$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa File: 25af00ca-4f76-3e40-b823-c83ad676aaa2.roa (raw, json) Hash identifier: cYAttXQu4YWYR+VV/wHeU4QdcF+WmhvzOJDOHkrtNIg= Subject key identifier: 57:DE:93:04:50:DB:52:D2:14:6D:C1:3B:1C:D7:11:00:26:67:BA:A8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E779A282D2AD1BEB4649E3E80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 8069 IP address blocks: 20.153.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:28:2d:2a:d1:be:b4:64:9e:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=86c1c85c-ba44-4bc6-85a7-71d681dc8041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:be:91:2b:fe:6e:0b:8c:f1:63:13:56:43:fd: dc:93:e5:01:d7:c1:d1:21:aa:6d:5e:0e:9c:73:ee: 07:88:04:e8:28:67:a8:ed:16:d6:f9:9f:24:0e:f4: 1d:4a:39:9f:bb:29:25:74:e9:f8:02:4b:42:33:cf: d1:da:4c:75:4f:5d:75:fc:8e:43:7f:c1:0a:c7:f1: cf:38:50:cd:64:73:34:a3:8f:c8:ee:6e:d8:9b:2f: 7e:d7:79:b2:f0:7e:87:cd:0e:c0:8a:77:b5:34:45: 67:ee:43:24:c5:e7:32:16:f6:61:4f:fb:93:1b:b3: 6f:d7:45:fe:13:f6:a8:eb:be:2e:51:0b:bb:08:5f: 88:19:bd:42:25:33:2f:ef:20:53:0b:70:f4:2d:2a: fc:82:ad:44:d5:c7:5e:85:11:56:dd:06:67:51:84: e4:1b:2f:b4:13:18:be:1b:3f:c8:bc:eb:7a:a9:d9: b2:e4:4f:43:d9:69:a0:40:de:8a:c7:5e:eb:15:42: 6a:00:9d:8d:d4:e4:e0:79:4f:5e:5d:8d:91:fb:c4: 24:d1:ba:aa:54:89:99:c2:52:35:f1:05:12:ee:e9: c3:08:ad:9f:ab:b8:41:f8:bd:51:ec:0a:eb:b6:c8: c8:87:b5:21:b4:40:af:55:56:e2:dd:56:57:a4:88: 7b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DE:93:04:50:DB:52:D2:14:6D:C1:3B:1C:D7:11:00:26:67:BA:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:49:7e:24:d4:ae:e2:f9:b6:b4:38:83:ae:fc:fc:7d:5e:d4: 03:0d:06:a9:81:47:e3:5a:3d:4d:0c:a6:d5:83:4e:56:e3:a8: 48:45:f7:38:1d:55:a8:73:e1:82:7c:fe:3c:8b:b1:de:6f:09: 6f:0b:a3:e3:6c:c9:1a:10:59:ac:52:a7:e5:bf:45:bc:75:5b: 7e:94:08:8e:fd:8e:8c:e8:3d:fb:b5:96:bd:85:95:23:41:3f: f2:54:bc:1d:cc:6b:f2:f0:0b:5b:35:53:ac:7e:42:23:01:68: 5f:7c:ec:44:52:b6:4b:d5:99:ea:ec:9a:31:4c:c9:1d:87:99: 4b:fa:31:d4:a3:f5:7d:c7:a4:39:bd:e8:28:85:41:58:69:8a: ce:43:07:8f:92:89:b1:ac:f0:7b:12:34:5a:e5:6e:c1:dc:64: 81:14:b6:42:1e:16:8a:76:9f:ff:61:ae:cb:7a:02:7d:d0:5b: d1:8f:c7:7b:76:9a:af:6e:cc:f4:ff:fc:d2:61:fb:a6:3c:f1: a7:dd:93:ac:1e:d5:bd:b8:5b:4b:a5:9a:6d:04:34:c3:e7:ba: b1:a1:ee:2e:9d:0a:f5:67:cb:69:2b:8e:fe:35:7a:6d:30:d6: 05:82:af:10:3a:9a:f9:9a:d9:72:7c:e9:bc:1f:43:68:d8:38: 36:52:09:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53migtKtG+tGSePoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk ODZjMWM4NWMtYmE0NC00YmM2LTg1YTctNzFkNjgxZGM4MDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi76RK/5uC4zxYxNWQ/3ck+UB18HRIaptXg6c c+4HiAToKGeo7RbW+Z8kDvQdSjmfuykldOn4AktCM8/R2kx1T111/I5Df8EKx/HP OFDNZHM0o4/I7m7Ymy9+13my8H6HzQ7Aine1NEVn7kMkxecyFvZhT/uTG7Nv10X+ E/ao674uUQu7CF+IGb1CJTMv7yBTC3D0LSr8gq1E1cdehRFW3QZnUYTkGy+0Exi+ Gz/IvOt6qdmy5E9D2WmgQN6Kx17rFUJqAJ2N1OTgeU9eXY2R+8Qk0bqqVImZwlI1 8QUS7unDCK2fq7hB+L1R7ArrtsjIh7UhtECvVVbi3VZXpIh7UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfekwRQ21LSFG3BOxzXEQAmZ7qoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjVhZjAwY2EtNGY3Ni0z ZTQwLWI4MjMtYzgzYWQ2NzZhYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtJfiTUruL5trQ4g678/H1e1AMNBqmBR+NaPU0MptWDTlbjqEhF9zgd Vahz4YJ8/jyLsd5vCW8Lo+NsyRoQWaxSp+W/Rbx1W36UCI79jozoPfu1lr2FlSNB P/JUvB3Ma/LwC1s1U6x+QiMBaF987ERStkvVmersmjFMyR2HmUv6MdSj9X3HpDm9 6CiFQVhpis5DB4+SibGs8HsSNFrlbsHcZIEUtkIeFop2n/9hrst6An3QW9GPx3t2 mq9uzPT//NJh+6Y88afdk6we1b24W0ulmm0ENMPnurGh7i6dCvVny2krjv41em0w 1gWCrxA6mvma2XJ86bwfQ2jYODZSCRE= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:41 2026 by rpki-client