$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04f49678-6960-3aec-9e72-225a207c1fe5.roa File: 04f49678-6960-3aec-9e72-225a207c1fe5.roa (raw, json) Hash identifier: YU3gvjCFFhnxSG0eYbdZzHFdVK6YPCA94DADMN2dLbE= Subject key identifier: B9:39:79:2A:5E:4F:6B:7B:55:24:9A:3A:5E:7C:2B:E9:B3:13:C2:CC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E97B4FF2101640B9B5575E080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04f49678-6960-3aec-9e72-225a207c1fe5.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.153.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b4:ff:21:01:64:0b:9b:55:75:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=84b11e06-9cfa-459e-b956-c725fdcb873a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:be:49:9b:76:8f:72:15:7c:26:24:bf:2c:47: dc:b6:dc:ba:36:74:17:2f:3b:bb:8a:11:e0:86:f8: 78:08:8b:c8:23:ae:53:6e:c1:c3:c4:4d:25:4e:64: ba:e8:c2:c8:ee:19:b4:8c:4e:b2:bc:97:61:79:37: 41:ce:9b:fe:9d:61:bb:61:5b:ae:87:a9:c9:18:5c: ca:73:5e:64:ec:21:84:2c:78:a2:fd:b1:d5:61:84: 44:8a:a9:26:2c:19:f6:d9:e1:ff:e8:80:91:c6:b4: 38:47:16:61:51:54:c3:2f:89:04:1a:ed:7e:de:09: c1:32:7a:f6:57:66:1a:e9:5f:2f:6a:ae:b3:7a:11: 2b:18:fb:36:50:9e:85:a2:28:36:12:a8:89:11:9e: 4c:a8:b5:8f:28:e6:51:64:82:cf:b7:38:c3:48:42: ef:49:6c:2e:69:a2:bc:ff:47:67:fd:c6:6f:d5:54: fa:0e:b5:0a:69:bc:f1:56:a4:2e:58:a5:8d:e8:4b: cf:51:a0:25:69:8d:ae:54:a1:38:d0:2c:a3:44:73: 0f:af:a1:86:64:d0:5d:c0:67:cb:2a:a6:ef:0e:08: 26:a8:0c:a8:78:e4:b8:2c:60:8f:3f:62:31:8c:9b: fa:64:15:0f:9a:37:a5:d6:c5:6d:09:d6:17:6b:52: 2f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:39:79:2A:5E:4F:6B:7B:55:24:9A:3A:5E:7C:2B:E9:B3:13:C2:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04f49678-6960-3aec-9e72-225a207c1fe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:a4:69:57:a7:4f:a4:63:e7:15:44:92:62:7c:e1:86:50:e3: 36:0c:a9:84:1a:2c:c5:03:b2:53:77:28:fc:27:a2:ff:58:55: 9d:28:6e:67:22:8b:d6:0a:7b:3b:c1:39:09:82:f6:94:4a:f8: a5:17:fa:e9:da:46:13:9d:83:84:86:31:2f:86:39:d0:30:d9: 02:d9:fc:00:0e:1d:6c:6e:74:b0:54:21:36:ea:a7:c1:67:51: 11:ee:5e:d6:8a:b7:00:81:ed:0d:22:03:ac:8e:37:53:8c:0e: 01:8b:d0:b9:9b:66:a0:62:6b:51:cb:79:d8:4c:b6:d6:d8:a7: 4c:4a:86:8e:8d:26:18:4b:3d:e6:12:b6:f9:3a:0b:3a:5e:43: 84:9b:92:95:7a:30:3f:17:3f:1b:8d:dc:6e:17:e1:a1:24:57: 65:8e:90:8e:25:c1:5d:88:fe:96:2c:e8:e1:fa:ef:fd:1a:d1: ee:16:d2:3e:66:23:37:0d:1e:15:fc:6c:d8:46:89:a4:59:18: b2:34:19:2e:50:6e:d7:9a:8f:85:fa:ed:65:63:d9:97:c4:75: ce:ea:21:3c:c9:0f:5a:6c:3f:3b:67:c8:4c:3d:3b:95:2c:a7: b8:b9:d3:10:0c:cb:31:b7:7a:56:de:50:96:be:67:f7:5b:46: e9:fe:44:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtP8hAWQLm1V14IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk ODRiMTFlMDYtOWNmYS00NTllLWI5NTYtYzcyNWZkY2I4NzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi75Jm3aPchV8JiS/LEfctty6NnQXLzu7ihHg hvh4CIvII65TbsHDxE0lTmS66MLI7hm0jE6yvJdheTdBzpv+nWG7YVuuh6nJGFzK c15k7CGELHii/bHVYYREiqkmLBn22eH/6ICRxrQ4RxZhUVTDL4kEGu1+3gnBMnr2 V2Ya6V8vaq6zehErGPs2UJ6Foig2EqiJEZ5MqLWPKOZRZILPtzjDSELvSWwuaaK8 /0dn/cZv1VT6DrUKabzxVqQuWKWN6EvPUaAlaY2uVKE40CyjRHMPr6GGZNBdwGfL KqbvDggmqAyoeOS4LGCPP2IxjJv6ZBUPmjel1sVtCdYXa1IvsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLk5eSpeT2t7VSSaOl58K+mzE8LMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDRmNDk2NzgtNjk2MC0z YWVjLTllNzItMjI1YTIwN2MxZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2kaVenT6Rj5xVEkmJ84YZQ4zYMqYQaLMUDslN3KPwnov9YVZ0obmci i9YKezvBOQmC9pRK+KUX+unaRhOdg4SGMS+GOdAw2QLZ/AAOHWxudLBUITbqp8Fn URHuXtaKtwCB7Q0iA6yON1OMDgGL0LmbZqBia1HLedhMttbYp0xKho6NJhhLPeYS tvk6CzpeQ4SbkpV6MD8XPxuN3G4X4aEkV2WOkI4lwV2I/pYs6OH67/0a0e4W0j5m IzcNHhX8bNhGiaRZGLI0GS5Qbteaj4X67WVj2ZfEdc7qITzJD1psPztnyEw9O5Us p7i50xAMyzG3elbeUJa+Z/dbRun+REs= -----END CERTIFICATE-----Generated at Fri Jul 24 14:05:26 2026 by rpki-client