$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/634d5c06-38cc-328c-b749-6599f74d293f.roa File: 634d5c06-38cc-328c-b749-6599f74d293f.roa (raw, json) Hash identifier: f0/mEhymMuRSt5rfyP4D9yvDXxDmfy3dzPbVIac03BQ= Subject key identifier: 12:85:0F:25:81:3B:A5:9C:2B:4A:E6:A4:A2:C1:F8:13:B9:4C:50:82 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E97B4FD6504E3087AA8131000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/634d5c06-38cc-328c-b749-6599f74d293f.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.153.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b4:fd:65:04:e3:08:7a:a8:13:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=f7d2090b-2fd2-46a1-af8e-43793b933719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9a:10:96:14:4a:b5:3a:27:65:9b:b6:37:73: 6f:96:e0:22:09:7a:e6:4d:e6:ca:06:35:47:1d:72: d8:e8:ec:25:3b:0f:de:45:31:df:2c:13:14:ef:7c: 21:0b:75:47:04:01:7c:d8:d3:af:af:99:62:56:f7: 9e:9e:cc:c6:3e:6f:19:7b:1b:22:ae:22:f9:79:15: 4d:12:63:4e:6c:d9:64:dd:d6:6a:3a:25:1d:ee:da: 4f:50:23:48:82:fc:71:4a:b5:11:3c:14:f6:f7:bf: 53:e5:7e:12:2b:3e:a3:60:d3:37:05:9a:4a:4e:95: ee:d4:33:86:af:a2:dd:aa:39:c0:1f:20:f8:e3:d7: 6a:96:29:a2:93:55:fc:bc:33:48:ed:6d:30:e7:ea: a8:be:49:7d:57:27:49:e6:c5:8b:a4:c2:de:9e:6e: 5f:ec:bc:55:f1:a7:37:77:ea:e5:65:2f:a8:a1:fa: 3e:84:83:5f:2d:cc:77:8a:6e:ba:17:79:78:86:40: 02:67:17:e4:7c:ed:02:84:2f:b9:b7:7e:a3:f3:42: 0f:51:22:bf:ad:a7:c2:8a:fb:c6:eb:fa:ec:bc:99: cb:93:3a:bb:46:71:3f:ca:eb:f9:16:01:5b:25:2c: 37:ca:5c:3f:1c:a8:8c:68:37:5f:83:56:91:16:74: 40:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:85:0F:25:81:3B:A5:9C:2B:4A:E6:A4:A2:C1:F8:13:B9:4C:50:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/634d5c06-38cc-328c-b749-6599f74d293f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:b7:e3:ef:2a:de:d3:79:b8:58:47:4a:10:93:ac:c6:c9:08: a8:89:d6:0c:f2:0f:b0:44:92:43:c5:6e:90:f7:03:ff:a4:c2: e4:9c:8e:68:73:3c:f6:7a:bb:67:e3:35:b5:c1:77:00:02:57: 7b:d9:23:02:34:81:70:a2:07:81:99:e7:9d:d3:2f:fb:02:06: 45:44:69:a0:77:ea:9f:98:e6:41:8f:f0:d5:d5:9c:a3:82:cf: 24:11:64:83:11:be:2e:78:b0:2c:84:4f:a4:8a:3b:0c:14:55: 26:14:fd:ce:76:87:57:36:e4:fb:65:5d:fc:64:31:b7:b6:86: ec:59:64:a3:9a:ca:1e:1a:53:43:d8:1d:79:52:ad:79:86:e6: 58:37:2a:85:9d:0a:38:9c:f0:12:a9:79:e3:33:1c:20:cf:57: 5f:57:05:1e:d1:d0:6f:a8:a3:79:a9:97:1d:b2:1f:95:1a:41: 10:ab:dc:95:ea:d2:0b:70:00:48:17:ed:71:f0:1a:59:2e:bc: 81:02:9d:6e:69:d3:6e:73:ea:74:6a:4a:f2:40:53:8b:bd:95: 1b:0c:f0:9b:bb:d6:05:7e:11:2d:28:60:5e:0a:9e:d7:2b:03: e3:4f:42:f0:a6:37:0f:0d:e6:6b:90:ee:90:d0:74:4d:d9:82: 3a:ae:1a:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtP1lBOMIeqgTEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk ZjdkMjA5MGItMmZkMi00NmExLWFmOGUtNDM3OTNiOTMzNzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0poQlhRKtTonZZu2N3NvluAiCXrmTebKBjVH HXLY6OwlOw/eRTHfLBMU73whC3VHBAF82NOvr5liVveenszGPm8ZexsiriL5eRVN EmNObNlk3dZqOiUd7tpPUCNIgvxxSrURPBT2979T5X4SKz6jYNM3BZpKTpXu1DOG r6LdqjnAHyD449dqlimik1X8vDNI7W0w5+qovkl9VydJ5sWLpMLenm5f7LxV8ac3 d+rlZS+oofo+hINfLcx3im66F3l4hkACZxfkfO0ChC+5t36j80IPUSK/rafCivvG 6/rsvJnLkzq7RnE/yuv5FgFbJSw3ylw/HKiMaDdfg1aRFnRAVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKFDyWBO6WcK0rmpKLB+BO5TFCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjM0ZDVjMDYtMzhjYy0z MjhjLWI3NDktNjU5OWY3NGQyOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu34+8q3tN5uFhHShCTrMbJCKiJ1gzyD7BEkkPFbpD3A/+kwuScjmhz PPZ6u2fjNbXBdwACV3vZIwI0gXCiB4GZ553TL/sCBkVEaaB36p+Y5kGP8NXVnKOC zyQRZIMRvi54sCyET6SKOwwUVSYU/c52h1c25PtlXfxkMbe2huxZZKOayh4aU0PY HXlSrXmG5lg3KoWdCjic8BKpeeMzHCDPV19XBR7R0G+oo3mplx2yH5UaQRCr3JXq 0gtwAEgX7XHwGlkuvIECnW5p025z6nRqSvJAU4u9lRsM8Ju71gV+ES0oYF4Kntcr A+NPQvCmNw8N5muQ7pDQdE3ZgjquGlw= -----END CERTIFICATE-----Generated at Fri Jul 24 17:04:43 2026 by rpki-client