$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa File: b7b843e5-1b24-372c-a453-258435c10dbf.roa (raw, json) Hash identifier: brbJdth5huw4dHMwrwi7ZD+Wz5RPfH26Z1h+1fOqGBI= Subject key identifier: 8F:D8:81:A8:27:40:D8:DB:12:5E:78:26:49:E7:AC:9F:2A:78:A5:C2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E97B4FF57BFA1351D6DCB2B80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.153.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b4:ff:57:bf:a1:35:1d:6d:cb:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=9ac825d9-2200-44af-bbe2-e673fcc46889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:de:9e:1f:1d:fb:53:05:ff:c3:59:f5:60:89: ae:b7:db:d4:51:e6:51:0b:c2:11:0a:72:74:77:d0: 74:d4:e4:46:b2:41:a3:02:f9:e8:d7:a0:8a:3a:ce: 19:be:ff:bf:c6:e2:39:e4:ff:d7:62:82:f0:2b:1a: 25:de:70:b6:df:0b:81:66:d4:25:45:08:fd:9a:73: ea:3c:34:2d:00:9c:24:0f:02:a7:e5:81:05:01:e4: 04:ca:f9:93:71:b8:1b:01:b3:e1:f8:8e:cf:cd:52: a8:50:cd:c3:2c:47:bf:d4:44:8e:00:9c:0c:f7:af: 2e:db:16:33:8c:93:5b:d3:d1:78:bc:a2:2a:02:dc: f0:43:11:c3:67:f1:4f:33:66:8f:52:39:59:52:f1: 20:e9:10:57:75:67:b7:66:2f:85:34:44:d3:6c:ce: a5:af:fc:e4:56:76:56:96:a0:ec:c8:06:2f:f9:67: 53:33:44:d3:bc:57:2c:29:ff:d8:f4:1f:6f:02:93: 9e:9a:74:29:ad:0a:72:60:d9:8d:84:06:83:5f:38: 27:f2:31:eb:40:1c:ad:56:a9:45:2d:12:ce:78:00: c4:3c:7d:27:20:16:4c:ed:e6:d9:e7:0c:a0:a4:20: bb:ce:f2:58:52:ca:dd:c1:86:77:f6:a9:51:38:8d: d7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D8:81:A8:27:40:D8:DB:12:5E:78:26:49:E7:AC:9F:2A:78:A5:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:85:41:7b:58:fd:dd:ac:07:d8:42:8e:62:6a:d9:d2:d4:3a: 4c:17:27:ad:57:8a:56:1a:c2:c0:7e:82:87:1b:6c:23:26:2c: 5c:46:00:79:57:9c:d5:3d:1d:95:a5:a1:4e:bd:da:ff:aa:18: 57:61:27:b5:4c:a4:18:fe:49:5d:4d:b4:31:8f:57:cf:76:f6: 40:bc:29:0b:54:79:13:97:87:49:63:f9:cd:c0:46:cb:d0:92: ef:fd:6a:40:e2:fe:7d:cc:9d:55:96:c8:90:f8:9f:df:ef:92: ce:46:8c:f4:41:92:68:e7:11:db:b7:48:cc:58:5b:2a:0e:79: a9:d8:80:56:9b:30:30:bd:43:51:83:1e:bf:c0:5a:84:5b:2e: a2:52:6b:89:cc:0a:d6:da:d8:ee:31:59:85:64:3f:fe:62:5c: b5:5a:d9:45:c1:00:b5:89:af:8f:86:1d:47:58:9a:89:77:9a: c6:b3:1b:6f:86:44:1b:af:9d:d2:4e:9e:84:5b:42:f2:d3:ca: 24:e0:1b:49:3c:2c:71:0e:a5:d6:c1:4a:58:ef:6d:7b:b5:a3: c7:f3:96:6d:dc:5a:49:09:60:dc:4e:1d:f5:e1:15:a0:16:cd: b1:3b:68:87:05:a2:c5:a0:48:a9:a0:f2:e8:88:fe:94:ac:f6: cb:46:74:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtP9Xv6E1HW3LK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk OWFjODI1ZDktMjIwMC00NGFmLWJiZTItZTY3M2ZjYzQ2ODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj96eHx37UwX/w1n1YImut9vUUeZRC8IRCnJ0 d9B01ORGskGjAvno16CKOs4Zvv+/xuI55P/XYoLwKxol3nC23wuBZtQlRQj9mnPq PDQtAJwkDwKn5YEFAeQEyvmTcbgbAbPh+I7PzVKoUM3DLEe/1ESOAJwM968u2xYz jJNb09F4vKIqAtzwQxHDZ/FPM2aPUjlZUvEg6RBXdWe3Zi+FNETTbM6lr/zkVnZW lqDsyAYv+WdTM0TTvFcsKf/Y9B9vApOemnQprQpyYNmNhAaDXzgn8jHrQBytVqlF LRLOeADEPH0nIBZM7ebZ5wygpCC7zvJYUsrdwYZ39qlROI3X6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/YgagnQNjbEl54JknnrJ8qeKXCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjdiODQzZTUtMWIyNC0z NzJjLWE0NTMtMjU4NDM1YzEwZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaFQXtY/d2sB9hCjmJq2dLUOkwXJ61XilYawsB+gocbbCMmLFxGAHlX nNU9HZWloU692v+qGFdhJ7VMpBj+SV1NtDGPV8929kC8KQtUeROXh0lj+c3ARsvQ ku/9akDi/n3MnVWWyJD4n9/vks5GjPRBkmjnEdu3SMxYWyoOeanYgFabMDC9Q1GD Hr/AWoRbLqJSa4nMCtba2O4xWYVkP/5iXLVa2UXBALWJr4+GHUdYmol3msazG2+G RBuvndJOnoRbQvLTyiTgG0k8LHEOpdbBSljvbXu1o8fzlm3cWkkJYNxOHfXhFaAW zbE7aIcFosWgSKmg8uiI/pSs9stGdLI= -----END CERTIFICATE-----Generated at Fri Jul 24 16:37:05 2026 by rpki-client