$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e181be4e-3fdd-3e66-8cb6-88a2ad3b3294.roa File: e181be4e-3fdd-3e66-8cb6-88a2ad3b3294.roa (raw, json) Hash identifier: Qtk2P1VGLa/KduLPuJotek4qUOS6z/CAmG6Zf6475M4= Subject key identifier: 9A:91:19:36:C5:E2:C7:83:88:A6:C2:5D:76:1D:7F:E5:E0:D2:CC:FB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F89A88AD46C6ED3037AD8C380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e181be4e-3fdd-3e66-8cb6-88a2ad3b3294.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.153.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:8a:d4:6c:6e:d3:03:7a:d8:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=9c349736-09bf-4b60-b6f1-7b9173e30183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:5f:b2:9c:fb:32:59:33:f8:1e:8c:d6:07: 1b:fc:c2:06:c3:07:e1:ff:d0:5a:2e:2c:eb:1d:46: 85:ee:0e:b5:d3:91:5c:b7:5b:6e:c5:96:b3:90:43: cd:52:ea:20:d7:fa:7a:d3:4d:27:b5:51:2f:fe:92: 8e:54:0c:83:99:aa:fb:9c:60:87:14:f1:46:d8:a0: 38:87:de:3d:87:6a:6d:af:16:83:b2:4a:20:2d:53: 1d:ab:f1:24:a5:0c:d7:6b:71:81:51:9d:4e:b2:a8: 4f:03:f5:fc:54:2b:9f:01:60:8a:53:67:a5:8d:8b: ec:b4:20:96:a1:50:87:c0:4c:75:28:a7:1e:45:ac: 4d:81:03:7f:32:11:a1:88:e0:d9:b9:bc:db:38:70: 24:3c:27:18:6f:02:0d:57:10:f4:20:ca:be:ae:58: a0:92:75:a4:4c:3d:da:00:98:18:15:8d:55:c4:f3: 45:ea:c9:db:22:7c:a4:81:ab:8e:59:c4:cc:40:36: f5:eb:e7:58:99:08:4f:2a:cf:ee:38:94:f7:8f:0e: 7f:0e:8d:56:e5:3b:09:7f:c2:5b:2d:68:a4:d3:d2: 05:1e:df:9c:ad:8d:1d:d8:6a:68:cf:8c:8e:b8:8b: 93:82:eb:ff:88:44:2a:c2:58:e0:9a:1d:f7:a1:2f: 51:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:91:19:36:C5:E2:C7:83:88:A6:C2:5D:76:1D:7F:E5:E0:D2:CC:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e181be4e-3fdd-3e66-8cb6-88a2ad3b3294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b3:d4:2c:f3:5b:f0:1a:ad:3b:eb:18:60:69:2e:4d:27:9e: 60:00:bf:96:70:eb:d9:2a:97:f6:96:16:ac:ef:f4:af:97:b0: c5:c0:a7:83:34:0c:2e:03:85:01:e4:dc:19:e1:d9:08:ab:7a: 59:ee:b5:43:06:45:55:44:6d:19:40:9a:29:a0:f8:57:02:e1: b0:58:06:c4:a0:69:33:d1:05:c8:51:ec:ed:de:a0:09:84:5f: 5a:bc:17:a4:b1:a4:e0:7e:11:b2:b8:f2:b4:a8:4e:2f:2c:4b: c9:b1:a6:30:75:90:65:77:9c:a1:59:ce:32:5f:17:e1:e3:0f: a2:8c:64:f9:32:6c:83:57:c9:75:d8:df:3b:b1:99:5a:66:0e: ff:01:f7:6c:e6:5f:de:69:55:69:93:fc:c5:75:af:45:6a:ed: dd:b8:48:d7:95:90:58:9d:80:5c:79:9c:b6:c9:2c:84:75:ec: 97:f9:48:62:17:c7:f6:1b:68:be:37:5b:4a:ab:f2:a1:2d:8c: 05:e6:ee:4d:18:34:1f:26:46:2e:98:a5:5e:34:b9:14:f5:1e: ef:93:ae:9d:1c:ac:c6:6d:cd:26:ab:fe:f0:3b:bc:83:b8:97: 0e:55:4d:84:80:de:b3:d9:2a:5e:24:93:c0:6d:c1:00:4b:57: d2:66:e0:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqIrUbG7TA3rYw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk OWMzNDk3MzYtMDliZi00YjYwLWI2ZjEtN2I5MTczZTMwMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7pfspz7Mlkz+B6M1gcb/MIGwwfh/9BaLizr HUaF7g6105Fct1tuxZazkEPNUuog1/p6000ntVEv/pKOVAyDmar7nGCHFPFG2KA4 h949h2ptrxaDskogLVMdq/EkpQzXa3GBUZ1OsqhPA/X8VCufAWCKU2eljYvstCCW oVCHwEx1KKceRaxNgQN/MhGhiODZubzbOHAkPCcYbwINVxD0IMq+rligknWkTD3a AJgYFY1VxPNF6snbInykgauOWcTMQDb16+dYmQhPKs/uOJT3jw5/Do1W5TsJf8Jb LWik09IFHt+crY0d2Gpoz4yOuIuTguv/iEQqwljgmh33oS9RPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqRGTbF4seDiKbCXXYdf+Xg0sz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTE4MWJlNGUtM2ZkZC0z ZTY2LThjYjYtODhhMmFkM2IzMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFJmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFez1CzzW/AarTvrGGBpLk0nnmAAv5Zw69kql/aWFqzv9K+XsMXAp4M0 DC4DhQHk3Bnh2QirelnutUMGRVVEbRlAmimg+FcC4bBYBsSgaTPRBchR7O3eoAmE X1q8F6SxpOB+EbK48rSoTi8sS8mxpjB1kGV3nKFZzjJfF+HjD6KMZPkybINXyXXY 3zuxmVpmDv8B92zmX95pVWmT/MV1r0Vq7d24SNeVkFidgFx5nLbJLIR17Jf5SGIX x/YbaL43W0qr8qEtjAXm7k0YNB8mRi6YpV40uRT1Hu+Trp0crMZtzSar/vA7vIO4 lw5VTYSA3rPZKl4kk8BtwQBLV9Jm4KM= -----END CERTIFICATE-----Generated at Sun Oct 25 08:07:55 2026 by rpki-client