$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d0c868c-622f-3528-9fd1-29db14f7e967.roa File: 7d0c868c-622f-3528-9fd1-29db14f7e967.roa (raw, json) Hash identifier: YCB4oO+LUsXROKiBvn6iYqM/ptTwcJ4F5Mw/8Ng7mdc= Subject key identifier: A6:52:34:38:73:7E:F0:64:16:2C:3C:B3:79:9B:A5:4D:49:83:31:62 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F89A857477EF435B180592C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d0c868c-622f-3528-9fd1-29db14f7e967.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.153.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:57:47:7e:f4:35:b1:80:59:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=615fdee1-0011-4d7f-8d9a-17249626795f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ba:8b:7e:7e:60:81:a4:0f:8a:76:c8:08:b7: b0:51:5b:c4:bc:f8:e3:1a:21:e3:e2:9e:97:da:60: bf:ca:32:71:14:a6:3c:4b:3e:f4:7d:95:68:c2:ec: 2f:00:26:72:59:78:69:b8:c0:19:8b:32:d1:a4:1f: 20:fe:d6:b8:90:48:22:90:5c:e8:27:3b:1e:22:87: 0a:e7:92:73:36:9d:8f:03:b3:a9:c8:09:93:8b:0e: c8:e8:75:54:9b:d9:57:d6:ec:04:99:d8:c0:c8:1b: 87:d4:2b:97:36:76:73:a6:ab:a0:c4:14:5b:9d:7b: 9f:e9:57:f5:27:ae:29:6b:eb:53:8c:16:34:51:ff: 5b:09:60:8f:30:77:2f:89:da:a4:62:79:1f:14:27: 95:18:75:35:53:03:25:45:3b:45:0f:7c:ad:3b:6d: b5:89:bf:27:99:1e:b7:1e:55:a5:44:dd:67:17:e9: 0b:2a:5d:0b:18:72:8a:df:6a:ab:a8:5e:e5:de:83: 42:29:ff:ef:d0:6e:fe:d4:34:fa:47:62:e9:42:64: f8:e3:eb:dd:3d:c5:3e:dd:36:c9:6c:61:a0:b1:c2: 09:b8:1f:e3:d8:3a:af:3d:f0:d5:22:fd:d1:94:36: e5:71:db:3f:dd:69:3a:f3:09:67:62:35:c1:cf:f6: ff:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:52:34:38:73:7E:F0:64:16:2C:3C:B3:79:9B:A5:4D:49:83:31:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d0c868c-622f-3528-9fd1-29db14f7e967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:9a:ab:e3:53:27:d8:d4:ee:fb:76:5c:d4:eb:c6:80:a9:79: 1c:85:42:b9:1d:e6:7b:3f:c4:09:cb:a0:58:7a:1a:f1:ba:79: 14:c1:2a:8c:13:ce:4e:8b:de:c4:1c:03:f5:93:c7:60:4b:5a: 47:86:d1:31:fc:d3:a4:e8:eb:f7:e7:5d:69:45:e5:a5:22:89: c2:3c:93:9b:3c:3d:cc:d2:ad:07:7f:51:32:39:6a:37:36:a4: 9f:cc:54:ec:80:62:84:1c:ba:da:f0:91:88:44:eb:0b:0b:46: 91:79:8b:c7:c6:13:a8:b2:58:bf:bd:d8:04:00:1f:77:67:37: f8:fa:2d:b5:29:d2:0e:a4:3e:66:28:bb:4f:3b:c5:de:ef:8f: 15:b9:5c:b7:97:60:27:24:6a:3d:83:37:ba:e7:11:70:1c:c0: f7:3f:5f:4c:69:95:3c:70:37:39:eb:72:6a:25:dd:10:c4:6a: f7:ac:c8:50:eb:24:ed:37:52:c1:3f:1c:14:d4:df:ae:61:af: 90:22:99:03:3d:6d:e9:7c:f4:de:35:ea:e5:96:ed:89:58:d9: 11:3b:69:27:2b:57:bb:03:dd:3d:bd:ef:94:b9:46:bd:dd:ba: bd:3b:0d:4a:ab:7e:90:f0:4f:df:eb:fa:7d:ed:37:8c:4c:2c: 26:2b:d8:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqFdHfvQ1sYBZLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk NjE1ZmRlZTEtMDAxMS00ZDdmLThkOWEtMTcyNDk2MjY3OTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7qLfn5ggaQPinbICLewUVvEvPjjGiHj4p6X 2mC/yjJxFKY8Sz70fZVowuwvACZyWXhpuMAZizLRpB8g/ta4kEgikFzoJzseIocK 55JzNp2PA7OpyAmTiw7I6HVUm9lX1uwEmdjAyBuH1CuXNnZzpqugxBRbnXuf6Vf1 J64pa+tTjBY0Uf9bCWCPMHcvidqkYnkfFCeVGHU1UwMlRTtFD3ytO221ib8nmR63 HlWlRN1nF+kLKl0LGHKK32qrqF7l3oNCKf/v0G7+1DT6R2LpQmT44+vdPcU+3TbJ bGGgscIJuB/j2DqvPfDVIv3RlDblcds/3Wk68wlnYjXBz/b/YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZSNDhzfvBkFiw8s3mbpU1JgzFiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2QwYzg2OGMtNjIyZi0z NTI4LTlmZDEtMjlkYjE0ZjdlOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJniMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOaq+NTJ9jU7vt2XNTrxoCpeRyFQrkd5ns/xAnLoFh6GvG6eRTBKowT zk6L3sQcA/WTx2BLWkeG0TH806To6/fnXWlF5aUiicI8k5s8PczSrQd/UTI5ajc2 pJ/MVOyAYoQcutrwkYhE6wsLRpF5i8fGE6iyWL+92AQAH3dnN/j6LbUp0g6kPmYo u087xd7vjxW5XLeXYCckaj2DN7rnEXAcwPc/X0xplTxwNznrcmol3RDEavesyFDr JO03UsE/HBTU365hr5AimQM9bel89N416uWW7YlY2RE7aScrV7sD3T2975S5Rr3d ur07DUqrfpDwT9/r+n3tN4xMLCYr2J8= -----END CERTIFICATE-----Generated at Mon Oct 26 02:01:35 2026 by rpki-client