$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4ca8c3b-9666-353c-ac32-7b4bf191f70e.roa File: a4ca8c3b-9666-353c-ac32-7b4bf191f70e.roa (raw, json) Hash identifier: ICjS2VOUzAa0lhVfEXPe0UlWUffSN6EHCN0KZu/7u6g= Subject key identifier: 11:1D:F9:D2:6A:A7:BE:A7:74:84:4F:46:6B:F4:1A:26:EB:36:31:9B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E97B4FF4AB83C3A4601994880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4ca8c3b-9666-353c-ac32-7b4bf191f70e.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.153.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b4:ff:4a:b8:3c:3a:46:01:99:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=5666d080-9e71-4c91-af49-f28faadb7508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0c:59:ad:95:95:d3:a5:25:07:d8:d5:68:4d: a0:30:35:f1:c9:3c:9f:15:d9:a1:24:fa:00:8a:c0: d9:60:88:de:1e:32:71:d8:1b:06:97:37:65:2d:81: 16:ad:8b:2d:a3:69:37:84:28:8d:04:24:e8:ff:92: 8e:7b:d6:c9:be:f8:59:31:4c:f9:e3:80:71:60:a4: c2:57:e7:b5:73:a5:51:e2:0f:20:d2:f0:a5:40:7f: 44:f8:9f:19:a1:6a:aa:a5:0c:3f:1c:ad:b6:91:e1: eb:59:d2:e3:1b:05:b9:7a:d7:61:95:24:f1:78:a3: 6b:2c:e6:2e:3b:7a:ef:7a:b8:eb:ed:18:35:7f:3a: b0:62:c9:ce:d9:e1:93:94:60:b8:f8:ab:db:42:02: 39:6e:a2:21:7a:be:f7:3a:a8:c9:9b:c8:45:b1:03: 12:69:1a:3f:64:4d:38:72:76:a2:74:5c:88:d7:3f: 2f:84:25:1c:62:1a:cd:84:7d:ef:d7:5f:d9:48:61: 53:8d:ba:09:7c:ac:f6:af:db:e3:57:ea:86:21:0c: 0d:63:b6:93:32:01:f7:d6:43:4c:43:1c:38:be:91: d9:94:ff:d2:ca:e8:09:2a:19:ad:24:90:c2:8c:e2: df:55:7c:39:53:4f:fc:f8:d3:74:da:9b:26:03:cf: 7a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1D:F9:D2:6A:A7:BE:A7:74:84:4F:46:6B:F4:1A:26:EB:36:31:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4ca8c3b-9666-353c-ac32-7b4bf191f70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:e9:a1:fb:6c:72:4d:b5:c2:db:e5:15:19:8b:f4:f8:06:1b: 2f:53:e3:ec:ca:29:d9:0d:4e:53:f9:b0:c7:72:55:ba:c5:a5: 30:65:31:1c:72:db:a8:c0:db:68:e6:3f:12:75:1d:af:e3:ba: f7:29:d3:6a:d9:97:ed:ba:85:1e:20:a1:fe:b3:22:88:01:67: 31:8a:4b:2f:09:f3:b0:34:59:e9:19:f8:bd:71:c2:f4:5f:03: 73:bd:5f:7d:60:21:d8:34:00:81:15:36:4f:69:5d:2b:09:0a: 8a:5a:ba:f4:20:dc:eb:be:27:23:b3:34:59:b1:fe:38:a4:81: 67:f0:9e:e6:45:7d:dc:53:2f:11:86:db:17:b5:cc:e4:38:b9: c8:fb:c7:e7:27:f4:fb:5d:31:53:bd:c0:5d:9c:10:40:11:e7: 69:2e:f3:9c:79:09:cd:a8:f9:f7:30:23:e1:3b:27:e5:aa:22: ac:a4:40:78:2a:6b:a5:fb:ce:2e:13:f1:e4:17:6f:e4:c3:c9: b4:72:17:72:15:e7:d2:ac:a8:6c:87:d3:2e:0f:1d:39:b5:45: 5e:0e:2e:73:a7:61:f4:14:56:be:24:1c:20:ce:0f:56:6a:f9: c2:5d:4c:ce:b7:70:54:e2:62:01:70:5a:16:ec:d4:a4:4a:9b: c0:3d:e2:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtP9KuDw6RgGZSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk NTY2NmQwODAtOWU3MS00YzkxLWFmNDktZjI4ZmFhZGI3NTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwxZrZWV06UlB9jVaE2gMDXxyTyfFdmhJPoA isDZYIjeHjJx2BsGlzdlLYEWrYsto2k3hCiNBCTo/5KOe9bJvvhZMUz544BxYKTC V+e1c6VR4g8g0vClQH9E+J8ZoWqqpQw/HK22keHrWdLjGwW5etdhlSTxeKNrLOYu O3rverjr7Rg1fzqwYsnO2eGTlGC4+KvbQgI5bqIher73OqjJm8hFsQMSaRo/ZE04 cnaidFyI1z8vhCUcYhrNhH3v11/ZSGFTjboJfKz2r9vjV+qGIQwNY7aTMgH31kNM Qxw4vpHZlP/SyugJKhmtJJDCjOLfVXw5U0/8+NN02psmA896iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEd+dJqp76ndIRPRmv0GibrNjGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTRjYThjM2ItOTY2Ni0z NTNjLWFjMzItN2I0YmYxOTFmNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/poftsck21wtvlFRmL9PgGGy9T4+zKKdkNTlP5sMdyVbrFpTBlMRxy 26jA22jmPxJ1Ha/juvcp02rZl+26hR4gof6zIogBZzGKSy8J87A0WekZ+L1xwvRf A3O9X31gIdg0AIEVNk9pXSsJCopauvQg3Ou+JyOzNFmx/jikgWfwnuZFfdxTLxGG 2xe1zOQ4ucj7x+cn9PtdMVO9wF2cEEAR52ku85x5Cc2o+fcwI+E7J+WqIqykQHgq a6X7zi4T8eQXb+TDybRyF3IV59KsqGyH0y4PHTm1RV4OLnOnYfQUVr4kHCDOD1Zq +cJdTM63cFTiYgFwWhbs1KRKm8A94kY= -----END CERTIFICATE-----Generated at Fri Jul 24 12:50:47 2026 by rpki-client