$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/931912a1-d92f-324c-ace7-59dd3fe9950c.roa File: 931912a1-d92f-324c-ace7-59dd3fe9950c.roa (raw, json) Hash identifier: GMGnE4eYI4kA4SRJjjMqNaMgZKrgIS3rl753sg/rrpk= Subject key identifier: 1E:9B:3D:41:63:16:DD:18:29:0F:BF:69:23:71:3E:78:C3:4B:1D:B1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F89A8871FBDF5B1C9BEA4D040 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/931912a1-d92f-324c-ace7-59dd3fe9950c.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.153.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:87:1f:bd:f5:b1:c9:be:a4:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=1d685436-c292-49b9-ad6d-fcd7b05d1d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c3:3d:2a:03:f4:f6:dd:6a:e6:a2:b2:0d:54: 03:af:0b:23:60:98:18:04:37:b4:30:ca:32:a7:18: 75:bf:c3:8e:04:6d:8e:df:d5:c1:64:a2:ff:99:fd: 42:8c:67:ca:da:fd:ba:30:89:75:40:dc:37:fb:64: 01:31:c9:d5:74:31:50:31:80:5d:76:1a:07:66:7c: 65:c8:4f:ee:03:8e:73:28:cc:ed:8e:14:23:4e:98: 09:c7:e2:21:af:48:86:d8:70:7c:50:54:22:2e:7b: 5c:89:a2:17:d5:91:7c:cb:10:36:5d:a0:f8:85:07: 9a:4d:3d:30:6c:2d:2c:2d:0d:56:99:6e:d0:37:1c: bd:cc:27:39:d7:8c:d4:ca:a6:4f:c8:7e:47:c9:42: 57:8f:e7:ec:9a:8b:2d:8c:71:40:45:40:39:15:a0: 80:bc:e4:9b:77:5c:d7:98:8f:17:26:7b:be:c6:31: cc:89:58:03:19:d9:b4:09:19:ad:e0:49:c9:8a:68: 53:d6:34:71:30:be:9f:68:af:c3:fc:ee:fd:cb:fe: 9e:8a:a1:c3:51:5a:55:cf:fc:05:3e:fe:9b:76:a9: c6:f9:fe:a6:f8:9d:0b:34:5e:b6:e8:2b:3d:90:13: 81:c4:87:91:07:88:01:cc:cb:78:f0:40:2c:71:e2: 28:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9B:3D:41:63:16:DD:18:29:0F:BF:69:23:71:3E:78:C3:4B:1D:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/931912a1-d92f-324c-ace7-59dd3fe9950c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:98:4f:01:e0:f6:17:a2:97:11:9a:0d:d7:2a:52:4d:f5:43: 0d:52:16:db:0c:c2:44:30:b9:2e:8a:b5:6c:c7:7e:b4:b2:c1: 5f:f7:04:30:00:78:0e:ed:80:7f:60:4a:02:b0:ca:dd:a6:b3: ae:c6:24:ac:21:bf:47:c7:00:e6:76:07:81:0e:6d:c7:78:ee: 7f:e9:b6:12:27:02:45:a9:29:d8:9c:2e:ad:18:0e:32:e0:8b: 19:cf:5a:52:2e:62:08:f3:8a:8d:35:5d:a0:55:de:69:bc:91: 75:84:1e:ae:35:e1:6e:ea:fe:44:a4:cc:cd:a8:3f:bd:68:66: 9b:df:4b:c1:4f:9d:2d:50:14:cd:ad:14:ff:88:41:32:33:6d: c0:fa:90:c7:f0:0d:5d:d9:84:f7:4b:83:64:9e:81:fb:3a:c2: 0f:f8:a6:0f:92:0b:65:fd:88:00:f8:e3:d1:4a:e8:77:4c:37: 7c:b0:e6:92:ed:30:ef:e9:86:67:81:8d:5c:f6:07:28:f5:e0: ca:34:af:c2:dd:46:0d:86:a6:8d:01:e5:65:e2:53:b9:f0:05: 94:e8:77:72:d7:df:f2:1b:13:82:b1:bd:ce:76:47:77:f6:59: aa:1e:97:0f:95:1f:78:90:1a:c2:2f:18:72:f2:5e:d4:1d:b1: 67:f8:9c:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqIcfvfWxyb6k0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk MWQ2ODU0MzYtYzI5Mi00OWI5LWFkNmQtZmNkN2IwNWQxZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMM9KgP09t1q5qKyDVQDrwsjYJgYBDe0MMoy pxh1v8OOBG2O39XBZKL/mf1CjGfK2v26MIl1QNw3+2QBMcnVdDFQMYBddhoHZnxl yE/uA45zKMztjhQjTpgJx+Ihr0iG2HB8UFQiLntciaIX1ZF8yxA2XaD4hQeaTT0w bC0sLQ1WmW7QNxy9zCc514zUyqZPyH5HyUJXj+fsmostjHFARUA5FaCAvOSbd1zX mI8XJnu+xjHMiVgDGdm0CRmt4EnJimhT1jRxML6faK/D/O79y/6eiqHDUVpVz/wF Pv6bdqnG+f6m+J0LNF626Cs9kBOBxIeRB4gBzMt48EAsceIocQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6bPUFjFt0YKQ+/aSNxPnjDSx2xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTMxOTEyYTEtZDkyZi0z MjRjLWFjZTctNTlkZDNmZTk5NTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaYTwHg9heilxGaDdcqUk31Qw1SFtsMwkQwuS6KtWzHfrSywV/3BDAA eA7tgH9gSgKwyt2ms67GJKwhv0fHAOZ2B4EObcd47n/pthInAkWpKdicLq0YDjLg ixnPWlIuYgjzio01XaBV3mm8kXWEHq414W7q/kSkzM2oP71oZpvfS8FPnS1QFM2t FP+IQTIzbcD6kMfwDV3ZhPdLg2Segfs6wg/4pg+SC2X9iAD449FK6HdMN3yw5pLt MO/phmeBjVz2Byj14Mo0r8LdRg2Gpo0B5WXiU7nwBZTod3LX3/IbE4Kxvc52R3f2 Waoelw+VH3iQGsIvGHLyXtQdsWf4nK8= -----END CERTIFICATE-----Generated at Wed Oct 28 14:41:49 2026 by rpki-client