$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2d6c3da3-b8d2-3ca8-ad42-671a0b26b4e5.roa File: 2d6c3da3-b8d2-3ca8-ad42-671a0b26b4e5.roa (raw, json) Hash identifier: 3kMLb4xqpopB8z78k6KCIx7MgHiFgh1q/JDqwVafwAk= Subject key identifier: FF:06:68:F1:CA:5C:8A:22:EA:8D:11:5A:B2:EF:12:4E:F7:19:C9:99 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E97B50BC66450CAC06FF6A900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2d6c3da3-b8d2-3ca8-ad42-671a0b26b4e5.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.153.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:0b:c6:64:50:ca:c0:6f:f6:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=a08e2579-0dcc-4cb3-be82-f6cbf0ec22b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bd:ca:26:2e:47:2a:71:74:70:fc:0d:a5:0d: f4:f9:2d:66:bb:b6:22:1d:72:71:72:81:8f:18:14: 7f:6c:36:9b:06:90:4e:55:67:22:a5:e7:9a:37:7d: b3:1d:94:ae:02:11:6c:7e:7a:10:f2:cf:19:68:cf: d6:7e:08:92:82:96:ce:d8:19:a2:6d:c4:0f:4c:fa: 3f:50:04:51:2c:b8:86:74:db:ed:45:74:09:97:55: 04:2c:44:fc:58:8a:a8:69:bc:82:3a:80:db:41:cd: 6d:ba:76:ef:34:7a:82:51:f9:56:b9:77:82:0b:08: 9f:b9:27:64:aa:e4:43:9d:28:99:8c:3d:3b:30:52: a0:9a:35:b4:ec:e2:f9:f1:42:1b:8d:f4:3f:ac:70: 1b:d1:c2:2a:8d:09:b1:9f:81:ac:ff:6f:9d:6e:eb: b3:c2:af:22:7b:01:a1:04:72:ca:fe:2c:3b:74:f4: 1f:0e:a7:96:18:7a:c8:7d:71:5d:27:2f:2f:a0:2f: 16:30:2e:c4:92:a9:e3:fd:3a:91:b8:93:a7:16:47: 68:10:e4:16:5d:69:3d:62:9f:9d:48:ab:80:5f:bd: 5e:70:fd:d2:45:5d:b1:d4:db:45:62:13:14:8f:61: d8:3f:a0:f3:5b:4f:90:6a:bb:63:67:12:5c:83:08: c6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:06:68:F1:CA:5C:8A:22:EA:8D:11:5A:B2:EF:12:4E:F7:19:C9:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2d6c3da3-b8d2-3ca8-ad42-671a0b26b4e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:c7:21:5a:a7:63:c8:84:ba:4b:38:9a:78:27:60:8b:93:51: 55:b2:13:10:31:ee:b5:6d:e5:f3:7d:76:78:ee:37:05:0c:56: 06:6a:cb:dd:02:13:7f:99:ac:5e:e5:8d:4b:76:0e:4d:b4:69: 4f:fa:19:f3:77:91:59:ec:ed:6d:78:4d:92:04:f2:ac:3f:50: 79:47:03:15:dd:ad:27:ae:13:98:94:26:83:cf:2b:8d:94:a2: 4a:47:4f:98:35:2c:57:46:f0:74:c4:4b:f5:1d:a2:47:6d:c9: 08:ef:39:94:76:55:ec:14:be:51:77:d4:0d:fb:0c:0d:ae:3f: 9d:7c:d1:73:79:37:13:cb:f7:08:af:9a:aa:ed:5a:9f:d6:61: ca:10:3a:36:e2:66:79:15:78:de:9b:c2:1c:8a:cd:d6:82:11: c4:c0:a1:25:4a:b4:b7:85:9b:72:0b:b6:48:6b:63:fc:78:90: 5c:57:80:87:f5:51:02:2a:91:74:8d:23:39:b8:b2:17:f6:1f: 94:bf:09:b2:9c:a6:04:e3:59:cb:fc:3a:d8:ed:b4:06:85:fe: c8:31:45:9a:1e:5c:34:3a:82:69:03:dd:cf:36:89:bb:e3:63: ab:1b:27:43:46:d3:06:19:c4:6f:14:a5:c0:8f:3c:9f:cc:08: 36:84:cc:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQvGZFDKwG/2qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk YTA4ZTI1NzktMGRjYy00Y2IzLWJlODItZjZjYmYwZWMyMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr3KJi5HKnF0cPwNpQ30+S1mu7YiHXJxcoGP GBR/bDabBpBOVWcipeeaN32zHZSuAhFsfnoQ8s8ZaM/WfgiSgpbO2BmibcQPTPo/ UARRLLiGdNvtRXQJl1UELET8WIqoabyCOoDbQc1tunbvNHqCUflWuXeCCwifuSdk quRDnSiZjD07MFKgmjW07OL58UIbjfQ/rHAb0cIqjQmxn4Gs/2+dbuuzwq8iewGh BHLK/iw7dPQfDqeWGHrIfXFdJy8voC8WMC7Ekqnj/TqRuJOnFkdoEOQWXWk9Yp+d SKuAX71ecP3SRV2x1NtFYhMUj2HYP6DzW0+QartjZxJcgwjG0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8GaPHKXIoi6o0RWrLvEk73GcmZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmQ2YzNkYTMtYjhkMi0z Y2E4LWFkNDItNjcxYTBiMjZiNGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXHIVqnY8iEuks4mngnYIuTUVWyExAx7rVt5fN9dnjuNwUMVgZqy90C E3+ZrF7ljUt2Dk20aU/6GfN3kVns7W14TZIE8qw/UHlHAxXdrSeuE5iUJoPPK42U okpHT5g1LFdG8HTES/UdokdtyQjvOZR2VewUvlF31A37DA2uP5180XN5NxPL9wiv mqrtWp/WYcoQOjbiZnkVeN6bwhyKzdaCEcTAoSVKtLeFm3ILtkhrY/x4kFxXgIf1 UQIqkXSNIzm4shf2H5S/CbKcpgTjWcv8OtjttAaF/sgxRZoeXDQ6gmkD3c82ibvj Y6sbJ0NG0wYZxG8UpcCPPJ/MCDaEzK8= -----END CERTIFICATE-----Generated at Fri Jul 24 13:53:58 2026 by rpki-client