$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9fe82129-7ac7-3807-a8b1-97e83fcba244.roa File: 9fe82129-7ac7-3807-a8b1-97e83fcba244.roa (raw, json) Hash identifier: fqVpED8rpR5eh1EEfMIW/HA/Wbq8Upo8za01YGNDwu0= Subject key identifier: 60:C0:CB:42:98:F4:54:B3:A8:85:F0:9C:AE:85:DD:8E:EB:53:3F:59 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F8F3DC17BB021A5AADAA00430 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9fe82129-7ac7-3807-a8b1-97e83fcba244.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:c1:7b:b0:21:a5:aa:da:a0:04:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=8f51ad43-0061-42a9-b100-d31780be7aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d1:33:f2:aa:31:7c:67:e6:9d:40:32:64:77: 9e:54:e0:dc:ff:f1:1f:f8:c1:35:21:34:95:62:cb: c4:98:96:48:9b:ee:0d:46:9b:72:3d:88:c2:e6:5f: 61:3a:eb:d8:6d:d0:80:42:69:24:c9:08:b3:41:32: a8:09:22:c8:9f:bc:1c:40:2e:05:61:7c:c6:b6:e3: 92:a1:70:5d:f0:c7:32:53:ce:31:1e:f0:ae:96:6e: 82:50:47:3c:11:64:24:99:b3:2c:4f:7c:4c:50:22: a0:96:dd:5d:e6:2d:2e:4b:25:89:01:61:4b:4b:a1: 85:e5:e0:25:fa:40:86:85:55:94:06:4e:94:75:e3: d5:a2:22:9d:b2:32:55:96:00:b1:48:10:f4:89:05: cb:c5:34:ae:68:6d:f3:87:90:58:51:a2:f3:84:7f: 57:09:61:eb:e7:e2:75:4d:38:7d:70:15:ad:4f:6a: 98:c3:91:ba:b7:18:a3:ec:e4:49:6b:4f:4d:e8:3b: 6f:86:22:38:2e:e0:1a:32:f8:36:96:b5:51:45:c9: 55:8e:e6:26:bc:2d:c5:16:55:72:09:a8:09:aa:d7: b2:fd:f6:85:a4:62:fe:4e:c3:1e:e6:c5:60:73:97: 44:1c:1d:b9:fb:a6:84:93:8b:fc:c5:59:32:b5:77: 43:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C0:CB:42:98:F4:54:B3:A8:85:F0:9C:AE:85:DD:8E:EB:53:3F:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9fe82129-7ac7-3807-a8b1-97e83fcba244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:81:23:53:86:ac:7d:dc:5f:dc:3b:9d:18:0a:b8:07:4b:ad: 2a:f6:16:b4:67:c2:3d:e3:04:e1:e0:94:66:7d:9d:57:38:56: c2:43:ce:ea:5d:7c:6b:af:4c:73:c7:88:2c:7e:c4:b6:a2:99: b3:ab:2e:19:65:17:e9:70:2b:b1:b6:72:88:af:94:11:d7:8b: c8:da:25:c2:f4:7e:22:8c:3a:f7:00:b4:ca:b1:0f:79:18:a0: 4f:d6:d4:37:4f:a0:cf:99:71:09:16:45:88:3b:1f:dc:fb:78: 08:c9:c1:2d:87:38:46:bf:e2:81:ba:e5:13:cf:bb:25:1d:d6: 5e:60:c2:d7:56:e1:25:83:4c:97:c5:a2:07:8c:c7:49:78:76: fb:8c:6e:18:fa:96:a2:3e:80:f3:57:b3:7a:bd:d5:de:43:72: 05:5b:ad:1c:ab:64:69:a3:1b:3c:b6:cf:d7:40:07:1f:e0:a9: 8d:a3:6b:37:05:cc:34:99:3d:aa:71:44:18:38:a3:48:df:e4: 6b:8a:be:a8:85:e6:18:cc:78:8e:f6:60:1f:ab:2c:a0:59:ac: f7:76:8a:15:bd:5b:bd:64:60:7f:20:7b:57:58:3e:34:87:0c: 5d:f4:00:a2:15:bd:80:ba:52:9b:63:aa:0f:fe:1d:07:dc:c3: b3:9c:b9:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPcF7sCGlqtqgBDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk OGY1MWFkNDMtMDA2MS00MmE5LWIxMDAtZDMxNzgwYmU3YWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9Ez8qoxfGfmnUAyZHeeVODc//Ef+ME1ITSV YsvEmJZIm+4NRptyPYjC5l9hOuvYbdCAQmkkyQizQTKoCSLIn7wcQC4FYXzGtuOS oXBd8McyU84xHvCulm6CUEc8EWQkmbMsT3xMUCKglt1d5i0uSyWJAWFLS6GF5eAl +kCGhVWUBk6UdePVoiKdsjJVlgCxSBD0iQXLxTSuaG3zh5BYUaLzhH9XCWHr5+J1 TTh9cBWtT2qYw5G6txij7ORJa09N6DtvhiI4LuAaMvg2lrVRRclVjuYmvC3FFlVy CagJqtey/faFpGL+TsMe5sVgc5dEHB25+6aEk4v8xVkytXdD9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDAy0KY9FSzqIXwnK6F3Y7rUz9ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWZlODIxMjktN2FjNy0z ODA3LWE4YjEtOTdlODNmY2JhMjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2BI1OGrH3cX9w7nRgKuAdLrSr2FrRnwj3jBOHglGZ9nVc4VsJDzupd fGuvTHPHiCx+xLaimbOrLhllF+lwK7G2coivlBHXi8jaJcL0fiKMOvcAtMqxD3kY oE/W1DdPoM+ZcQkWRYg7H9z7eAjJwS2HOEa/4oG65RPPuyUd1l5gwtdW4SWDTJfF ogeMx0l4dvuMbhj6lqI+gPNXs3q91d5DcgVbrRyrZGmjGzy2z9dABx/gqY2jazcF zDSZPapxRBg4o0jf5GuKvqiF5hjMeI72YB+rLKBZrPd2ihW9W71kYH8ge1dYPjSH DF30AKIVvYC6Uptjqg/+HQfcw7OcueI= -----END CERTIFICATE-----Generated at Mon Oct 26 06:20:05 2026 by rpki-client