$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/572409db-3ef3-37dc-a464-eedbee4a47ed.roa File: 572409db-3ef3-37dc-a464-eedbee4a47ed.roa (raw, json) Hash identifier: jB2aDxf7DtwfPOA1Bj4liOYBtdk7GsPihQiaz6ENLn4= Subject key identifier: 6F:AF:95:BE:86:85:9E:AC:C4:06:56:19:6A:F3:A7:11:9D:20:75:C7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E97B4FBFB68C743F7B51D8DE0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/572409db-3ef3-37dc-a464-eedbee4a47ed.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.153.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b4:fb:fb:68:c7:43:f7:b5:1d:8d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=78fba1ee-0246-4fd2-9f8e-250ee8d4351f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a4:f3:16:cd:02:90:3e:c0:4f:ab:30:bf:b7: 27:0e:b8:e5:fa:87:e7:44:2b:3a:bd:ea:d1:66:5f: 98:6a:d5:ce:9f:6d:7a:1e:9e:a4:83:bf:5c:60:a1: e7:a8:58:35:4a:1b:d8:2e:e4:00:65:e2:f7:4b:7f: cc:22:39:eb:c9:a6:7f:80:59:c0:69:a3:a2:e8:cf: 96:2f:2e:c2:c7:1e:04:3b:b8:13:ae:76:0c:67:c0: 16:23:93:da:23:9b:b1:aa:64:d2:93:42:f6:83:8f: 09:9e:4a:5b:46:27:80:11:b2:36:9f:60:20:02:55: 0b:b3:3d:f6:88:c8:dd:6f:03:0d:f7:33:75:c7:7f: e3:e2:fb:c1:6d:bb:54:a7:40:19:10:3d:c9:79:5a: 30:fb:d1:15:0f:76:4e:c8:f8:05:45:29:aa:97:6c: 69:e2:7d:41:a1:1f:24:ce:4b:10:f1:62:b9:83:a1: df:9b:ed:66:1b:cc:e0:09:3b:52:c6:41:75:1c:ff: 33:46:15:18:63:10:45:d8:1c:65:49:e2:fd:7f:56: b2:9f:b0:5f:a3:63:ec:c8:a1:39:ed:41:26:83:7e: d3:eb:7d:f1:50:24:21:be:9c:22:7d:9b:d7:76:4e: 0c:d0:1c:bb:a2:0d:a4:df:04:b6:f1:3e:62:77:e2: 3f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AF:95:BE:86:85:9E:AC:C4:06:56:19:6A:F3:A7:11:9D:20:75:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/572409db-3ef3-37dc-a464-eedbee4a47ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:92:3e:2c:69:a5:2c:63:df:77:4d:9a:59:17:d6:a5:89:67: f1:e6:da:c1:e6:a9:4b:a4:38:75:f4:4a:70:58:7d:4a:f7:3e: 86:eb:ef:10:41:d1:cd:e4:e2:2a:03:a2:fc:25:62:b1:e1:3f: 9f:34:9b:ab:eb:b1:fd:21:d7:7b:d6:ce:b0:12:53:3c:43:98: d0:15:5f:cc:77:c0:c3:45:75:68:d5:40:bb:8d:0a:57:bc:01: be:a5:01:bd:f3:f9:4e:22:44:bd:60:b4:ca:52:64:b4:2d:7f: 61:1d:3f:c6:8f:d2:5b:ef:6d:bf:ac:d5:a9:41:a8:1c:fb:e2: ab:4c:ff:57:59:e9:e7:b4:7e:5f:33:eb:df:d0:c6:2e:52:e7: dd:c3:04:5a:af:92:9b:ca:e2:d9:3b:ae:60:5c:49:6a:8f:54: 05:4d:5d:b1:ed:77:09:8d:65:74:6b:59:c8:ce:aa:b2:fe:86: 65:d9:b2:be:b8:9d:e0:da:75:f0:d9:25:2e:6d:f4:5d:d1:fa: 35:ad:63:79:9f:21:f4:85:12:0e:12:05:0f:88:41:ca:f0:f2: 2c:19:93:04:a7:d3:e7:dc:c9:69:6c:25:b1:1e:ff:8a:d6:2b: 15:2f:90:d5:99:41:cb:7c:ec:1c:cd:77:04:e5:bc:5f:19:05: 02:8c:97:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtPv7aMdD97UdjeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk NzhmYmExZWUtMDI0Ni00ZmQyLTlmOGUtMjUwZWU4ZDQzNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKTzFs0CkD7AT6swv7cnDrjl+ofnRCs6verR Zl+YatXOn216Hp6kg79cYKHnqFg1ShvYLuQAZeL3S3/MIjnryaZ/gFnAaaOi6M+W Ly7Cxx4EO7gTrnYMZ8AWI5PaI5uxqmTSk0L2g48JnkpbRieAEbI2n2AgAlULsz32 iMjdbwMN9zN1x3/j4vvBbbtUp0AZED3JeVow+9EVD3ZOyPgFRSmql2xp4n1BoR8k zksQ8WK5g6Hfm+1mG8zgCTtSxkF1HP8zRhUYYxBF2BxlSeL9f1ayn7Bfo2PsyKE5 7UEmg37T633xUCQhvpwifZvXdk4M0By7og2k3wS28T5id+I/YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+vlb6GhZ6sxAZWGWrzpxGdIHXHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTcyNDA5ZGItM2VmMy0z N2RjLWE0NjQtZWVkYmVlNGE0N2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmSPixppSxj33dNmlkX1qWJZ/Hm2sHmqUukOHX0SnBYfUr3Pobr7xBB 0c3k4ioDovwlYrHhP580m6vrsf0h13vWzrASUzxDmNAVX8x3wMNFdWjVQLuNCle8 Ab6lAb3z+U4iRL1gtMpSZLQtf2EdP8aP0lvvbb+s1alBqBz74qtM/1dZ6ee0fl8z 69/Qxi5S593DBFqvkpvK4tk7rmBcSWqPVAVNXbHtdwmNZXRrWcjOqrL+hmXZsr64 neDadfDZJS5t9F3R+jWtY3mfIfSFEg4SBQ+IQcrw8iwZkwSn0+fcyWlsJbEe/4rW KxUvkNWZQct87BzNdwTlvF8ZBQKMlyw= -----END CERTIFICATE-----Generated at Fri Jul 24 12:53:07 2026 by rpki-client