$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2cd3a7-df5d-3ef2-ba77-0f24edc8e6c5.roa File: ab2cd3a7-df5d-3ef2-ba77-0f24edc8e6c5.roa (raw, json) Hash identifier: Aq8JmKQ1lpsqFjJ3IlQcKiD0xufPDTjLhSx0s85yeeE= Subject key identifier: 1C:6D:A9:37:4C:04:2C:86:FD:FA:57:C4:9E:6A:69:FC:86:6D:84:A3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F89A85397285748C9422BB340 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2cd3a7-df5d-3ef2-ba77-0f24edc8e6c5.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.153.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:53:97:28:57:48:c9:42:2b:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=f26fd566-428f-45de-9af9-f1dd2102018f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0f:0c:26:47:cf:7d:7d:7f:ec:8d:d9:2e:79: 44:c7:26:bb:b2:43:40:22:29:42:53:23:83:8c:47: 69:5e:a3:98:6b:ec:a8:d6:d4:d7:22:f8:6c:ef:62: cc:dd:7d:58:01:f2:3d:9a:89:e6:73:e6:1b:a5:6f: cd:88:cd:bb:79:98:a8:a7:f8:55:59:9b:21:37:f2: 79:bd:a2:16:04:43:a4:5e:b4:69:1c:69:50:ba:e2: 78:6c:a6:dc:05:1a:d8:79:75:a4:af:9b:29:c6:52: 94:21:9e:1b:73:d5:ac:96:29:1c:56:6e:60:2f:be: 5b:4f:b3:76:b3:5e:ed:ed:b8:7f:43:26:c0:5b:f2: f8:9a:a5:04:8b:0e:d5:5b:93:01:c7:88:6b:5d:67: 09:cb:78:eb:78:c3:6e:14:88:2c:99:4f:b7:f9:31: a7:cb:1c:83:58:4e:16:72:d1:2c:f0:a3:33:da:36: d9:a0:7e:b9:8b:ec:13:68:2d:b4:34:c9:9f:5e:4c: 70:3d:d8:1c:36:69:6f:08:d3:e9:6b:56:3f:69:b4: 49:8f:d0:36:27:2e:b0:32:18:a5:d2:63:cc:85:0b: 78:17:61:df:49:73:b3:5b:5a:3d:7c:bb:10:84:10: 8c:0b:40:3d:7d:d8:e6:d3:79:32:58:57:d8:04:8f: f8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6D:A9:37:4C:04:2C:86:FD:FA:57:C4:9E:6A:69:FC:86:6D:84:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2cd3a7-df5d-3ef2-ba77-0f24edc8e6c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:78:32:28:05:ac:d1:25:d2:09:8f:e7:4a:1a:b8:c6:78:eb: 76:66:3d:21:11:76:e0:0f:b5:cc:80:45:a6:06:8c:3b:71:3a: 7b:fb:a7:7d:e7:60:27:22:fd:93:c1:a7:2a:19:f4:1d:91:99: 12:c0:f2:8d:7c:59:a1:70:91:2a:3f:fc:5e:33:8f:a2:d8:16: 71:7d:85:e2:ab:9c:6f:a5:c4:24:b8:1e:96:20:6c:29:03:6e: 72:3d:b5:90:49:ee:63:82:5f:48:b8:9c:57:53:e1:f7:9c:b1: ef:d9:e5:6d:2c:81:e0:48:ab:e8:1a:ef:6e:e6:dc:c7:2a:cb: 68:86:00:db:f7:32:08:51:df:18:65:af:45:6b:1c:71:f4:83: ee:13:55:29:76:f5:11:8b:fb:18:4a:01:5c:a5:07:42:71:d2: d0:7b:e1:d6:54:ad:18:8a:6b:9e:a0:47:d6:77:db:83:15:ef: 62:fb:76:00:e4:e0:9e:45:78:6d:9c:c9:fe:65:f0:3a:38:ff: 24:9d:b4:26:b8:de:0f:43:1e:3e:18:1c:5e:07:2b:4c:f7:52: d3:59:15:42:2f:76:86:7e:7d:50:aa:ff:55:55:41:bd:7b:b6: 01:e7:81:30:b2:3a:e1:12:1a:3d:8f:25:de:53:fd:13:ce:6b: 06:e9:a6:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqFOXKFdIyUIrs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk ZjI2ZmQ1NjYtNDI4Zi00NWRlLTlhZjktZjFkZDIxMDIwMThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA8MJkfPfX1/7I3ZLnlExya7skNAIilCUyOD jEdpXqOYa+yo1tTXIvhs72LM3X1YAfI9monmc+YbpW/NiM27eZiop/hVWZshN/J5 vaIWBEOkXrRpHGlQuuJ4bKbcBRrYeXWkr5spxlKUIZ4bc9WslikcVm5gL75bT7N2 s17t7bh/QybAW/L4mqUEiw7VW5MBx4hrXWcJy3jreMNuFIgsmU+3+TGnyxyDWE4W ctEs8KMz2jbZoH65i+wTaC20NMmfXkxwPdgcNmlvCNPpa1Y/abRJj9A2Jy6wMhil 0mPMhQt4F2HfSXOzW1o9fLsQhBCMC0A9fdjm03kyWFfYBI/4vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxtqTdMBCyG/fpXxJ5qafyGbYSjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWIyY2QzYTctZGY1ZC0z ZWYyLWJhNzctMGYyNGVkYzhlNmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJmmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp4MigFrNEl0gmP50oauMZ463ZmPSERduAPtcyARaYGjDtxOnv7p33n YCci/ZPBpyoZ9B2RmRLA8o18WaFwkSo//F4zj6LYFnF9heKrnG+lxCS4HpYgbCkD bnI9tZBJ7mOCX0i4nFdT4fecse/Z5W0sgeBIq+ga727m3Mcqy2iGANv3MghR3xhl r0VrHHH0g+4TVSl29RGL+xhKAVylB0Jx0tB74dZUrRiKa56gR9Z324MV72L7dgDk 4J5FeG2cyf5l8Do4/ySdtCa43g9DHj4YHF4HK0z3UtNZFUIvdoZ+fVCq/1VVQb17 tgHngTCyOuESGj2PJd5T/RPOawbpppU= -----END CERTIFICATE-----Generated at Mon Oct 26 02:24:05 2026 by rpki-client