$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da1d564b-362d-3a9a-993d-48e4fe19b098.roa File: da1d564b-362d-3a9a-993d-48e4fe19b098.roa (raw, json) Hash identifier: B3vLKYlNFd+bgOWpGjvcHETw6Zkh8z2b26xW1Na7HLk= Subject key identifier: A5:40:78:91:9C:2B:AE:4F:42:57:2D:DA:90:7C:22:7A:46:12:E9:9C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F8F3DC05191EB10023F01CE80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da1d564b-362d-3a9a-993d-48e4fe19b098.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:c0:51:91:eb:10:02:3f:01:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=5e73f6ea-d84f-4189-a354-ed39044a8514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:71:c1:2d:84:af:e0:25:77:d7:35:05:ce:44: bd:6b:c7:d7:6d:4e:14:0b:26:27:15:da:cb:6f:dc: 7a:70:33:8b:fb:f1:89:34:35:bf:ac:2b:8c:e0:b2: 48:f9:60:6e:e4:96:8a:63:33:96:e5:10:25:b4:f1: 0b:29:6d:bc:4a:16:1b:ee:02:28:2c:36:f6:92:34: f5:fd:ac:69:65:12:5f:30:fa:bb:35:3a:8a:84:66: 1b:cf:f0:d6:cb:82:a9:61:84:be:d2:9a:2f:ed:16: cc:8b:ec:59:3e:d8:a7:15:24:bc:8a:f9:4f:a8:c5: 25:1d:fa:fb:3d:8c:53:eb:a7:b5:db:80:43:b8:55: 7e:30:d4:9a:cd:af:db:32:3f:7a:28:fb:5b:c8:bf: 46:d9:df:6d:d2:1b:d7:6e:41:96:5f:f0:e5:9f:9d: 06:73:9b:ce:ee:26:99:a6:bd:ba:83:04:ff:25:5e: 33:9d:e2:b7:62:50:88:6d:2e:22:3f:b7:71:79:d2: 44:9c:24:75:ba:e7:0a:e4:87:6d:a2:db:3a:dc:ae: 7e:90:0f:0f:1d:94:40:55:8a:a3:38:22:a8:f1:77: ba:28:84:7e:27:ca:72:bc:60:a6:a3:84:b7:c6:09: 75:70:ce:62:87:e6:0b:e1:22:7a:2c:6d:56:97:93: a9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:40:78:91:9C:2B:AE:4F:42:57:2D:DA:90:7C:22:7A:46:12:E9:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da1d564b-362d-3a9a-993d-48e4fe19b098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:1b:11:61:58:91:29:47:cf:b2:67:23:a6:19:85:70:9b:1e: 76:3c:b5:c9:8d:84:77:98:35:fe:c2:66:28:ce:ca:74:89:01: ca:67:27:33:8e:da:1c:31:ce:c8:47:31:23:e0:d7:61:c3:ff: fa:9c:1a:3d:e9:4f:45:5e:ab:a7:50:99:ef:d3:3c:9d:bb:79: 25:2e:b2:36:0c:f8:21:eb:fd:8d:7e:4d:9b:e5:54:cc:d2:5c: 6f:6f:34:50:83:b2:c7:56:21:70:b8:b4:bb:ae:48:3e:11:3b: 82:9d:0e:23:19:b5:15:1a:ae:b7:95:be:81:b0:6c:46:35:87: 87:3d:f2:d3:bf:f2:bb:88:d0:cd:14:79:83:41:3e:79:c2:fa: 04:aa:b1:07:c2:6a:27:7c:18:d5:6c:19:d7:70:a8:a7:27:c9: 35:42:3d:dc:87:64:2c:67:20:95:84:d5:45:fc:58:e1:d7:c6: db:25:8d:47:0f:06:50:a3:da:07:85:60:1f:53:65:0a:7c:1d: 95:47:19:e3:b3:2c:69:a5:72:c4:d6:2d:e6:a6:fc:fd:1a:13: b3:1e:6f:2e:e3:63:d6:c7:54:ff:c2:b4:5b:40:5d:7f:86:95: 13:7c:42:59:74:dd:66:f2:e1:ca:3b:74:bc:8f:54:47:af:8d: df:b9:e7:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPcBRkesQAj8BzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NWU3M2Y2ZWEtZDg0Zi00MTg5LWEzNTQtZWQzOTA0NGE4NTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXHBLYSv4CV31zUFzkS9a8fXbU4UCyYnFdrL b9x6cDOL+/GJNDW/rCuM4LJI+WBu5JaKYzOW5RAltPELKW28ShYb7gIoLDb2kjT1 /axpZRJfMPq7NTqKhGYbz/DWy4KpYYS+0pov7RbMi+xZPtinFSS8ivlPqMUlHfr7 PYxT66e124BDuFV+MNSaza/bMj96KPtbyL9G2d9t0hvXbkGWX/Dln50Gc5vO7iaZ pr26gwT/JV4zneK3YlCIbS4iP7dxedJEnCR1uucK5Idtots63K5+kA8PHZRAVYqj OCKo8Xe6KIR+J8pyvGCmo4S3xgl1cM5ih+YL4SJ6LG1Wl5OpOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVAeJGcK65PQlct2pB8InpGEumcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGExZDU2NGItMzYyZC0z YTlhLTk5M2QtNDhlNGZlMTliMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIbEWFYkSlHz7JnI6YZhXCbHnY8tcmNhHeYNf7CZijOynSJAcpnJzOO 2hwxzshHMSPg12HD//qcGj3pT0Veq6dQme/TPJ27eSUusjYM+CHr/Y1+TZvlVMzS XG9vNFCDssdWIXC4tLuuSD4RO4KdDiMZtRUarreVvoGwbEY1h4c98tO/8ruI0M0U eYNBPnnC+gSqsQfCaid8GNVsGddwqKcnyTVCPdyHZCxnIJWE1UX8WOHXxtsljUcP BlCj2geFYB9TZQp8HZVHGeOzLGmlcsTWLeam/P0aE7Meby7jY9bHVP/CtFtAXX+G lRN8Qll03Wby4co7dLyPVEevjd+556M= -----END CERTIFICATE-----Generated at Tue Oct 27 09:26:54 2026 by rpki-client