$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/609e63b1-2542-3de6-b833-b56dd677893b.roa File: 609e63b1-2542-3de6-b833-b56dd677893b.roa (raw, json) Hash identifier: 39XkuU+8o+N9ULLRFXSvu9uF5z/ezVCalcNgmZVTBwQ= Subject key identifier: F5:62:95:AD:84:97:9E:C8:21:94:11:EA:3F:D9:10:DC:4E:78:4A:81 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E97B50F0A574EC431BB0D6880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/609e63b1-2542-3de6-b833-b56dd677893b.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.153.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:0f:0a:57:4e:c4:31:bb:0d:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=678700ab-1d22-4c2b-997d-fe600482c26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:1d:40:0a:a7:ad:4e:1c:fc:6e:be:ff:c5: 5d:90:e0:df:c6:e4:74:46:d6:7c:7b:be:b0:52:3a: 60:eb:3f:58:d6:64:40:6b:b4:c3:f0:79:3f:5b:ad: 04:0d:bc:02:df:b4:a5:e3:01:2f:b6:fc:e4:13:89: 2f:47:60:25:72:61:5f:8e:30:95:63:8f:e7:4e:50: 02:a5:ae:f6:52:19:41:40:9e:72:47:03:f2:86:b5: 79:8e:31:20:46:fa:a0:89:cd:ff:64:76:25:43:36: 7e:ab:3e:e6:ea:29:8e:93:02:71:c5:1f:3f:bb:df: c8:98:1b:c1:a6:18:79:03:52:07:82:40:b9:87:e4: f2:ae:53:90:ae:5d:99:bb:66:8b:fa:66:21:21:08: 74:ea:da:e8:52:82:92:c0:7a:6b:1b:ae:a0:06:cb: 6e:74:c8:cc:b9:bd:20:82:16:22:23:24:9f:32:8d: 6f:c4:2a:b1:ce:1a:75:68:ff:d0:21:0d:84:6d:c1: 78:80:58:98:22:92:c0:fe:d8:50:52:9d:7b:ea:5f: 33:b1:c4:2d:6d:3c:c7:f4:bc:78:98:65:c4:1d:d7: 68:5d:a2:cc:dd:6f:49:25:f9:28:62:b5:a6:c9:db: 2b:e7:fa:6b:7d:30:38:49:e6:1b:bb:52:64:2a:a9: de:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:62:95:AD:84:97:9E:C8:21:94:11:EA:3F:D9:10:DC:4E:78:4A:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/609e63b1-2542-3de6-b833-b56dd677893b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c9:d3:38:8c:65:97:b9:53:f4:57:3f:c9:0f:9d:c6:75:c0: 6e:4c:4c:d5:2d:ff:5a:c5:f9:84:8a:55:b0:78:4e:8d:30:8a: 7d:c5:3c:4d:0d:7c:b4:5c:79:42:20:62:69:de:db:83:56:2c: 22:81:08:d2:ae:2e:1e:c9:da:46:a1:97:4f:7a:dc:c7:75:66: 81:0a:94:ed:c1:f3:d4:b2:06:e2:44:4e:4e:10:ff:b5:d0:58: 02:1c:70:9a:3a:e1:13:86:0a:e6:30:72:ea:72:f2:cd:1f:05: 88:86:cc:77:e6:a5:c2:13:30:ba:45:e8:94:80:f7:25:45:30: 7a:e7:4b:9a:be:af:58:17:31:01:31:70:4c:1c:d4:93:18:f9: dd:1c:94:58:eb:88:10:2b:da:92:a9:92:49:4f:5d:2d:07:64: 25:d4:0b:46:a8:e6:5b:f5:8c:80:b0:4d:8e:3c:20:01:8c:03: 52:bb:e2:16:d2:19:cd:cb:68:39:74:0b:5e:69:00:32:9c:96: 5e:0d:f7:28:66:04:ac:47:4c:64:5a:39:06:17:6c:89:97:44: 56:59:91:a0:9a:d8:20:31:f1:24:05:ee:eb:28:66:a9:cc:67: 81:7c:79:17:bc:6f:22:47:ea:3d:6c:fb:9d:54:a4:f0:36:61: 54:d1:4b:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQ8KV07EMbsNaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk Njc4NzAwYWItMWQyMi00YzJiLTk5N2QtZmU2MDA0ODJjMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3MdQAqnrU4c/G6+/8VdkODfxuR0RtZ8e76w Ujpg6z9Y1mRAa7TD8Hk/W60EDbwC37Sl4wEvtvzkE4kvR2AlcmFfjjCVY4/nTlAC pa72UhlBQJ5yRwPyhrV5jjEgRvqgic3/ZHYlQzZ+qz7m6imOkwJxxR8/u9/ImBvB phh5A1IHgkC5h+TyrlOQrl2Zu2aL+mYhIQh06troUoKSwHprG66gBstudMjMub0g ghYiIySfMo1vxCqxzhp1aP/QIQ2EbcF4gFiYIpLA/thQUp176l8zscQtbTzH9Lx4 mGXEHddoXaLM3W9JJfkoYrWmydsr5/prfTA4SeYbu1JkKqnegQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVila2El57IIZQR6j/ZENxOeEqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjA5ZTYzYjEtMjU0Mi0z ZGU2LWI4MzMtYjU2ZGQ2Nzc4OTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrJ0ziMZZe5U/RXP8kPncZ1wG5MTNUt/1rF+YSKVbB4To0win3FPE0N fLRceUIgYmne24NWLCKBCNKuLh7J2kahl0963Md1ZoEKlO3B89SyBuJETk4Q/7XQ WAIccJo64ROGCuYwcupy8s0fBYiGzHfmpcITMLpF6JSA9yVFMHrnS5q+r1gXMQEx cEwc1JMY+d0clFjriBAr2pKpkklPXS0HZCXUC0ao5lv1jICwTY48IAGMA1K74hbS Gc3LaDl0C15pADKcll4N9yhmBKxHTGRaOQYXbImXRFZZkaCa2CAx8SQF7usoZqnM Z4F8eRe8byJH6j1s+51UpPA2YVTRS2I= -----END CERTIFICATE-----Generated at Fri Jul 24 14:04:28 2026 by rpki-client