$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a0d833cb-ebc1-309a-a1c5-612ae3226a6e.roa File: a0d833cb-ebc1-309a-a1c5-612ae3226a6e.roa (raw, json) Hash identifier: 2vMOlqe3sf+dRfYaBCK6DkwToRzaiv6kZrJ5fhLo6Xc= Subject key identifier: 20:7A:29:39:77:4C:50:8F:C7:3E:EE:EC:B4:8D:1C:32:D7:69:16:9A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E97B50B64D0A38AD413EC7300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a0d833cb-ebc1-309a-a1c5-612ae3226a6e.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.153.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:0b:64:d0:a3:8a:d4:13:ec:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=42cc23bc-f8cd-4e96-a910-48327a6fe054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1a:b3:a0:5d:38:1f:0e:af:66:52:3e:3c:6c: 92:2b:03:b8:ea:4a:66:f9:6a:d6:53:59:ae:46:22: 8c:c5:ec:e9:81:d7:4e:97:82:86:32:69:6e:93:f5: d3:0e:b2:3e:19:4c:37:3c:46:58:42:7c:9a:5a:8b: 75:83:d2:4a:25:25:3c:8d:c0:6f:d1:01:fc:23:d5: f8:35:a5:eb:f4:68:69:45:0d:0d:15:20:c1:5a:b1: d3:7b:ae:c3:04:97:59:10:ae:27:2f:6a:fa:0b:3d: fb:ae:1b:90:a0:6b:b5:1b:30:24:81:88:80:0f:11: 4f:86:0b:78:b9:fe:9b:4b:00:c6:24:6b:b3:df:fa: 0a:c7:00:4c:97:6c:90:06:78:1f:88:a6:10:75:be: fa:43:52:ef:5d:b1:d4:49:4d:5e:ca:fc:e3:ed:92: eb:92:0d:bf:8f:ad:ad:83:28:77:62:82:3f:c8:04: b7:13:af:db:db:52:23:4a:a3:2d:e3:8e:d8:4e:7b: ab:d7:55:02:66:0e:4a:92:fa:da:53:51:a6:83:88: a6:a2:cd:c5:ec:70:ca:76:59:f5:5d:0b:02:d5:bc: 9a:2b:e3:0f:07:2d:55:c3:48:f0:6e:6c:91:3b:94: ba:bd:fd:71:33:00:e3:59:1a:8c:e7:8c:6f:3f:84: 92:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7A:29:39:77:4C:50:8F:C7:3E:EE:EC:B4:8D:1C:32:D7:69:16:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a0d833cb-ebc1-309a-a1c5-612ae3226a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:0a:a4:9e:f0:2a:91:08:f0:5c:3b:99:da:cc:a8:02:ad:8c: 12:f4:64:04:e8:22:dc:a8:c2:92:1b:c6:2c:c7:a7:7e:92:8d: e6:f6:b7:bd:76:2c:17:9c:48:d1:84:b9:cf:f1:a9:f8:b9:d9: dd:9b:ee:db:31:95:65:aa:d3:f2:a5:60:97:66:71:f9:52:89: b8:c1:0a:6f:8c:c2:f2:60:2c:59:20:c0:ee:a9:84:3f:41:d8: 1f:c0:a2:90:b0:b1:d3:94:d0:c5:c0:92:c4:6a:a6:24:59:4e: f2:f0:39:a0:ae:cb:e7:6e:18:35:64:08:1a:47:b2:48:81:04: 93:a0:71:0a:91:d8:06:c6:a5:25:1a:d4:0a:b2:ff:04:05:f8: dd:7c:35:26:ab:fc:d6:6c:1d:a4:8f:01:6a:05:28:b1:fb:17: f5:58:1b:f3:a8:ba:db:f6:a0:e2:d5:0d:9b:1c:39:bf:26:91: 0a:c8:89:8e:35:df:7a:42:d4:25:13:99:c0:13:1c:4b:f1:0f: df:f5:80:56:c1:a4:de:48:d7:62:7d:07:a7:e8:23:63:c9:c3: 6f:2e:41:82:48:d1:47:46:0b:7c:60:65:85:6a:0b:7e:b1:4a: 06:a1:5f:36:a7:21:a4:0b:20:ea:01:c4:92:cd:09:d8:77:78: 95:c5:ea:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQtk0KOK1BPscwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk NDJjYzIzYmMtZjhjZC00ZTk2LWE5MTAtNDgzMjdhNmZlMDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhqzoF04Hw6vZlI+PGySKwO46kpm+WrWU1mu RiKMxezpgddOl4KGMmluk/XTDrI+GUw3PEZYQnyaWot1g9JKJSU8jcBv0QH8I9X4 NaXr9GhpRQ0NFSDBWrHTe67DBJdZEK4nL2r6Cz37rhuQoGu1GzAkgYiADxFPhgt4 uf6bSwDGJGuz3/oKxwBMl2yQBngfiKYQdb76Q1LvXbHUSU1eyvzj7ZLrkg2/j62t gyh3YoI/yAS3E6/b21IjSqMt447YTnur11UCZg5KkvraU1Gmg4imos3F7HDKdln1 XQsC1byaK+MPBy1Vw0jwbmyRO5S6vf1xMwDjWRqM54xvP4SSEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCB6KTl3TFCPxz7u7LSNHDLXaRaaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTBkODMzY2ItZWJjMS0z MDlhLWExYzUtNjEyYWUzMjI2YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEKpJ7wKpEI8Fw7mdrMqAKtjBL0ZAToItyowpIbxizHp36Sjeb2t712 LBecSNGEuc/xqfi52d2b7tsxlWWq0/KlYJdmcflSibjBCm+MwvJgLFkgwO6phD9B 2B/AopCwsdOU0MXAksRqpiRZTvLwOaCuy+duGDVkCBpHskiBBJOgcQqR2AbGpSUa 1Aqy/wQF+N18NSar/NZsHaSPAWoFKLH7F/VYG/Ooutv2oOLVDZscOb8mkQrIiY41 33pC1CUTmcATHEvxD9/1gFbBpN5I12J9B6foI2PJw28uQYJI0UdGC3xgZYVqC36x SgahXzanIaQLIOoBxJLNCdh3eJXF6p8= -----END CERTIFICATE-----Generated at Fri Jul 24 12:55:02 2026 by rpki-client