$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d22634a0-7a16-30fa-9aad-6db16427a897.roa File: d22634a0-7a16-30fa-9aad-6db16427a897.roa (raw, json) Hash identifier: VbTmPpdzqLDhm/wj1/Esk7M33v6Upw04bnDq3XD5cJE= Subject key identifier: C1:35:C2:9A:3B:29:42:1E:6A:7F:20:9E:FD:AD:2D:1D:01:6A:38:66 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E97B50DB5E4A048A4C9E7C2C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d22634a0-7a16-30fa-9aad-6db16427a897.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.153.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:0d:b5:e4:a0:48:a4:c9:e7:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=9de0f574-35f7-443a-8c9d-eaaff8fe5fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:23:ad:38:db:52:03:c3:7c:46:31:86:11: 7b:2c:a9:7d:ea:3a:8a:ef:e9:12:5c:71:2c:57:d0: 10:ba:60:38:b0:9a:48:46:d1:cd:45:cc:1c:04:f6: 32:fd:ac:23:4d:2e:e4:11:a9:44:a0:81:34:c1:82: 14:4f:61:70:da:c0:2a:36:c5:c6:8f:e7:23:37:7e: ff:2a:9c:ce:c5:ee:e4:9f:95:d3:77:86:cc:ac:f2: 61:c3:64:93:78:bc:8c:51:b3:4d:ff:e3:65:03:cf: fd:b3:35:27:7d:4c:46:7a:5c:ba:b9:fb:35:a9:50: 0c:37:6c:49:c0:bb:56:1e:2d:7d:34:26:b8:77:e8: 2b:3e:00:f7:c6:e2:e8:1c:75:98:e5:20:38:7a:56: cb:39:18:2d:ec:2f:28:88:e2:74:a2:f3:e5:88:79: 88:7c:a1:97:8c:d0:ef:df:d5:b3:2e:6a:ef:2f:ca: 8a:b3:54:65:f3:9c:a0:4d:e1:dc:d8:47:70:92:9d: b3:90:f8:55:2d:90:3d:06:34:9f:55:e0:e7:89:07: ed:21:15:dd:a5:b1:ee:09:9e:a3:7e:d0:0f:e4:4d: 54:d9:38:df:d4:53:5b:ea:6c:51:c6:c7:f0:38:eb: b7:33:1e:5d:12:c5:ef:28:ac:79:0c:b0:fc:03:9d: 71:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:35:C2:9A:3B:29:42:1E:6A:7F:20:9E:FD:AD:2D:1D:01:6A:38:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d22634a0-7a16-30fa-9aad-6db16427a897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:1f:cf:36:ad:59:72:e6:74:ec:28:77:f5:bd:73:52:9f:6b: 9e:71:98:8c:bc:84:7d:61:50:cc:1c:41:47:3c:95:52:6d:42: ab:cf:48:1a:40:7d:66:51:5a:f7:2a:9d:3b:02:b5:b8:a2:4c: bb:e4:0f:63:43:c2:31:d1:10:a2:2b:39:84:dd:f9:3d:30:ff: 5b:75:1b:b8:07:bd:6b:a6:c9:62:98:f8:dd:e9:0f:3b:b8:0a: 1b:cb:58:2e:18:94:69:00:22:ad:21:03:af:18:62:3c:44:8c: 54:bf:fa:90:0f:ca:fb:05:6d:70:a5:f8:a0:a6:5f:25:d1:26: 47:25:ba:2b:ae:f0:32:54:03:aa:8d:a5:71:47:23:db:b4:74: 1d:fe:37:5b:97:5a:2d:2b:18:c8:3b:87:a8:19:6c:7c:05:36: 17:b0:f9:0b:cc:9a:b0:6a:e1:8b:1c:a2:d2:7c:d7:06:79:b6: 90:92:f9:f4:2e:8c:ad:24:8a:c3:5c:80:a9:e1:69:9d:19:50: 17:11:67:fe:04:33:b0:c6:b4:f6:30:cc:67:19:a3:57:97:e3: 40:53:99:90:b7:8c:e2:01:bd:eb:03:8f:66:95:97:c6:ac:10: 62:74:71:b1:80:68:6a:8d:74:8f:d6:71:31:d5:1c:a2:33:0d: 54:f8:ab:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQ215KBIpMnnwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk OWRlMGY1NzQtMzVmNy00NDNhLThjOWQtZWFhZmY4ZmU1ZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnIjrTjbUgPDfEYxhhF7LKl96jqK7+kSXHEs V9AQumA4sJpIRtHNRcwcBPYy/awjTS7kEalEoIE0wYIUT2Fw2sAqNsXGj+cjN37/ KpzOxe7kn5XTd4bMrPJhw2STeLyMUbNN/+NlA8/9szUnfUxGely6ufs1qVAMN2xJ wLtWHi19NCa4d+grPgD3xuLoHHWY5SA4elbLORgt7C8oiOJ0ovPliHmIfKGXjNDv 39WzLmrvL8qKs1Rl85ygTeHc2Edwkp2zkPhVLZA9BjSfVeDniQftIRXdpbHuCZ6j ftAP5E1U2Tjf1FNb6mxRxsfwOOu3Mx5dEsXvKKx5DLD8A51x0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFME1wpo7KUIean8gnv2tLR0BajhmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDIyNjM0YTAtN2ExNi0z MGZhLTlhYWQtNmRiMTY0MjdhODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkfzzatWXLmdOwod/W9c1Kfa55xmIy8hH1hUMwcQUc8lVJtQqvPSBpA fWZRWvcqnTsCtbiiTLvkD2NDwjHREKIrOYTd+T0w/1t1G7gHvWumyWKY+N3pDzu4 ChvLWC4YlGkAIq0hA68YYjxEjFS/+pAPyvsFbXCl+KCmXyXRJkcluiuu8DJUA6qN pXFHI9u0dB3+N1uXWi0rGMg7h6gZbHwFNhew+QvMmrBq4YscotJ81wZ5tpCS+fQu jK0kisNcgKnhaZ0ZUBcRZ/4EM7DGtPYwzGcZo1eX40BTmZC3jOIBvesDj2aVl8as EGJ0cbGAaGqNdI/WcTHVHKIzDVT4q1I= -----END CERTIFICATE-----Generated at Fri Jul 24 13:05:50 2026 by rpki-client