$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2769b3a2-36fe-373a-8f7c-d074a06dd960.roa File: 2769b3a2-36fe-373a-8f7c-d074a06dd960.roa (raw, json) Hash identifier: 3XpoZMZyRwQbfF928Cg6sToxD/9zSrb5BPess71xx3Q= Subject key identifier: 9D:7F:86:63:EA:AB:07:0B:FE:77:A4:AA:35:C0:E5:F0:B0:94:E0:65 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F89A889D48EF7808EBE9CCA80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2769b3a2-36fe-373a-8f7c-d074a06dd960.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.153.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:89:d4:8e:f7:80:8e:be:9c:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=e717ce84-ea00-4414-baf9-24c1cdfe78a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d5:74:65:18:91:f2:65:6f:3b:52:b7:7b:1a: 32:61:d0:74:e8:3e:07:3a:44:05:6d:1d:a6:31:e1: 99:da:7a:10:28:a2:ff:75:86:6a:6a:ba:f1:25:69: 21:24:f8:4e:f6:82:30:51:0a:35:53:37:30:27:f0: 3b:d6:7a:4c:71:11:5e:a5:93:79:8b:7f:8f:13:4e: 04:c8:c6:45:a5:c5:7f:a1:9e:6f:93:0b:67:7b:a5: b4:23:4e:1d:9c:a5:df:42:94:b8:dc:09:cc:50:3d: b6:57:10:70:22:a5:ad:1f:18:e9:e3:d3:5d:21:9a: 65:be:b3:96:f5:9c:aa:7c:47:85:be:8e:ed:ee:3e: 1d:bd:b2:9a:ff:21:8d:bf:a6:15:b8:aa:ab:09:53: 3a:0c:f2:a7:96:f7:2d:43:cd:d7:3e:41:1d:1b:c0: 53:da:e8:e2:be:90:fc:5d:6f:56:4d:2a:e0:7b:5e: d1:0e:34:5d:81:8c:ba:54:f2:1c:f9:9f:39:bc:ba: 69:44:da:25:3b:1d:0a:f1:1c:61:9f:cf:c2:30:9a: 28:5b:ee:5a:ec:27:48:57:7d:b4:72:5b:9d:ff:39: 97:b3:c4:0c:20:bd:e8:a9:2f:86:73:10:fb:cc:0e: 82:0f:dd:bd:75:6f:3a:1f:54:8e:89:9b:f1:5b:d4: df:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7F:86:63:EA:AB:07:0B:FE:77:A4:AA:35:C0:E5:F0:B0:94:E0:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2769b3a2-36fe-373a-8f7c-d074a06dd960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b3:c7:8c:c8:9b:b0:a4:88:57:94:a4:41:49:41:34:63:df: 3d:9d:c8:eb:bd:a3:93:33:9a:a5:77:92:b5:bc:a0:95:f0:01: d8:61:73:ca:3f:c1:22:84:13:0f:1e:14:c2:b5:48:37:f6:28: 7e:0f:e6:6d:17:be:40:8c:41:71:4a:06:2e:0e:ad:d9:6c:7f: 2e:67:c2:a1:28:0d:ca:05:67:6b:19:f0:34:8b:e3:3a:87:21: 06:c5:e3:1e:56:be:c7:b1:b2:1b:d8:cc:d7:fe:51:2c:a5:02: 9f:4d:95:e1:9e:76:7f:a0:1d:e9:8d:08:fe:ab:fe:6e:bf:ee: 11:ea:bd:5c:4e:0d:c1:ef:ce:d9:32:a8:e4:22:ad:73:5c:82: e5:95:d8:25:dd:23:d2:f4:75:26:b1:c4:51:3b:3d:f2:df:dc: 50:c8:a7:bb:43:68:9d:ba:9f:e3:9a:88:73:86:db:68:da:7b: 9c:fa:13:11:e8:3c:a8:33:0e:6d:a1:3f:ee:93:97:11:5c:f1: 97:d0:a7:6e:b4:7c:95:c4:02:ab:16:67:02:b8:6b:3e:84:05: df:44:cc:12:8d:75:44:df:59:85:bf:6b:87:2a:2c:4b:4c:ac: 22:12:7c:71:44:73:72:8a:45:c9:89:7b:8c:85:00:b5:f3:21: 37:a1:cb:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqInUjveAjr6cyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk ZTcxN2NlODQtZWEwMC00NDE0LWJhZjktMjRjMWNkZmU3OGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdV0ZRiR8mVvO1K3exoyYdB06D4HOkQFbR2m MeGZ2noQKKL/dYZqarrxJWkhJPhO9oIwUQo1UzcwJ/A71npMcRFepZN5i3+PE04E yMZFpcV/oZ5vkwtne6W0I04dnKXfQpS43AnMUD22VxBwIqWtHxjp49NdIZplvrOW 9ZyqfEeFvo7t7j4dvbKa/yGNv6YVuKqrCVM6DPKnlvctQ83XPkEdG8BT2ujivpD8 XW9WTSrge17RDjRdgYy6VPIc+Z85vLppRNolOx0K8Rxhn8/CMJooW+5a7CdIV320 clud/zmXs8QMIL3oqS+GcxD7zA6CD929dW86H1SOiZvxW9TfBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1/hmPqqwcL/nekqjXA5fCwlOBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjc2OWIzYTItMzZmZS0z NzNhLThmN2MtZDA3NGEwNmRkOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmzx4zIm7CkiFeUpEFJQTRj3z2dyOu9o5MzmqV3krW8oJXwAdhhc8o/ wSKEEw8eFMK1SDf2KH4P5m0XvkCMQXFKBi4Ordlsfy5nwqEoDcoFZ2sZ8DSL4zqH IQbF4x5WvsexshvYzNf+USylAp9NleGedn+gHemNCP6r/m6/7hHqvVxODcHvztky qOQirXNcguWV2CXdI9L0dSaxxFE7PfLf3FDIp7tDaJ26n+OaiHOG22jae5z6ExHo PKgzDm2hP+6TlxFc8ZfQp260fJXEAqsWZwK4az6EBd9EzBKNdUTfWYW/a4cqLEtM rCISfHFEc3KKRcmJe4yFALXzITehy9M= -----END CERTIFICATE-----Generated at Tue Oct 27 17:29:02 2026 by rpki-client