$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a83b2356-d220-35a8-ac0c-e8f69259c4e3.roa File: a83b2356-d220-35a8-ac0c-e8f69259c4e3.roa (raw, json) Hash identifier: jDA7Ya0IJ5hazxOyehSjmGui7tJNJXmg0k7G1kvnu2k= Subject key identifier: 3E:0C:41:38:79:DF:1E:2A:77:13:25:3B:AB:C4:6F:43:DB:0E:0F:9E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E97B4FC7D8CA2C77CFA7AC100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a83b2356-d220-35a8-ac0c-e8f69259c4e3.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.153.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b4:fc:7d:8c:a2:c7:7c:fa:7a:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=f8de0bf3-0298-4988-bb3f-fb4ace881364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:43:9b:15:a1:43:fb:e5:67:f7:19:15:24:ee: c6:cf:52:61:85:d6:9b:26:bf:39:12:4a:17:af:41: d1:7b:94:66:01:d7:31:71:ed:f1:e1:bf:9f:96:25: 79:94:4a:97:cb:85:ba:c1:1f:56:20:f9:ff:87:bc: 41:c2:c7:9c:42:0c:bd:3a:e6:be:2b:e4:ab:94:6e: 80:44:26:69:9e:ea:41:ca:cb:c3:a3:e3:47:f9:bf: 44:8b:f3:fd:a1:d4:0d:01:ef:4c:2d:fa:b1:4e:87: 12:5c:4a:ee:1c:2d:76:77:c4:a8:23:53:b4:20:1b: ec:74:c1:7b:4c:c3:2f:23:c9:e8:ec:eb:69:97:df: cf:bc:68:66:4c:28:ad:13:b2:53:da:ff:98:9d:6d: e3:cb:3b:19:39:d4:d2:1a:ee:11:3e:a7:ba:c4:47: 71:00:43:2c:58:bd:d2:7c:a3:56:6b:3f:bb:cc:77: ad:85:4c:ff:ad:14:39:b6:2b:07:e1:85:14:dd:9b: 1a:ff:6d:ac:9f:ab:3f:47:32:80:65:59:81:af:a7: 58:f6:6b:2c:b9:4d:3c:2c:44:83:00:34:6e:f5:2f: 3f:17:0b:ea:25:49:87:fa:b4:3f:a8:6e:5d:9b:12: da:71:b3:c9:1d:18:2d:68:6f:50:9c:c3:dd:f6:82: c0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0C:41:38:79:DF:1E:2A:77:13:25:3B:AB:C4:6F:43:DB:0E:0F:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a83b2356-d220-35a8-ac0c-e8f69259c4e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:8e:e8:5a:94:53:82:89:d7:e7:ff:60:60:8b:79:ce:93:eb: ab:d0:ab:08:5b:56:ef:2f:f8:89:ec:3b:ac:3f:dc:f8:da:31: d1:05:65:4f:cd:3d:ec:bd:46:16:39:62:ec:28:5d:82:89:c6: 9f:d6:b5:a0:86:26:94:38:3c:87:b7:70:7a:02:74:bb:fe:92: e0:d1:3c:df:34:80:d3:cc:d1:17:e8:30:5f:02:a0:9b:d3:18: 83:e2:a6:0f:37:d6:86:9b:84:5b:df:8f:2b:42:27:66:6a:ee: 19:1a:1c:76:88:9f:88:e8:b4:e4:af:a1:6a:94:87:90:cd:cb: 6a:a9:a8:20:07:f8:8c:3f:e7:e8:bb:c8:a1:32:d2:ca:63:41: d3:8e:1e:61:fd:2b:03:63:ce:c7:e0:4d:50:a0:5d:eb:dd:f4: b0:56:00:c5:b0:6f:a4:b7:74:5e:7f:6b:0c:3d:de:a6:ee:f8: 2a:76:8e:49:b5:39:f2:bf:41:89:6d:43:d4:ed:a8:86:f9:74: d4:16:6d:7b:05:5b:3a:e4:1d:73:34:b6:49:f0:0a:03:c7:3f: c2:37:92:06:da:2c:ff:dc:30:10:3d:c6:e8:ac:ec:64:67:36: 4a:ec:46:c8:45:76:c3:bc:c0:81:e5:71:6d:44:f1:b1:c4:77: 9b:39:67:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtPx9jKLHfPp6wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk ZjhkZTBiZjMtMDI5OC00OTg4LWJiM2YtZmI0YWNlODgxMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUObFaFD++Vn9xkVJO7Gz1JhhdabJr85EkoX r0HRe5RmAdcxce3x4b+fliV5lEqXy4W6wR9WIPn/h7xBwsecQgy9Oua+K+SrlG6A RCZpnupBysvDo+NH+b9Ei/P9odQNAe9MLfqxTocSXEruHC12d8SoI1O0IBvsdMF7 TMMvI8no7Otpl9/PvGhmTCitE7JT2v+YnW3jyzsZOdTSGu4RPqe6xEdxAEMsWL3S fKNWaz+7zHethUz/rRQ5tisH4YUU3Zsa/22sn6s/RzKAZVmBr6dY9mssuU08LESD ADRu9S8/FwvqJUmH+rQ/qG5dmxLacbPJHRgtaG9QnMPd9oLAJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4MQTh53x4qdxMlO6vEb0PbDg+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTgzYjIzNTYtZDIyMC0z NWE4LWFjMGMtZThmNjkyNTljNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2O6FqUU4KJ1+f/YGCLec6T66vQqwhbVu8v+InsO6w/3PjaMdEFZU/N Pey9RhY5YuwoXYKJxp/WtaCGJpQ4PIe3cHoCdLv+kuDRPN80gNPM0RfoMF8CoJvT GIPipg831oabhFvfjytCJ2Zq7hkaHHaIn4jotOSvoWqUh5DNy2qpqCAH+Iw/5+i7 yKEy0spjQdOOHmH9KwNjzsfgTVCgXevd9LBWAMWwb6S3dF5/aww93qbu+Cp2jkm1 OfK/QYltQ9TtqIb5dNQWbXsFWzrkHXM0tknwCgPHP8I3kgbaLP/cMBA9xuis7GRn NkrsRshFdsO8wIHlcW1E8bHEd5s5Z4w= -----END CERTIFICATE-----Generated at Fri Jul 24 13:57:28 2026 by rpki-client