$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c073bdde-3133-316c-aca0-6453facdfded.roa File: c073bdde-3133-316c-aca0-6453facdfded.roa (raw, json) Hash identifier: 6jGX5GNa/y9/WFbZ6oL7lzpIUZPuddqG8dj7EfiRMYw= Subject key identifier: 8B:27:8F:29:8C:06:71:97:49:37:3A:02:F8:DC:49:C5:67:52:78:BB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F62930B6CA170A4FBDC5ED180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c073bdde-3133-316c-aca0-6453facdfded.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.153.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0b:6c:a1:70:a4:fb:dc:5e:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=66f22570-ff68-45a5-ade3-1e2a5d126477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:76:f3:ae:d4:2e:3b:76:ad:b8:13:97:da:49: 82:14:40:b2:82:ca:9d:2c:38:ef:7f:b5:33:31:f4: 6a:2c:38:25:8a:d6:e9:68:8e:63:03:c7:31:57:13: 04:a5:ce:ee:00:ca:30:41:d2:6d:ff:c3:df:48:f8: 81:5f:74:ba:86:95:ec:ec:de:ae:15:05:15:62:e2: c2:f8:cc:47:73:40:3f:07:80:b4:4b:d9:96:6e:11: 86:b7:7a:1f:c2:52:eb:1a:c8:ae:64:57:a9:15:cd: ab:ec:b2:a4:9f:15:52:e6:fb:80:30:24:df:aa:3d: 24:de:69:e8:4a:e1:da:12:37:6d:15:8f:e1:3b:6b: c2:23:99:b8:60:98:50:7d:0d:44:ca:96:10:ed:b8: 8b:57:92:01:c2:6e:20:43:f9:5a:ef:0f:a4:c3:1a: f1:d8:d0:9e:72:52:b9:68:9c:7c:ab:d7:16:e1:1f: 19:e2:41:d4:98:5b:55:8f:c5:0a:87:c7:9b:ca:56: 84:d6:93:9b:e5:c7:19:d9:28:ae:bd:9a:21:e7:10: 74:d8:0e:85:a6:4f:98:59:96:14:f3:ce:e6:56:6d: fa:1e:04:b6:03:92:cf:83:b7:e1:76:d3:b0:6c:5c: 95:3c:99:2e:21:02:d0:cb:a3:93:13:6c:7c:ef:65: df:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:27:8F:29:8C:06:71:97:49:37:3A:02:F8:DC:49:C5:67:52:78:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c073bdde-3133-316c-aca0-6453facdfded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7f:87:a9:df:b4:47:fa:1e:31:96:01:21:54:aa:61:49:e5: d7:3e:6c:6b:ac:6b:b8:bb:c7:d3:0d:9f:6a:5a:d0:57:6a:4d: 37:40:ed:58:f7:23:4e:af:e4:04:73:82:09:eb:f5:01:54:1f: ad:ed:be:28:ab:73:e7:03:0d:da:2e:d9:6d:b5:cd:2c:2d:f7: 23:8d:2c:ba:62:06:e6:f7:6e:93:d2:8e:b0:f4:e8:1f:4e:e9: 4b:a3:e4:66:14:52:4a:24:51:ef:87:ca:8d:1b:dc:d6:70:ce: f2:08:8d:dd:c4:e7:a8:1c:23:d3:32:df:39:3b:16:aa:f1:0d: f8:fe:eb:4b:5e:49:97:6a:55:73:50:e9:a8:19:ff:bd:7f:9b: 2b:51:78:ff:13:a1:32:8b:cf:96:65:12:9d:15:7b:76:15:dd: 25:8b:2f:cb:2a:ae:00:4f:6c:54:8f:ac:86:d1:d3:8a:91:38: 79:b8:c3:65:6c:91:50:bc:03:e1:ad:8f:1c:b5:d4:55:ee:43: 21:2d:4e:25:61:58:94:d2:d9:27:0f:ae:91:78:19:98:24:3d: 6b:76:f4:e2:13:90:15:b2:07:d1:25:fc:6e:b5:af:31:f6:ab: b4:ff:d2:7b:55:c7:45:70:73:74:f0:4d:f6:5d:ea:3b:17:1f: 27:c7:3b:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwtsoXCk+9xe0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NjZmMjI1NzAtZmY2OC00NWE1LWFkZTMtMWUyYTVkMTI2NDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HbzrtQuO3atuBOX2kmCFECygsqdLDjvf7Uz MfRqLDglitbpaI5jA8cxVxMEpc7uAMowQdJt/8PfSPiBX3S6hpXs7N6uFQUVYuLC +MxHc0A/B4C0S9mWbhGGt3ofwlLrGsiuZFepFc2r7LKknxVS5vuAMCTfqj0k3mno SuHaEjdtFY/hO2vCI5m4YJhQfQ1EypYQ7biLV5IBwm4gQ/la7w+kwxrx2NCeclK5 aJx8q9cW4R8Z4kHUmFtVj8UKh8ebylaE1pOb5ccZ2SiuvZoh5xB02A6Fpk+YWZYU 887mVm36HgS2A5LPg7fhdtOwbFyVPJkuIQLQy6OTE2x872Xf3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsnjymMBnGXSTc6AvjcScVnUni7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzA3M2JkZGUtMzEzMy0z MTZjLWFjYTAtNjQ1M2ZhY2RmZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ/h6nftEf6HjGWASFUqmFJ5dc+bGusa7i7x9MNn2pa0FdqTTdA7Vj3 I06v5ARzggnr9QFUH63tviirc+cDDdou2W21zSwt9yONLLpiBub3bpPSjrD06B9O 6Uuj5GYUUkokUe+Hyo0b3NZwzvIIjd3E56gcI9My3zk7FqrxDfj+60teSZdqVXNQ 6agZ/71/mytReP8ToTKLz5ZlEp0Ve3YV3SWLL8sqrgBPbFSPrIbR04qROHm4w2Vs kVC8A+Gtjxy11FXuQyEtTiVhWJTS2ScPrpF4GZgkPWt29OITkBWyB9El/G61rzH2 q7T/0ntVx0Vwc3TwTfZd6jsXHyfHO5w= -----END CERTIFICATE-----Generated at Sun Oct 25 14:36:13 2026 by rpki-client