$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa File: b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa (raw, json) Hash identifier: rEYn+MV6Ci1mqgKcrubXbJKpFOWbZBf4J59PxJWmK6I= Subject key identifier: 17:E8:98:FD:7C:1B:2E:B5:E6:FD:7C:F5:33:1D:7C:F8:5D:34:C4:7A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F89A8711731A388C441B6D480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.153.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:71:17:31:a3:88:c4:41:b6:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=c6e43aba-4f8f-416f-a7c4-727d8970a88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1e:74:de:13:80:aa:5f:82:e0:6b:8a:c8:cd: 10:93:3d:2f:99:59:64:5d:d8:b2:54:99:57:70:b9: 3b:91:8b:26:0d:5c:98:92:d5:c2:59:04:83:9e:3b: 22:51:84:f6:e7:ad:4e:12:0e:8e:70:1b:fa:86:f6: 59:31:78:35:64:fb:43:f9:4d:2d:46:a2:5c:cc:c5: b7:5e:0a:d1:ad:de:7c:48:e3:fd:b5:fd:a9:85:5c: 04:56:10:30:65:e2:6a:01:d8:28:3d:c7:f7:53:57: 81:3b:ff:34:ea:d2:ee:f3:10:91:01:e6:2a:8a:62: 57:01:e3:ef:ca:36:fe:f7:1e:a4:23:8b:e8:5c:ff: 76:be:81:8a:d1:c9:a7:c1:17:75:78:f5:cc:b0:d0: 19:30:bd:21:5a:04:b2:50:7e:64:78:30:27:da:a7: 0d:97:1d:3e:18:34:69:de:8f:8c:26:fc:39:ae:0f: 43:75:cf:25:82:55:e5:89:80:88:e8:43:d1:9b:5e: 14:1f:6f:ba:c2:cd:6c:ea:6c:63:76:bc:d3:23:e5: 98:75:3e:55:30:00:99:4f:fe:88:46:81:78:a3:49: 90:47:35:82:57:6c:f2:89:fd:6c:c0:2a:c4:d0:25: 75:06:fb:f2:d0:84:86:b1:28:67:ea:b1:a8:c8:d6: 7a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E8:98:FD:7C:1B:2E:B5:E6:FD:7C:F5:33:1D:7C:F8:5D:34:C4:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:55:c3:6c:d4:d2:d5:33:40:a1:08:6e:f4:74:73:52:46:92: 28:2d:27:d3:f8:5f:76:ee:5c:71:57:aa:e0:a7:b4:48:ef:e2: 1b:5f:26:43:70:51:f0:70:0a:5d:53:cf:eb:cd:ba:3b:9b:3e: 1f:5c:3f:8e:81:ee:1a:a1:1b:d1:47:6d:01:c0:f9:a7:9f:07: f9:b6:43:04:e2:b0:45:dc:67:1b:6d:ab:d3:f0:a7:6f:a6:a4: 05:c4:7a:c8:a5:1c:14:2d:92:6e:0f:e2:ba:d2:b6:64:36:bb: f3:a9:30:1e:cf:ea:be:63:06:83:31:77:37:d5:73:69:c7:f5: 8b:17:66:57:b8:53:d8:d1:b0:c1:85:b6:6f:2b:b4:78:c5:36: ea:f0:6a:51:6d:bf:0b:50:ef:2f:88:43:3f:77:1c:24:d3:54: 72:dd:9c:f0:e1:ac:f0:80:a5:e9:71:31:be:86:f4:87:68:f3: b3:91:e5:8c:17:9a:e3:a4:b8:26:c2:f5:fb:b2:98:e4:3e:d0: 64:d9:a6:ab:1b:ce:a9:82:70:63:5b:c3:77:95:fc:f7:bb:79: 84:83:10:cd:0c:eb:84:5f:1f:5b:c6:5d:ad:26:a1:0f:75:f2: 9c:f1:e6:4c:f2:e4:f1:e8:7c:8c:8a:ce:2f:f4:c5:8c:5a:4d: 0b:ed:fc:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqHEXMaOIxEG21IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk YzZlNDNhYmEtNGY4Zi00MTZmLWE3YzQtNzI3ZDg5NzBhODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR503hOAql+C4GuKyM0Qkz0vmVlkXdiyVJlX cLk7kYsmDVyYktXCWQSDnjsiUYT2561OEg6OcBv6hvZZMXg1ZPtD+U0tRqJczMW3 XgrRrd58SOP9tf2phVwEVhAwZeJqAdgoPcf3U1eBO/806tLu8xCRAeYqimJXAePv yjb+9x6kI4voXP92voGK0cmnwRd1ePXMsNAZML0hWgSyUH5keDAn2qcNlx0+GDRp 3o+MJvw5rg9Ddc8lglXliYCI6EPRm14UH2+6ws1s6mxjdrzTI+WYdT5VMACZT/6I RoF4o0mQRzWCV2zyif1swCrE0CV1Bvvy0ISGsShn6rGoyNZ6CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfomP18Gy615v189TMdfPhdNMR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjVlZTdjM2EtZjc1MS0z M2U0LWI5ZTItMzdhZjE1YWFiYTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9Vw2zU0tUzQKEIbvR0c1JGkigtJ9P4X3buXHFXquCntEjv4htfJkNw UfBwCl1Tz+vNujubPh9cP46B7hqhG9FHbQHA+aefB/m2QwTisEXcZxttq9Pwp2+m pAXEesilHBQtkm4P4rrStmQ2u/OpMB7P6r5jBoMxdzfVc2nH9YsXZle4U9jRsMGF tm8rtHjFNurwalFtvwtQ7y+IQz93HCTTVHLdnPDhrPCApelxMb6G9Ido87OR5YwX muOkuCbC9fuymOQ+0GTZpqsbzqmCcGNbw3eV/Pe7eYSDEM0M64RfH1vGXa0moQ91 8pzx5kzy5PHofIyKzi/0xYxaTQvt/L4= -----END CERTIFICATE-----Generated at Tue Oct 27 20:50:52 2026 by rpki-client