$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6d643aa4-9a8c-3d27-8dac-dec8d34cd22c.roa File: 6d643aa4-9a8c-3d27-8dac-dec8d34cd22c.roa (raw, json) Hash identifier: TAxxLuv7hFgy1CIGFqruAYGv/jcAJyVgMCe6iANAr24= Subject key identifier: 7C:7B:4E:18:24:ED:F5:44:B0:98:7E:64:3B:36:00:34:78:EC:C0:E7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F89A8887B3D44EA03240CD700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6d643aa4-9a8c-3d27-8dac-dec8d34cd22c.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.153.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:88:7b:3d:44:ea:03:24:0c:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=c649afe3-9d50-451f-a35f-f53819943c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6b:84:86:98:1d:c7:db:26:ea:fd:d5:fc:3a: a9:bb:80:f5:a7:24:29:3b:ea:57:60:99:c8:53:b7: fc:e0:e0:eb:00:ff:5a:78:35:3d:ed:92:9d:9d:c4: e5:9e:b6:12:e3:70:5f:73:e4:d2:b6:45:eb:0d:3a: 2b:41:f4:a8:8e:0c:e3:2d:7c:f1:71:01:4f:7b:f5: 9f:60:18:aa:53:5d:07:77:5f:34:33:35:18:65:ee: d1:d0:52:d4:8b:0d:d7:3b:27:01:52:13:66:b0:6f: 41:b2:68:d7:b6:43:bd:98:32:6b:31:b9:b2:cf:eb: 26:a9:dc:9b:c5:97:4c:40:62:80:c7:74:35:98:1c: b6:ca:96:35:fc:2a:8a:92:cc:a6:5b:c4:cb:e7:1b: 1b:b1:fb:61:b1:7c:90:7c:4e:1c:0d:47:2a:ba:ff: 4c:61:d9:49:e4:d1:4a:88:4b:96:bf:e6:e2:46:68: 57:17:c1:4a:c7:51:dd:13:bf:b5:16:ed:fc:e7:5f: 4f:a5:00:c2:f4:19:17:e9:a4:11:4b:90:9f:5b:f3: 31:73:73:4b:08:97:7a:d1:c8:72:ed:b1:ec:9f:2d: fa:9e:a0:2b:54:ac:5b:b9:13:2c:b6:ae:b0:14:63: 01:be:b6:c8:31:41:ff:b3:af:7a:bf:38:b5:dd:10: 4c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7B:4E:18:24:ED:F5:44:B0:98:7E:64:3B:36:00:34:78:EC:C0:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6d643aa4-9a8c-3d27-8dac-dec8d34cd22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ef:d1:45:20:dd:17:c8:f9:13:55:f0:e1:ef:11:6e:63:e7: fb:c7:85:24:c1:76:18:41:63:00:09:ee:cd:0b:c6:4b:3c:a1: 47:96:45:0e:9b:f7:da:da:23:72:84:eb:8c:2f:83:69:5d:42: e8:37:09:4d:5e:f6:32:84:12:78:f3:3e:5f:ee:6d:b8:ad:38: 4c:58:cd:fd:d8:d4:47:88:69:64:92:75:9b:45:4b:64:52:4e: 72:3b:b0:66:e3:0a:7e:34:39:2e:8b:8f:2b:58:a9:e0:04:9d: a6:f5:da:ef:6c:14:a6:e6:9d:b8:6b:b2:64:4e:aa:bd:2d:81: 5d:be:55:95:60:1e:e1:be:bc:f9:17:f9:6e:ae:2c:c0:1f:a1: 7e:6d:c6:38:21:c9:7c:70:da:0e:23:b4:13:3e:b7:9f:cc:6f: 7d:3f:5b:54:2d:cd:2d:f6:b1:48:eb:ec:d7:0e:f4:8d:c5:34: d2:fa:d4:81:41:bd:96:84:48:4c:18:85:ed:14:93:2c:0d:03: 4f:32:6b:4e:4c:03:52:89:2b:af:6c:80:f4:71:d9:4c:9d:fe: ce:b2:8d:0e:1d:75:28:c7:6a:82:77:51:2e:99:b9:be:a6:84: 39:62:b4:78:7a:78:b3:76:45:d4:63:58:5d:69:a8:4f:20:ac: 15:e9:2f:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqIh7PUTqAyQM1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk YzY0OWFmZTMtOWQ1MC00NTFmLWEzNWYtZjUzODE5OTQzYzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2uEhpgdx9sm6v3V/Dqpu4D1pyQpO+pXYJnI U7f84ODrAP9aeDU97ZKdncTlnrYS43Bfc+TStkXrDTorQfSojgzjLXzxcQFPe/Wf YBiqU10Hd180MzUYZe7R0FLUiw3XOycBUhNmsG9BsmjXtkO9mDJrMbmyz+smqdyb xZdMQGKAx3Q1mBy2ypY1/CqKksymW8TL5xsbsfthsXyQfE4cDUcquv9MYdlJ5NFK iEuWv+biRmhXF8FKx1HdE7+1Fu38519PpQDC9BkX6aQRS5CfW/Mxc3NLCJd60chy 7bHsny36nqArVKxbuRMstq6wFGMBvrbIMUH/s696vzi13RBMpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHx7Thgk7fVEsJh+ZDs2ADR47MDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmQ2NDNhYTQtOWE4Yy0z ZDI3LThkYWMtZGVjOGQzNGNkMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzv0UUg3RfI+RNV8OHvEW5j5/vHhSTBdhhBYwAJ7s0Lxks8oUeWRQ6b 99raI3KE64wvg2ldQug3CU1e9jKEEnjzPl/ubbitOExYzf3Y1EeIaWSSdZtFS2RS TnI7sGbjCn40OS6LjytYqeAEnab12u9sFKbmnbhrsmROqr0tgV2+VZVgHuG+vPkX +W6uLMAfoX5txjghyXxw2g4jtBM+t5/Mb30/W1QtzS32sUjr7NcO9I3FNNL61IFB vZaESEwYhe0UkywNA08ya05MA1KJK69sgPRx2Uyd/s6yjQ4ddSjHaoJ3US6Zub6m hDlitHh6eLN2RdRjWF1pqE8grBXpL1o= -----END CERTIFICATE-----Generated at Mon Oct 26 02:28:41 2026 by rpki-client