$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e2c7d3b3-8a76-312e-b43a-ff0dcc0d0444.roa File: e2c7d3b3-8a76-312e-b43a-ff0dcc0d0444.roa (raw, json) Hash identifier: 8P0PIGVqnm/tUvfRpA4L5B+DSXLgIJd6FKd4lh2SRa4= Subject key identifier: 12:B7:DA:99:92:06:02:FD:D6:93:82:00:F9:39:33:90:54:77:AB:06 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F89A88A713A9E7D7EDBDA3780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e2c7d3b3-8a76-312e-b43a-ff0dcc0d0444.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.153.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:8a:71:3a:9e:7d:7e:db:da:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=df20a85a-07b4-4d7a-bd40-e5676e4d0671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:95:ae:19:5f:0e:70:95:27:41:d9:88:49:d4: 6f:16:02:d8:54:34:90:c3:bc:30:7a:0c:58:3f:19: 07:96:d8:03:6c:ea:6e:37:ef:4e:7b:2d:88:72:4d: f4:88:73:b1:8f:a7:24:0d:0c:5b:02:e6:c1:1b:54: 42:8f:80:75:47:60:c4:7f:d0:4a:60:3f:8e:2f:43: d5:d5:22:0b:60:ac:c4:19:24:1f:47:15:2e:1f:5b: 25:d4:ef:bf:c1:25:e9:35:99:63:13:86:53:e2:d2: 04:b4:e1:d5:dd:49:6f:97:f5:a7:cf:4a:4d:e0:0a: 3c:d7:1e:c1:fc:ab:b7:54:e9:2f:ab:de:94:6e:17: 48:3d:d2:79:b3:9c:99:af:15:23:e5:93:52:12:a1: 77:92:06:33:82:6b:f0:73:ed:15:b8:d2:f2:b8:2b: ee:e8:59:da:08:5c:b7:1c:1f:70:55:97:92:78:a6: 98:49:d9:23:37:9b:5f:e4:a6:cd:39:e1:de:cc:fb: ff:a1:da:67:42:7a:66:4e:df:7a:d3:63:d7:85:8f: 8a:0f:f5:75:be:50:43:ea:3a:40:17:af:39:77:49: 68:94:f1:94:f5:b3:1a:77:82:17:68:0b:ca:11:c1: ea:4c:f1:25:ed:69:82:8e:bd:69:f0:b8:8a:cf:b9: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B7:DA:99:92:06:02:FD:D6:93:82:00:F9:39:33:90:54:77:AB:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e2c7d3b3-8a76-312e-b43a-ff0dcc0d0444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:07:11:51:1f:d6:e9:bf:7f:ac:c4:b2:ff:0c:41:34:5a:c4: 5e:4b:65:69:d6:69:ba:9c:9f:f8:42:2a:95:3d:46:be:88:7d: e2:95:e7:e3:12:0e:8f:d2:e0:23:c4:e0:2e:ef:07:d2:bd:25: 97:94:66:ea:6b:db:f0:8c:08:f5:ff:56:b9:22:52:3f:5d:70: 42:ac:2d:d6:2b:03:b8:a1:89:6c:70:73:af:9d:d8:3c:11:45: f0:4d:45:e1:73:fa:49:47:53:58:41:1e:ff:51:d9:98:e4:c2: 25:ad:af:6a:4b:fd:c0:ac:bf:50:03:ac:09:be:08:16:26:c9: 75:3a:66:f0:a4:bd:06:f3:f8:00:b3:37:e0:a5:74:90:69:e7: f8:fb:49:f8:a7:78:f6:bd:0d:9b:19:36:94:30:be:50:0c:f3: 5c:87:03:53:19:a0:05:a7:1d:26:65:ab:b2:ac:9d:57:4c:25: b2:a3:f1:d0:61:ad:5e:84:de:14:82:44:ee:9f:38:45:89:c9: 3d:4d:55:a4:4d:6c:c5:62:46:01:04:f1:4a:35:ff:82:68:65: db:1e:56:8f:35:d3:c2:19:06:2e:30:e0:23:32:c6:8f:cd:14: 01:bb:7a:1f:69:54:e9:3f:cc:7b:5d:7e:d8:7e:4e:9f:d4:b7: ad:30:b1:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqIpxOp59ftvaN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk ZGYyMGE4NWEtMDdiNC00ZDdhLWJkNDAtZTU2NzZlNGQwNjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/JWuGV8OcJUnQdmISdRvFgLYVDSQw7wwegxY PxkHltgDbOpuN+9Oey2Ick30iHOxj6ckDQxbAubBG1RCj4B1R2DEf9BKYD+OL0PV 1SILYKzEGSQfRxUuH1sl1O+/wSXpNZljE4ZT4tIEtOHV3Ulvl/Wnz0pN4Ao81x7B /Ku3VOkvq96UbhdIPdJ5s5yZrxUj5ZNSEqF3kgYzgmvwc+0VuNLyuCvu6FnaCFy3 HB9wVZeSeKaYSdkjN5tf5KbNOeHezPv/odpnQnpmTt9602PXhY+KD/V1vlBD6jpA F685d0lolPGU9bMad4IXaAvKEcHqTPEl7WmCjr1p8LiKz7luvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBK32pmSBgL91pOCAPk5M5BUd6sGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTJjN2QzYjMtOGE3Ni0z MTJlLWI0M2EtZmYwZGNjMGQwNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJm+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsHEVEf1um/f6zEsv8MQTRaxF5LZWnWabqcn/hCKpU9Rr6IfeKV5+MS Do/S4CPE4C7vB9K9JZeUZupr2/CMCPX/VrkiUj9dcEKsLdYrA7ihiWxwc6+d2DwR RfBNReFz+klHU1hBHv9R2ZjkwiWtr2pL/cCsv1ADrAm+CBYmyXU6ZvCkvQbz+ACz N+CldJBp5/j7SfinePa9DZsZNpQwvlAM81yHA1MZoAWnHSZlq7KsnVdMJbKj8dBh rV6E3hSCRO6fOEWJyT1NVaRNbMViRgEE8Uo1/4JoZdseVo8108IZBi4w4CMyxo/N FAG7eh9pVOk/zHtdfth+Tp/Ut60wsQk= -----END CERTIFICATE-----Generated at Sun Oct 25 20:56:40 2026 by rpki-client