$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a7f6ca8d-3bb5-31b8-ab97-4e2f08e094ff.roa File: a7f6ca8d-3bb5-31b8-ab97-4e2f08e094ff.roa (raw, json) Hash identifier: lcy4WgVStE9RLlTZwIHGLAyP+7MDkTJPBgCOQeKqC4o= Subject key identifier: 0B:04:99:76:25:FA:02:66:B6:9B:A1:16:67:DD:AC:4F:03:3B:EC:9F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F89A8552D2F8B29B0CF97C6C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a7f6ca8d-3bb5-31b8-ab97-4e2f08e094ff.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.153.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:55:2d:2f:8b:29:b0:cf:97:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=1888ba0c-2b32-444c-9469-39358e434eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:78:70:8d:a0:4b:19:01:25:ff:2a:b4:5e:2d: fa:b6:21:2b:b0:ef:80:4c:67:57:5a:62:da:8a:c4: c3:6e:ec:cb:55:c9:83:13:8b:51:08:09:2a:01:7b: 32:83:98:eb:03:fb:86:df:0f:83:4c:b6:9d:08:68: 36:01:1e:96:4d:06:d5:91:b4:aa:8b:63:c1:38:96: 77:34:e1:47:31:5b:0e:99:4b:4d:7d:02:cd:d1:92: b7:d5:07:52:86:38:12:b3:e3:72:cb:2a:f2:d0:17: 33:cf:cd:62:3c:03:3b:5a:12:e8:52:b4:fb:c1:bb: d6:19:ea:c4:00:90:da:66:ca:60:1d:a9:2c:39:ec: fa:ef:94:81:72:a4:2f:1d:1b:9c:25:dd:65:91:c9: 2f:24:fb:a4:82:fc:9a:0c:76:8d:aa:1c:b8:77:f4: 86:81:e7:f3:2f:9f:11:27:d0:8d:d1:55:bc:32:a0: e7:e0:6f:0f:79:63:bf:02:e9:e9:a2:c0:82:d1:02: 9e:91:0d:99:e8:a7:03:5b:f4:76:57:f4:a2:25:af: 69:09:d8:88:be:9a:9e:06:0e:1b:e0:6f:1e:71:bb: 79:1b:42:11:11:5c:33:64:54:52:4e:e1:92:8b:78: 0c:6a:49:5b:93:ed:cd:60:2e:e1:cd:38:f6:21:21: a8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:04:99:76:25:FA:02:66:B6:9B:A1:16:67:DD:AC:4F:03:3B:EC:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a7f6ca8d-3bb5-31b8-ab97-4e2f08e094ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:8d:01:06:32:9b:1b:2a:12:07:b5:03:a7:97:8d:7f:03:98: 71:0c:78:ee:a2:ff:2e:d9:bc:91:29:1a:16:88:33:25:81:60: c7:d5:b3:c9:ef:e6:0c:21:64:d5:ee:1a:48:34:16:03:1a:36: bb:aa:59:6e:ce:47:ba:83:9c:a7:99:6d:b7:5a:bc:00:ea:51: f1:9a:ee:9e:d8:ba:d6:97:aa:1c:80:48:58:b1:cf:73:2f:38: 52:10:03:7e:a0:5e:23:c7:68:ac:f2:37:43:e5:08:6c:4f:4a: d8:9a:ac:21:ca:56:50:ef:07:17:9a:c4:e3:6c:e5:b5:c1:25: 0a:d9:df:04:6c:a1:20:36:a8:12:cc:3a:90:10:36:f1:1a:a3: 14:cb:83:d9:a9:44:f0:69:90:25:16:14:02:c8:2f:e2:50:59: cb:a5:2e:70:26:96:5a:84:66:30:67:e1:a9:cd:51:0b:a4:8c: 2c:35:87:c1:ff:63:a3:07:7e:74:e8:49:9e:7e:48:df:ee:ab: 66:ab:d7:f0:1c:29:34:eb:58:eb:cb:21:54:ab:10:50:79:f8: c9:5e:06:df:1b:fd:02:88:fb:b8:e7:0a:24:26:fe:0a:8b:96: ac:da:c4:9e:4b:91:fc:fb:48:c0:fd:08:df:1c:96:60:89:73: 35:ea:51:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqFUtL4spsM+XxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk MTg4OGJhMGMtMmIzMi00NDRjLTk0NjktMzkzNThlNDM0ZWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHhwjaBLGQEl/yq0Xi36tiErsO+ATGdXWmLa isTDbuzLVcmDE4tRCAkqAXsyg5jrA/uG3w+DTLadCGg2AR6WTQbVkbSqi2PBOJZ3 NOFHMVsOmUtNfQLN0ZK31QdShjgSs+Nyyyry0Bczz81iPAM7WhLoUrT7wbvWGerE AJDaZspgHaksOez675SBcqQvHRucJd1lkckvJPukgvyaDHaNqhy4d/SGgefzL58R J9CN0VW8MqDn4G8PeWO/AunposCC0QKekQ2Z6KcDW/R2V/SiJa9pCdiIvpqeBg4b 4G8ecbt5G0IREVwzZFRSTuGSi3gMaklbk+3NYC7hzTj2ISGogwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsEmXYl+gJmtpuhFmfdrE8DO+yfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTdmNmNhOGQtM2JiNS0z MWI4LWFiOTctNGUyZjA4ZTA5NGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJm0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6NAQYymxsqEge1A6eXjX8DmHEMeO6i/y7ZvJEpGhaIMyWBYMfVs8nv 5gwhZNXuGkg0FgMaNruqWW7OR7qDnKeZbbdavADqUfGa7p7YutaXqhyASFixz3Mv OFIQA36gXiPHaKzyN0PlCGxPStiarCHKVlDvBxeaxONs5bXBJQrZ3wRsoSA2qBLM OpAQNvEaoxTLg9mpRPBpkCUWFALIL+JQWculLnAmllqEZjBn4anNUQukjCw1h8H/ Y6MHfnToSZ5+SN/uq2ar1/AcKTTrWOvLIVSrEFB5+MleBt8b/QKI+7jnCiQm/gqL lqzaxJ5Lkfz7SMD9CN8clmCJczXqURU= -----END CERTIFICATE-----Generated at Mon Oct 26 14:24:09 2026 by rpki-client