$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa File: 49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa (raw, json) Hash identifier: vxxx+RtT0MVW3pYt9CnbJrFvHzC0KnxlyrM/anQ16tU= Subject key identifier: 90:19:71:A3:D7:9A:61:6B:17:DE:B9:F0:F8:AB:F9:10:DB:6F:DB:09 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E97B50F6B59F345A7ABF26080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.153.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:0f:6b:59:f3:45:a7:ab:f2:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=4b0b86ef-6851-4956-a9e9-2b119ab19a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4f:02:66:36:a2:de:10:ef:ee:4b:1f:88:c6: 1a:9e:1d:c9:c9:a4:0c:8d:51:87:64:5d:79:ac:a1: 39:bf:28:ce:dc:9b:b6:a4:f2:4b:d2:52:d0:e6:76: 83:b0:c4:84:07:10:ef:3c:3c:a5:f4:2a:a6:0d:48: 29:0a:0a:6d:e1:53:3d:09:c2:1d:79:86:57:0b:5b: 77:41:9d:66:06:35:5f:1f:9b:48:de:2d:a8:d0:e0: dd:a8:22:aa:e2:46:a6:a1:b9:e8:e1:8a:a0:25:27: a9:a0:c8:43:40:62:ec:a7:b7:ff:48:58:9e:cd:79: c7:e5:9e:ea:e2:1e:3c:c9:3c:bc:98:41:e5:ce:b1: 9a:55:1a:52:32:37:7d:bc:d1:0b:1a:65:aa:b8:64: e7:63:a4:5d:15:49:df:96:df:c0:53:81:b9:af:c1: 02:7d:44:6b:20:15:14:b7:5d:66:ec:9b:cb:4c:c1: e7:7e:c9:83:00:f0:51:55:b3:98:8a:79:d8:81:4c: 3c:b5:8c:10:21:26:a8:b2:46:08:61:31:f1:67:8e: 7c:b8:80:95:f8:7b:5a:be:36:d1:dd:11:53:5f:33: fe:43:bd:bf:f7:d6:ce:bb:3e:71:e2:85:cf:e8:87: 66:29:0b:11:f4:a0:f1:44:92:5b:90:77:2c:ec:7c: 5b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:19:71:A3:D7:9A:61:6B:17:DE:B9:F0:F8:AB:F9:10:DB:6F:DB:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:2c:f2:55:07:84:e9:bc:b4:25:f0:2d:5a:d0:dc:4b:03:07: af:c9:8c:0d:81:d5:ee:4b:20:9c:c1:9c:9d:d2:1b:aa:59:55: cd:a9:7f:f4:36:c4:07:24:18:8a:d0:79:66:28:6d:e1:e2:22: 8d:92:92:07:8d:0f:b3:7b:44:3f:29:d6:19:d8:15:d9:8e:56: 79:f9:65:cd:e1:10:a6:15:21:fc:fd:d8:f3:59:7c:fb:88:2d: 3a:77:61:a4:e6:60:6d:08:93:36:03:bf:35:71:a2:c2:db:1b: f7:bd:c2:57:7e:6e:52:b2:15:0b:a9:8b:b5:fe:4f:50:c1:76: 40:a5:54:f2:a6:72:3a:a3:82:d8:8d:39:4f:37:6e:f2:1b:93: 4f:0f:70:6c:36:c2:88:3d:c0:58:c3:4d:37:17:12:8f:19:84: f9:ac:f2:1f:6b:f6:44:21:e3:d2:c7:97:d4:4b:81:84:f4:9d: fa:1d:17:5f:6a:20:70:8a:33:77:ab:00:fc:4d:06:9e:11:e0: 21:e4:04:14:1d:fe:6c:50:a9:97:82:f6:45:d4:2f:af:c4:6f: ce:4e:a7:78:57:e9:c3:d5:5a:27:57:fd:bc:bd:2d:54:ee:ba: ca:42:53:2f:4d:f1:ca:b9:a2:84:9a:83:00:1b:61:a0:49:69: 6d:f8:09:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQ9rWfNFp6vyYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk NGIwYjg2ZWYtNjg1MS00OTU2LWE5ZTktMmIxMTlhYjE5YTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk8CZjai3hDv7ksfiMYanh3JyaQMjVGHZF15 rKE5vyjO3Ju2pPJL0lLQ5naDsMSEBxDvPDyl9CqmDUgpCgpt4VM9CcIdeYZXC1t3 QZ1mBjVfH5tI3i2o0ODdqCKq4kamobno4YqgJSepoMhDQGLsp7f/SFiezXnH5Z7q 4h48yTy8mEHlzrGaVRpSMjd9vNELGmWquGTnY6RdFUnflt/AU4G5r8ECfURrIBUU t11m7JvLTMHnfsmDAPBRVbOYinnYgUw8tYwQISaoskYIYTHxZ458uICV+HtavjbR 3RFTXzP+Q72/99bOuz5x4oXP6IdmKQsR9KDxRJJbkHcs7HxbcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAZcaPXmmFrF9658Pir+RDbb9sJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDllZjJlMmMtNzdlZi0z N2M5LWIzMjctMjRlOGVlMjBlZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcs8lUHhOm8tCXwLVrQ3EsDB6/JjA2B1e5LIJzBnJ3SG6pZVc2pf/Q2 xAckGIrQeWYobeHiIo2SkgeND7N7RD8p1hnYFdmOVnn5Zc3hEKYVIfz92PNZfPuI LTp3YaTmYG0IkzYDvzVxosLbG/e9wld+blKyFQupi7X+T1DBdkClVPKmcjqjgtiN OU83bvIbk08PcGw2wog9wFjDTTcXEo8ZhPms8h9r9kQh49LHl9RLgYT0nfodF19q IHCKM3erAPxNBp4R4CHkBBQd/mxQqZeC9kXUL6/Eb85Op3hX6cPVWidX/by9LVTu uspCUy9N8cq5ooSagwAbYaBJaW34CQw= -----END CERTIFICATE-----Generated at Fri Jul 24 15:09:07 2026 by rpki-client