$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a934113-d983-3651-a9bd-a819af78daa9.roa File: 9a934113-d983-3651-a9bd-a819af78daa9.roa (raw, json) Hash identifier: GFuWwPl7oLJsO4UplLNERIylQFS3NzZ+3sjC1G4dSrM= Subject key identifier: 06:AE:E6:E1:A0:30:8D:C7:19:9D:D3:82:23:A9:83:9E:D7:D7:96:A4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F8F3DA5AF01F33383B6E32940 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a934113-d983-3651-a9bd-a819af78daa9.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:a5:af:01:f3:33:83:b6:e3:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=7b8c2617-749f-4527-bc27-0a0770c3654e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a2:61:ee:a8:3e:d9:06:a2:a5:14:68:78:9f: 2e:85:18:73:0e:70:79:1b:0e:cb:8b:c0:f3:d4:50: aa:c8:48:f2:1a:fb:5c:d0:0e:74:b6:a3:9a:2e:37: 6f:b8:c6:df:41:8e:c0:3a:f3:f0:14:29:5f:5e:c4: e2:9a:f6:e5:c1:fe:45:1c:b6:5f:38:1d:b7:21:b9: 7f:51:82:71:bc:7d:86:f0:c7:68:cb:f6:6a:cd:52: 54:85:5a:cd:1e:1c:04:01:ab:c4:24:2b:03:98:40: cc:90:d8:d1:bc:11:76:a4:9c:c0:7c:d7:37:3a:dd: 6d:28:7d:c1:ba:f6:b9:f6:93:95:0a:24:97:14:1d: 0e:6c:3f:e7:25:49:ba:00:27:3e:84:bf:e6:e2:a1: ac:6d:3f:07:6a:f3:ea:17:8c:c6:85:67:21:a5:52: 52:45:1d:52:d3:be:c6:73:2a:b2:ff:7f:1d:96:a1: 6b:9b:99:d3:13:07:9d:87:ab:8c:4a:82:ec:bc:64: 84:b9:00:6b:c2:ff:f9:57:a2:bf:de:d4:08:0b:1e: af:1d:fc:9d:0b:d8:dd:12:c0:3a:6c:e0:0f:a3:79: 26:af:7a:bb:39:54:5a:5b:7c:a5:f1:1f:8d:69:c1: 41:33:20:9b:54:45:f1:ed:2d:85:98:d5:46:a2:b3: e9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AE:E6:E1:A0:30:8D:C7:19:9D:D3:82:23:A9:83:9E:D7:D7:96:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a934113-d983-3651-a9bd-a819af78daa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:60:61:cd:0d:2c:81:17:df:2e:04:c7:ec:03:e3:00:b3:e4: 89:bf:d2:f0:03:d4:89:2b:40:a5:da:f6:6e:35:66:84:1e:09: c5:87:91:38:5e:2c:af:74:d8:ae:29:1e:35:e5:cb:3c:28:1a: c7:ff:58:be:de:da:ca:7b:65:59:92:c4:1c:8d:86:37:dd:cc: e9:38:ee:b8:05:57:9b:87:05:7f:d7:0f:c8:99:d3:3b:12:68: be:5f:5c:e1:78:4c:8e:38:42:38:2b:16:d1:75:4c:44:8e:be: 4a:49:00:bb:0a:03:5b:d5:39:a1:f6:11:f8:c9:42:6d:58:a4: 5e:f3:25:f1:f0:b5:c7:8e:98:76:ae:08:67:0f:55:00:40:49: 63:62:e4:e4:eb:e8:05:d4:1e:c9:ed:4d:77:4f:01:1c:52:3f: 6d:85:68:8b:c0:46:42:75:92:04:b0:79:bc:9d:c8:7a:88:37: 99:21:f4:40:d3:5a:e5:38:ba:3f:6a:3c:15:a5:25:e3:60:2d: 68:73:67:75:a2:9f:44:bf:82:6a:3a:ea:a7:40:6d:41:cd:2e: 7f:bb:65:68:2f:73:cd:9a:8c:9b:b2:24:ee:8c:8c:2d:70:92: 2f:c7:3c:e5:fb:6e:03:3b:01:fd:c7:6a:83:a0:2b:7a:6e:30: 05:af:5e:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPaWvAfMzg7bjKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk N2I4YzI2MTctNzQ5Zi00NTI3LWJjMjctMGEwNzcwYzM2NTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqJh7qg+2QaipRRoeJ8uhRhzDnB5Gw7Li8Dz 1FCqyEjyGvtc0A50tqOaLjdvuMbfQY7AOvPwFClfXsTimvblwf5FHLZfOB23Ibl/ UYJxvH2G8Mdoy/ZqzVJUhVrNHhwEAavEJCsDmEDMkNjRvBF2pJzAfNc3Ot1tKH3B uva59pOVCiSXFB0ObD/nJUm6ACc+hL/m4qGsbT8HavPqF4zGhWchpVJSRR1S077G cyqy/38dlqFrm5nTEwedh6uMSoLsvGSEuQBrwv/5V6K/3tQICx6vHfydC9jdEsA6 bOAPo3kmr3q7OVRaW3yl8R+NacFBMyCbVEXx7S2FmNVGorPppQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAau5uGgMI3HGZ3TgiOpg57X15akMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWE5MzQxMTMtZDk4My0z NjUxLWE5YmQtYTgxOWFmNzhkYWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9gYc0NLIEX3y4Ex+wD4wCz5Im/0vAD1IkrQKXa9m41ZoQeCcWHkThe LK902K4pHjXlyzwoGsf/WL7e2sp7ZVmSxByNhjfdzOk47rgFV5uHBX/XD8iZ0zsS aL5fXOF4TI44QjgrFtF1TESOvkpJALsKA1vVOaH2EfjJQm1YpF7zJfHwtceOmHau CGcPVQBASWNi5OTr6AXUHsntTXdPARxSP22FaIvARkJ1kgSwebydyHqIN5kh9EDT WuU4uj9qPBWlJeNgLWhzZ3Win0S/gmo66qdAbUHNLn+7ZWgvc82ajJuyJO6MjC1w ki/HPOX7bgM7Af3HaoOgK3puMAWvXm8= -----END CERTIFICATE-----Generated at Mon Oct 26 01:12:38 2026 by rpki-client