$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9836e2a1-56f5-3d9c-9327-7ae95cd88d7b.roa File: 9836e2a1-56f5-3d9c-9327-7ae95cd88d7b.roa (raw, json) Hash identifier: +S7Il252ClUkbl0aLn9dMRo2b3bGbVl9sTR+XgtfkWg= Subject key identifier: 71:CE:08:55:41:A8:59:0A:15:C5:CC:C9:A3:D4:0F:32:D7:33:8A:D9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F89A88A4CE322503FB33FC280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9836e2a1-56f5-3d9c-9327-7ae95cd88d7b.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.153.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:8a:4c:e3:22:50:3f:b3:3f:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=206cbcf6-1d64-4362-9e6e-1cd99868fae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:88:d1:2e:13:cd:9e:32:10:d5:0a:ba:c6:11: 7a:04:b1:e9:3b:69:a7:2b:36:5e:42:92:cc:e6:65: 4f:e9:8e:23:7e:da:48:ee:2e:91:35:37:00:04:db: 9c:26:1d:d6:6d:d5:79:e1:55:99:26:3b:3f:a2:d3: a5:1c:b6:6a:73:76:e5:b4:8f:af:b4:20:ca:06:4d: 72:c4:3f:8d:c1:75:fb:61:65:db:47:4a:f9:c3:2b: 63:6b:d3:4d:6f:6b:6f:1e:c5:f5:dd:9b:73:b2:c0: f3:2b:42:53:1b:d8:f5:12:f8:9f:65:c3:a5:3f:5b: 0b:1e:44:ad:fd:5d:71:ef:1a:91:00:84:b7:be:5a: 12:a7:9b:33:83:c2:f1:b8:a9:26:6b:49:d2:b2:eb: d1:59:e2:b4:71:e2:44:5f:54:30:74:85:df:d4:50: 37:16:1a:d1:35:32:f0:53:69:2d:6a:25:d3:2b:a4: b2:a5:23:4e:ff:8c:5b:b6:07:67:e1:45:4c:0a:21: f0:ba:8a:0b:08:1d:8d:ef:de:5b:b7:25:c2:b4:ce: af:73:6f:f5:37:ff:3e:cd:c1:bf:2b:98:e5:f0:0a: ba:f7:86:df:61:3b:09:50:98:b7:92:b8:5c:a1:f8: c1:e9:32:54:02:b4:59:77:84:3b:ac:07:6f:d4:8e: 39:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CE:08:55:41:A8:59:0A:15:C5:CC:C9:A3:D4:0F:32:D7:33:8A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9836e2a1-56f5-3d9c-9327-7ae95cd88d7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ff:0f:ab:8c:02:4f:ba:cd:de:cf:d0:da:0c:59:5a:b6:20: 89:ea:6a:92:95:53:b3:4b:25:fd:d9:26:d0:09:1a:30:87:61: 59:6a:b6:e5:d1:d0:2e:50:7b:2b:48:f0:f9:b1:5a:8f:50:c9: 13:3a:ef:4d:87:38:e8:bf:7b:f5:95:9c:29:98:fd:3f:50:6d: db:e0:f2:df:9d:14:15:e3:e5:6f:9c:42:c3:ff:b8:2a:a4:1c: f5:d6:cc:c3:b8:a6:8e:5d:c8:5f:b4:aa:fc:80:28:b8:38:a6: 0d:15:10:29:69:b7:c3:7e:40:0f:43:ea:30:2b:5d:b5:80:5e: 7a:c9:ca:84:32:bf:1b:fa:a9:fe:06:7e:d3:a5:53:90:a1:b1: d2:3c:45:4d:47:aa:95:2c:c3:92:a6:59:e0:44:3f:2c:62:ee: 2b:86:9b:f1:31:a9:53:df:e8:ff:25:24:44:d7:6e:b0:0b:6b: 53:d3:b0:5d:2f:15:00:50:09:53:eb:91:b0:d6:4c:25:e5:76: 1f:a8:3f:e3:ae:a9:bb:46:58:45:ee:77:3a:69:03:5c:df:d1: 28:3e:57:d4:9e:97:c1:02:d2:91:44:7f:47:67:63:8f:a3:1a: 35:1e:46:94:81:1e:e5:cd:98:67:fc:7f:80:86:2e:a6:db:e7: ba:89:a4:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqIpM4yJQP7M/woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk MjA2Y2JjZjYtMWQ2NC00MzYyLTllNmUtMWNkOTk4NjhmYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIjRLhPNnjIQ1Qq6xhF6BLHpO2mnKzZeQpLM 5mVP6Y4jftpI7i6RNTcABNucJh3WbdV54VWZJjs/otOlHLZqc3bltI+vtCDKBk1y xD+NwXX7YWXbR0r5wytja9NNb2tvHsX13ZtzssDzK0JTG9j1EvifZcOlP1sLHkSt /V1x7xqRAIS3vloSp5szg8LxuKkma0nSsuvRWeK0ceJEX1QwdIXf1FA3FhrRNTLw U2ktaiXTK6SypSNO/4xbtgdn4UVMCiHwuooLCB2N795btyXCtM6vc2/1N/8+zcG/ K5jl8Aq694bfYTsJUJi3krhcofjB6TJUArRZd4Q7rAdv1I45LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHOCFVBqFkKFcXMyaPUDzLXM4rZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTgzNmUyYTEtNTZmNS0z ZDljLTkzMjctN2FlOTVjZDg4ZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJnEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADj/D6uMAk+6zd7P0NoMWVq2IInqapKVU7NLJf3ZJtAJGjCHYVlqtuXR 0C5QeytI8PmxWo9QyRM6702HOOi/e/WVnCmY/T9Qbdvg8t+dFBXj5W+cQsP/uCqk HPXWzMO4po5dyF+0qvyAKLg4pg0VEClpt8N+QA9D6jArXbWAXnrJyoQyvxv6qf4G ftOlU5ChsdI8RU1HqpUsw5KmWeBEPyxi7iuGm/ExqVPf6P8lJETXbrALa1PTsF0v FQBQCVPrkbDWTCXldh+oP+OuqbtGWEXudzppA1zf0Sg+V9Sel8EC0pFEf0dnY4+j GjUeRpSBHuXNmGf8f4CGLqbb57qJpLo= -----END CERTIFICATE-----Generated at Tue Oct 27 20:51:17 2026 by rpki-client