$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea538004-6f2f-32c7-aa95-11998a593420.roa File: ea538004-6f2f-32c7-aa95-11998a593420.roa (raw, json) Hash identifier: fYUUPvPhpuRyIvXTLhEslUTRkTiigH9EHKDG7V9EW2M= Subject key identifier: 16:DB:BE:63:1A:63:F0:08:42:B6:56:11:D5:5E:F6:14:31:4B:75:95 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E97B500AA912240E346043200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea538004-6f2f-32c7-aa95-11998a593420.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.153.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:00:aa:91:22:40:e3:46:04:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=f7f84846-e754-4a46-a0fe-9c5dfe7e552e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5b:50:7a:ec:be:26:1a:b9:6c:1d:94:40:6a: 0c:81:98:00:f0:8e:c7:cc:61:53:c8:cf:38:62:31: 52:e5:ca:e4:58:84:ec:06:d9:4e:8a:a9:ec:dd:d3: a8:b2:3d:34:38:84:33:59:8f:50:61:4b:a6:90:63: 2e:2f:70:af:81:6d:db:5c:d5:3f:21:29:25:47:80: 1d:ac:8d:0c:15:34:2b:6d:dc:58:aa:a3:06:0a:c6: 0c:c6:b4:f9:bd:e0:b5:43:ef:fa:bc:0b:5a:4c:48: 91:f7:91:68:3c:f9:58:cd:dd:83:c3:e1:99:5e:40: 73:9a:08:96:3c:a1:4d:d4:14:76:3f:01:a4:9d:af: 15:42:46:08:80:ee:76:e3:79:f6:f2:26:c1:db:c1: 8a:82:8e:39:94:e7:90:02:5b:51:8b:d5:23:87:dd: 47:b9:81:cc:2d:9d:36:63:58:14:b8:ca:7e:6f:bd: 41:6a:89:b7:80:8b:78:f3:5f:26:ad:6c:3f:1b:5f: 54:09:9c:01:57:6e:d4:6e:7d:b6:a4:21:91:4e:09: 84:5f:dc:44:a8:51:84:22:6e:d0:b8:ad:a2:3e:f0: 70:cb:bf:c5:d1:4c:cf:cb:a6:ea:0f:de:61:7f:e0: 4e:c1:1b:82:65:e3:42:48:12:c2:9b:c3:e6:fd:0d: 8c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DB:BE:63:1A:63:F0:08:42:B6:56:11:D5:5E:F6:14:31:4B:75:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea538004-6f2f-32c7-aa95-11998a593420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:bb:ff:9d:4c:ae:79:44:91:d6:35:9d:57:7a:6b:ca:cd:26: 74:a1:cd:53:14:29:b6:f9:0e:24:15:c4:12:e2:0c:3c:48:3f: 79:ee:c2:ce:0a:02:5f:39:d3:34:07:bb:59:65:7b:57:d0:1d: 2c:79:ba:43:6c:70:82:fe:57:7f:17:dc:e6:e8:cc:5b:9a:69: f4:de:3c:82:05:70:12:81:ed:7e:3a:5e:3e:8d:93:cf:fd:a3: 17:56:86:8a:ce:1e:b5:90:dd:87:51:56:56:a1:ef:be:cf:7e: 80:9b:ac:b9:9c:55:b1:a0:bd:a9:90:52:ae:73:72:39:e5:1c: c1:23:a1:e8:33:94:af:83:d2:e3:2e:1b:47:fa:ae:0b:12:c0: 08:df:3f:a0:f9:ce:b1:61:37:4e:c2:1e:ca:4e:ce:a8:73:0a: 53:53:35:ee:8f:e7:45:70:e1:cb:0d:93:b5:1d:53:47:ca:85: 34:d3:11:2d:01:c3:75:86:bb:59:16:1d:51:a3:bf:df:d7:5e: 91:20:f3:f1:9c:3a:45:00:40:3b:e8:ac:3f:ea:57:c0:99:ea: cd:51:6b:61:aa:c4:69:79:23:c8:5f:75:69:2a:5a:cb:0d:fa: 37:78:f8:1a:04:dd:2b:f3:8e:f9:d0:24:1d:b5:70:6f:62:63: 50:c9:fc:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQCqkSJA40YEMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk ZjdmODQ4NDYtZTc1NC00YTQ2LWEwZmUtOWM1ZGZlN2U1NTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiltQeuy+Jhq5bB2UQGoMgZgA8I7HzGFTyM84 YjFS5crkWITsBtlOiqns3dOosj00OIQzWY9QYUumkGMuL3CvgW3bXNU/ISklR4Ad rI0MFTQrbdxYqqMGCsYMxrT5veC1Q+/6vAtaTEiR95FoPPlYzd2Dw+GZXkBzmgiW PKFN1BR2PwGkna8VQkYIgO5243n28ibB28GKgo45lOeQAltRi9Ujh91HuYHMLZ02 Y1gUuMp+b71Baom3gIt4818mrWw/G19UCZwBV27Ubn22pCGRTgmEX9xEqFGEIm7Q uK2iPvBwy7/F0UzPy6bqD95hf+BOwRuCZeNCSBLCm8Pm/Q2MzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbbvmMaY/AIQrZWEdVe9hQxS3WVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWE1MzgwMDQtNmYyZi0z MmM3LWFhOTUtMTE5OThhNTkzNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIi7/51MrnlEkdY1nVd6a8rNJnShzVMUKbb5DiQVxBLiDDxIP3nuws4K Al850zQHu1lle1fQHSx5ukNscIL+V38X3ObozFuaafTePIIFcBKB7X46Xj6Nk8/9 oxdWhorOHrWQ3YdRVlah777PfoCbrLmcVbGgvamQUq5zcjnlHMEjoegzlK+D0uMu G0f6rgsSwAjfP6D5zrFhN07CHspOzqhzClNTNe6P50Vw4csNk7UdU0fKhTTTES0B w3WGu1kWHVGjv9/XXpEg8/GcOkUAQDvorD/qV8CZ6s1Ra2GqxGl5I8hfdWkqWssN +jd4+BoE3SvzjvnQJB21cG9iY1DJ/M4= -----END CERTIFICATE-----Generated at Fri Jul 24 12:55:44 2026 by rpki-client