$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e0bd01d-65c2-33cc-9974-f5fbd98fc2d7.roa File: 4e0bd01d-65c2-33cc-9974-f5fbd98fc2d7.roa (raw, json) Hash identifier: fFPTsAXABJiF5aNVpd691fZtnV1ASBvZwtaO23hWkVg= Subject key identifier: 77:44:7C:DF:09:64:A5:4F:8C:6B:92:62:70:35:1A:78:55:FF:64:5C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F89A855D99334CB0E18B3A780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e0bd01d-65c2-33cc-9974-f5fbd98fc2d7.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.153.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:55:d9:93:34:cb:0e:18:b3:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=29ba3634-ddf9-4a26-9f9b-ce88df003016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b0:55:a7:e9:70:24:cf:22:57:e8:1a:50:9e: 91:79:47:9c:50:86:b5:99:7f:8c:9d:5f:7d:19:ba: 95:0d:bb:ff:31:27:a0:e3:07:94:12:21:dd:56:cd: 2a:a6:83:d1:f5:e2:11:71:6f:6b:c9:78:ce:38:2b: d0:82:4c:8e:42:b2:7c:c9:00:21:4c:9c:c9:39:b4: cd:80:cc:31:c7:45:58:13:d5:d6:1f:e8:9b:e8:2a: 25:55:5b:bb:81:99:21:a1:30:35:02:7c:18:96:7d: 1b:1b:f3:5c:c3:26:d2:1e:5b:1e:65:a4:da:4e:c5: cd:17:cc:42:4a:17:83:61:20:e0:7e:e4:74:57:5c: 46:28:0b:d7:d8:ea:f6:7a:d2:d3:56:b9:58:41:b7: ae:25:a3:74:6d:c4:c6:fb:09:14:1e:4f:5f:1d:33: a4:1c:0c:38:9f:57:f3:3d:89:42:ef:fd:97:0f:1c: 29:16:bf:78:f5:c0:19:54:27:12:be:b9:1c:b0:9f: a8:9e:38:3d:aa:79:95:ac:8f:76:25:60:d7:db:6c: 0f:b5:05:2a:97:47:a6:b5:f0:50:63:21:04:76:d1: 00:de:51:56:a3:52:f8:03:d5:49:80:db:86:e0:4e: 97:30:fd:59:1f:bb:c8:d3:4b:e8:5e:3e:54:51:fa: ad:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:44:7C:DF:09:64:A5:4F:8C:6B:92:62:70:35:1A:78:55:FF:64:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e0bd01d-65c2-33cc-9974-f5fbd98fc2d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:01:7a:e5:16:91:8f:df:d1:c7:1c:c9:6e:7d:a3:8b:a5:b3: ad:56:17:2e:05:1d:83:8d:08:6f:51:e2:1e:8f:9c:bf:29:52: 11:0d:24:e7:02:52:62:55:3a:02:c4:67:40:a7:4b:62:6f:d0: a1:3e:0c:52:ab:9c:cd:be:2e:df:92:04:b0:f1:4e:ef:a8:b5: ac:b3:0f:24:c8:11:70:3d:66:c5:d5:32:03:66:77:94:eb:52: 49:82:68:cf:19:2f:37:30:fd:e1:2d:94:8c:a4:2a:9f:73:b6: 56:35:72:bf:db:52:19:a7:07:cf:78:5b:01:67:1c:c9:a3:41: 8b:e1:df:c0:ca:5c:9b:aa:8d:6f:ac:f9:4c:2a:25:37:c8:26: 4d:77:8f:41:7d:9f:bb:8a:0f:da:01:33:e9:3e:1a:7d:da:8a: 17:70:2d:b6:10:c6:15:af:ed:68:23:87:f2:c2:9a:6b:01:11: eb:cb:a5:ad:18:69:3a:9c:8d:77:ba:94:cd:3c:ed:fb:4e:48: 55:de:5a:2e:ce:1b:e0:24:67:11:26:40:cd:a0:13:09:bb:2c: 18:7d:96:98:90:6a:27:e6:c4:42:78:c7:60:5f:15:45:af:b3: e6:84:78:52:e6:10:87:ad:41:17:cc:e9:5e:c5:fd:af:03:0c: 6c:e3:32:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqFXZkzTLDhizp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk MjliYTM2MzQtZGRmOS00YTI2LTlmOWItY2U4OGRmMDAzMDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7BVp+lwJM8iV+gaUJ6ReUecUIa1mX+MnV99 GbqVDbv/MSeg4weUEiHdVs0qpoPR9eIRcW9ryXjOOCvQgkyOQrJ8yQAhTJzJObTN gMwxx0VYE9XWH+ib6ColVVu7gZkhoTA1AnwYln0bG/NcwybSHlseZaTaTsXNF8xC SheDYSDgfuR0V1xGKAvX2Or2etLTVrlYQbeuJaN0bcTG+wkUHk9fHTOkHAw4n1fz PYlC7/2XDxwpFr949cAZVCcSvrkcsJ+onjg9qnmVrI92JWDX22wPtQUql0emtfBQ YyEEdtEA3lFWo1L4A9VJgNuG4E6XMP1ZH7vI00voXj5UUfqt/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdEfN8JZKVPjGuSYnA1GnhV/2RcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGUwYmQwMWQtNjVjMi0z M2NjLTk5NzQtZjVmYmQ5OGZjMmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJm8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHABeuUWkY/f0cccyW59o4uls61WFy4FHYONCG9R4h6PnL8pUhENJOcC UmJVOgLEZ0CnS2Jv0KE+DFKrnM2+Lt+SBLDxTu+otayzDyTIEXA9ZsXVMgNmd5Tr UkmCaM8ZLzcw/eEtlIykKp9ztlY1cr/bUhmnB894WwFnHMmjQYvh38DKXJuqjW+s +UwqJTfIJk13j0F9n7uKD9oBM+k+Gn3aihdwLbYQxhWv7Wgjh/LCmmsBEevLpa0Y aTqcjXe6lM087ftOSFXeWi7OG+AkZxEmQM2gEwm7LBh9lpiQaifmxEJ4x2BfFUWv s+aEeFLmEIetQRfM6V7F/a8DDGzjMqA= -----END CERTIFICATE-----Generated at Sun Oct 25 21:57:03 2026 by rpki-client