$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/287659a3-4e2a-3743-b4b5-973d707c8517.roa File: 287659a3-4e2a-3743-b4b5-973d707c8517.roa (raw, json) Hash identifier: DKvuamYw70xVxBz48G46nS+4ujlvgJmZDHL+0BYOm50= Subject key identifier: 98:FC:69:95:FC:A4:46:2A:13:3E:DE:6E:50:D8:1C:F6:63:16:88:92 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F4E890A0938D9702CD6800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/287659a3-4e2a-3743-b4b5-973d707c8517.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.153.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:e8:90:a0:93:8d:97:02:cd:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=a7396541-1f58-4c0f-b8f0-e88d1be4950d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:98:9e:2f:f8:73:d9:48:39:45:02:a9:1e: 00:1e:b6:fb:1d:2e:06:cd:00:da:b2:e7:82:f1:84: bd:4e:31:2b:a2:40:87:a3:8a:e8:04:fb:31:e0:4b: b1:80:da:9a:01:ab:0a:6e:d9:bd:05:e7:c6:d0:f6: d7:53:48:7e:71:11:0a:01:88:94:9a:16:4a:5e:0b: 2f:61:6b:81:32:b3:70:87:92:f0:e1:66:f6:5c:93: 9d:33:ce:bc:ce:3c:00:70:8c:8c:94:8e:eb:43:08: 32:2c:c2:71:50:8f:bb:2c:eb:ad:fa:c2:4b:98:80: 13:a5:5e:9d:ea:7c:1d:0a:2c:bc:3a:63:81:a2:2b: 83:24:df:da:6b:15:3e:94:1a:e7:8c:fd:f2:a8:ac: 69:94:c8:27:85:bd:80:b3:9c:de:90:b8:fe:e7:18: d9:83:7a:c6:07:14:90:68:31:57:e7:cc:c8:6c:53: a0:f2:1a:c7:d1:c1:37:77:3c:bf:26:99:a7:c0:f7: 37:87:c9:60:0e:1a:26:05:fd:b4:56:90:d2:69:12: b4:89:c4:14:01:11:aa:db:3d:f3:e1:32:88:f0:a9: 5f:50:8f:d4:1b:e8:ad:36:c8:a9:da:ce:86:38:5f: de:bb:01:81:a1:ee:c4:0b:e0:83:ee:3a:1a:aa:74: f3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FC:69:95:FC:A4:46:2A:13:3E:DE:6E:50:D8:1C:F6:63:16:88:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/287659a3-4e2a-3743-b4b5-973d707c8517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:23:aa:b8:90:2d:c1:42:d5:86:5a:69:47:c7:e8:46:d9:41: 57:0e:04:fb:1d:d1:00:a4:ef:80:72:dd:e9:2f:98:a6:9a:45: 94:1b:34:84:05:78:af:6a:b3:76:18:77:e3:60:a1:4e:d1:9e: 61:fb:da:c5:3b:da:78:ee:ff:bc:c3:47:8c:80:e4:12:af:64: b5:08:e6:ef:37:22:54:a8:c3:9b:28:d1:83:99:15:4b:42:e7: 34:1f:d4:8b:1c:47:f7:7b:7a:d2:69:42:57:1d:ce:85:2d:6c: 19:ca:47:fe:3c:bc:12:91:5a:43:5a:22:92:5c:3c:c4:69:42: 64:c1:7f:d2:9b:80:23:45:01:fd:f6:b1:67:25:b3:c2:d8:ee: a9:cf:f7:f1:dc:00:17:e6:b1:12:a2:de:82:cc:b3:05:aa:64: 9e:ed:50:45:23:ce:da:7e:c2:53:6d:8f:73:22:95:b5:1d:a8: 78:5c:d5:e3:d3:76:83:11:bf:d7:8f:72:b7:4d:e4:16:81:c3: 24:5f:f7:d1:d9:1b:9d:c8:87:f4:12:a8:a1:61:91:2f:39:9c: 13:21:d9:80:d0:7d:51:64:05:ca:3b:5c:b9:13:0f:b7:76:83: 44:74:81:0e:c6:68:d2:3c:05:32:7f:46:47:2a:2f:0c:a8:89: 08:47:80:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9OiQoJONlwLNaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk YTczOTY1NDEtMWY1OC00YzBmLWI4ZjAtZTg4ZDFiZTQ5NTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviiYni/4c9lIOUUCqR4AHrb7HS4GzQDasueC 8YS9TjErokCHo4roBPsx4EuxgNqaAasKbtm9BefG0PbXU0h+cREKAYiUmhZKXgsv YWuBMrNwh5Lw4Wb2XJOdM868zjwAcIyMlI7rQwgyLMJxUI+7LOut+sJLmIATpV6d 6nwdCiy8OmOBoiuDJN/aaxU+lBrnjP3yqKxplMgnhb2As5zekLj+5xjZg3rGBxSQ aDFX58zIbFOg8hrH0cE3dzy/JpmnwPc3h8lgDhomBf20VpDSaRK0icQUARGq2z3z 4TKI8KlfUI/UG+itNsip2s6GOF/euwGBoe7EC+CD7joaqnTziQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJj8aZX8pEYqEz7eblDYHPZjFoiSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjg3NjU5YTMtNGUyYS0z NzQzLWI0YjUtOTczZDcwN2M4NTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJn6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8jqriQLcFC1YZaaUfH6EbZQVcOBPsd0QCk74By3ekvmKaaRZQbNIQF eK9qs3YYd+NgoU7RnmH72sU72nju/7zDR4yA5BKvZLUI5u83IlSow5so0YOZFUtC 5zQf1IscR/d7etJpQlcdzoUtbBnKR/48vBKRWkNaIpJcPMRpQmTBf9KbgCNFAf32 sWcls8LY7qnP9/HcABfmsRKi3oLMswWqZJ7tUEUjztp+wlNtj3MilbUdqHhc1ePT doMRv9ePcrdN5BaBwyRf99HZG53Ih/QSqKFhkS85nBMh2YDQfVFkBco7XLkTD7d2 g0R0gQ7GaNI8BTJ/RkcqLwyoiQhHgI8= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:21 2026 by rpki-client