$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a2aa9b69-2012-3853-a452-a2992c11c2a2.roa File: a2aa9b69-2012-3853-a452-a2992c11c2a2.roa (raw, json) Hash identifier: vW0palbSyP9ePNmxohHEJSBf5UWA2F0373p0FEyI+48= Subject key identifier: 56:D2:15:54:A8:82:45:91:B5:C3:B4:C8:7D:84:74:C5:3A:4A:84:17 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F8F3DAC0580706A50C6A4A260 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a2aa9b69-2012-3853-a452-a2992c11c2a2.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:ac:05:80:70:6a:50:c6:a4:a2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=4fa018e9-5f48-4051-8dd0-01c20d607ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8f:61:d5:05:f5:e3:de:30:96:af:c8:db:41: 0a:08:00:5f:f1:9c:59:cf:dd:5a:53:74:0f:1d:1f: 1b:3d:4f:42:9a:64:09:4e:ce:5c:cd:9e:5f:db:fc: 9d:e8:45:ea:0f:a5:09:b4:3d:6d:24:47:f2:85:7c: 58:60:d0:6c:83:e5:8b:55:c2:0e:33:4f:a2:85:37: 20:32:d8:c8:40:f7:69:b4:22:b7:be:c9:99:d0:c1: f9:f2:d6:91:96:77:e3:e7:c8:4b:a3:f1:a4:1f:19: 73:d2:fa:43:82:cb:ec:50:cc:63:27:c6:3b:f7:d3: fc:58:cd:bf:ba:42:48:1f:4d:e2:3c:90:97:ad:32: 50:4c:0c:6a:0c:25:dc:a3:02:93:cf:aa:e1:31:ed: e6:c2:37:6d:4e:17:4e:6b:fe:81:51:48:69:b8:7c: 4f:57:78:09:65:56:80:7e:cf:27:ff:db:74:da:1d: b9:81:8f:17:73:4e:11:4a:4c:fd:40:d6:20:08:01: ab:17:4d:ca:c0:2b:4f:68:34:43:1a:c5:62:91:f3: 2b:8b:fa:b3:9f:d9:31:f1:cb:5e:52:82:06:60:37: ef:02:3d:2f:5c:02:f0:9f:fe:41:49:d4:ed:82:f4: 48:66:22:4c:b4:de:ce:ce:0e:d8:7f:32:3d:35:46: d6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D2:15:54:A8:82:45:91:B5:C3:B4:C8:7D:84:74:C5:3A:4A:84:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a2aa9b69-2012-3853-a452-a2992c11c2a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:78:f7:e2:7a:a6:6a:3d:b1:c4:ba:c9:a3:4e:11:97:2d:7a: 8d:ce:ba:81:96:c3:d2:7f:62:64:73:a4:a5:df:85:7a:36:87: 1b:26:30:72:e4:64:47:d5:60:b6:e5:d3:0f:f8:f3:c0:bb:46: 67:79:5f:31:15:13:41:b5:13:ee:da:6f:ae:b8:3f:3c:56:4c: a1:d8:65:42:89:ca:39:4d:3c:ed:14:8e:1e:bf:9c:e6:a1:15: 63:0d:93:ca:ab:d3:67:aa:66:05:71:4f:60:79:c4:80:38:d5: ce:a8:fa:4f:46:ee:8c:c7:59:1c:41:df:a9:4a:08:78:ea:4f: 69:93:dc:53:aa:2b:10:56:f7:58:1a:e8:e5:0c:11:f0:2c:14: ef:d1:a5:50:81:79:74:7d:67:17:54:f4:1e:a1:29:35:8a:a5: 25:e4:7a:4d:86:d6:25:50:52:9e:89:26:ff:f5:3a:89:f5:62: 82:50:77:db:d6:04:e6:c5:0f:3f:a6:31:18:66:0d:5f:61:3b: d0:32:bc:37:df:a1:4c:45:7d:47:a0:21:1b:47:68:dc:9f:a2: 6a:5f:84:63:38:d0:6a:f7:c5:4a:c2:7e:1b:77:e0:64:95:32: 37:1a:30:9b:b3:71:1d:57:16:dc:a0:9b:07:b1:3f:65:24:a2: 18:13:99:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPawFgHBqUMakomAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NGZhMDE4ZTktNWY0OC00MDUxLThkZDAtMDFjMjBkNjA3YWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY9h1QX1494wlq/I20EKCABf8ZxZz91aU3QP HR8bPU9CmmQJTs5czZ5f2/yd6EXqD6UJtD1tJEfyhXxYYNBsg+WLVcIOM0+ihTcg MtjIQPdptCK3vsmZ0MH58taRlnfj58hLo/GkHxlz0vpDgsvsUMxjJ8Y799P8WM2/ ukJIH03iPJCXrTJQTAxqDCXcowKTz6rhMe3mwjdtThdOa/6BUUhpuHxPV3gJZVaA fs8n/9t02h25gY8Xc04RSkz9QNYgCAGrF03KwCtPaDRDGsVikfMri/qzn9kx8cte UoIGYDfvAj0vXALwn/5BSdTtgvRIZiJMtN7Ozg7YfzI9NUbWIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbSFVSogkWRtcO0yH2EdMU6SoQXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTJhYTliNjktMjAxMi0z ODUzLWE0NTItYTI5OTJjMTFjMmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ49+J6pmo9scS6yaNOEZcteo3OuoGWw9J/YmRzpKXfhXo2hxsmMHLk ZEfVYLbl0w/488C7Rmd5XzEVE0G1E+7ab664PzxWTKHYZUKJyjlNPO0Ujh6/nOah FWMNk8qr02eqZgVxT2B5xIA41c6o+k9G7ozHWRxB36lKCHjqT2mT3FOqKxBW91ga 6OUMEfAsFO/RpVCBeXR9ZxdU9B6hKTWKpSXkek2G1iVQUp6JJv/1Oon1YoJQd9vW BObFDz+mMRhmDV9hO9AyvDffoUxFfUegIRtHaNyfompfhGM40Gr3xUrCfht34GSV MjcaMJuzcR1XFtygmwexP2UkohgTmf0= -----END CERTIFICATE-----Generated at Sun Oct 25 23:22:30 2026 by rpki-client