg3LWFlMDUtM2UyN2Y5NmExNGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJm2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy7HtizWLTcxf+HOHoRZ0YxCQ+LmBmb3pCJWV3sVA20S0XOyjfMEnOR agch164QKzvmEsybbjaIhYe5AU6KpPQN8u+282vpqU8xTSE8IBax7A7RRKDyogRR BY02vI5617nPTEJZ5SSO1Y23jGNec9dljwABD/kQaAOyA7vANlixCBz90BHIAbUS tE6Th5rfDjAMq76wTwRTaV19lEAI0dFEQt50ZPPochT+JWED/ECx0bVXjrsYQHhf Le9TDLP1Lqhzejq1WaYCDW/IQNFOTvwAHpMufICckviF3ADQLRXF7XFIvdsUh+9j Q+AVGKq41eOve9W7Q6w8QDda7sW107w= -----END CERTIFICATE-----Generated at Mon Oct 26 23:28:07 2026 by rpki-client