$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2ee96852-3d60-318a-9c2e-44c4b9a37de6.roa File: 2ee96852-3d60-318a-9c2e-44c4b9a37de6.roa (raw, json) Hash identifier: MCwkmMKTUFF0DNSGP7KaPE07Yjq7De0pWv7E7Wesdtw= Subject key identifier: D6:72:43:A5:CF:43:AE:66:06:17:AE:E8:09:45:D3:13:F9:33:BD:40 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E7BCA311C57649E2953A53240 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2ee96852-3d60-318a-9c2e-44c4b9a37de6.roa Signing time: Mon 13 Jul 2026 09:00:12 +0000 ROA not before: Mon 13 Jul 2026 09:00:12 +0000 ROA not after: Sun 11 Oct 2026 09:00:12 +0000 asID: 8069 IP address blocks: 20.153.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7b:ca:31:1c:57:64:9e:29:53:a5:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 13 09:00:12 2026 GMT Not After : Oct 11 09:00:12 2026 GMT Subject: CN=edde21cd-b0bb-41e4-a3d7-d55714ed41cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:7c:17:bf:d4:97:63:71:af:90:b2:e6:20: 90:88:ce:e5:43:28:7b:09:5c:f3:10:11:33:ca:47: 5c:33:d5:e7:be:64:8e:7f:63:16:68:77:ea:42:22: aa:dd:74:4e:f7:e1:cc:d4:06:3e:d7:ef:98:d1:17: c7:4c:47:ef:bb:d6:30:a3:93:22:2e:c6:d8:72:5c: 1c:6d:d1:27:55:3d:2c:4f:64:03:2b:b7:10:c9:ea: 4a:23:e0:23:52:77:bc:04:ef:72:5c:d8:a4:84:37: 10:ee:17:b6:37:b6:42:5e:14:5c:97:33:91:27:02: 5c:eb:a5:7c:64:8d:0b:65:06:aa:58:86:4a:0d:18: d9:3c:3e:39:a1:32:da:50:ea:81:a9:6d:c7:ce:d2: 31:61:2b:6a:01:cb:6d:7a:72:66:6b:25:f0:17:6b: 27:a5:bf:3e:30:5c:04:a3:0e:8c:63:5e:17:f3:37: 75:de:b6:44:96:f0:95:b0:fc:1f:e7:d2:5f:27:66: 13:31:82:4c:d1:7f:6d:a5:b7:8b:d5:a3:75:13:01: e7:86:c8:f9:af:75:e2:1a:e5:36:f8:10:64:b6:68: 6e:9d:04:49:46:36:46:df:2d:7d:81:f9:68:a9:27: 94:02:e9:47:30:fe:e5:99:85:1b:ee:7f:ce:bd:39: df:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:72:43:A5:CF:43:AE:66:06:17:AE:E8:09:45:D3:13:F9:33:BD:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2ee96852-3d60-318a-9c2e-44c4b9a37de6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:94:2d:19:73:70:43:da:54:04:1b:7a:42:2f:2d:34:6b:cb: 07:25:e6:aa:76:be:e8:a3:52:50:01:bd:bd:62:59:6f:5a:d0: 7e:fb:65:6f:02:f6:42:d0:3f:fb:ad:f9:b4:78:a6:5c:49:fe: fd:b2:d7:b6:7f:ad:1c:41:03:3f:76:51:70:fc:39:b3:90:a6: b4:63:79:ff:98:e9:c4:35:cb:25:2c:44:4a:14:98:a6:5c:7f: a6:68:a3:19:1b:2a:a6:3a:9f:57:79:7f:f0:bf:aa:2b:e8:bc: 4b:3f:b0:8f:81:9f:d4:44:67:f4:59:b1:5d:69:23:c3:2f:01: 5d:82:7c:e2:57:28:99:10:6f:6e:18:06:2a:55:b1:d4:f0:bb: 5a:a7:51:97:94:39:fe:70:6f:52:c8:e2:e6:66:0c:cd:60:a5: c2:5b:0b:68:b5:a3:27:e4:d7:4b:24:3b:71:f9:7a:5f:9e:b3: 39:25:ea:a4:af:bc:42:00:c5:aa:aa:a5:e3:7e:f1:d7:7e:c2: 78:65:89:2a:7e:f4:ff:3f:31:dc:08:46:39:25:35:86:9d:20: 81:9e:61:7f:70:bd:73:b8:ef:e5:44:5a:a6:3e:11:de:3c:8c: 3f:a3:6f:5f:5f:36:c7:9c:01:f9:a2:32:65:da:d4:cc:e7:25: 0c:77:27:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57yjEcV2SeKVOlMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk ZWRkZTIxY2QtYjBiYi00MWU0LWEzZDctZDU1NzE0ZWQ0MWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYR8F7/Ul2Nxr5Cy5iCQiM7lQyh7CVzzEBEz ykdcM9XnvmSOf2MWaHfqQiKq3XRO9+HM1AY+1++Y0RfHTEfvu9Ywo5MiLsbYclwc bdEnVT0sT2QDK7cQyepKI+AjUne8BO9yXNikhDcQ7he2N7ZCXhRclzORJwJc66V8 ZI0LZQaqWIZKDRjZPD45oTLaUOqBqW3HztIxYStqActtenJmayXwF2snpb8+MFwE ow6MY14X8zd13rZElvCVsPwf59JfJ2YTMYJM0X9tpbeL1aN1EwHnhsj5r3XiGuU2 +BBktmhunQRJRjZG3y19gfloqSeUAulHMP7lmYUb7n/OvTnf8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZyQ6XPQ65mBheu6AlF0xP5M71AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmVlOTY4NTItM2Q2MC0z MThhLTljMmUtNDRjNGI5YTM3ZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqULRlzcEPaVAQbekIvLTRrywcl5qp2vuijUlABvb1iWW9a0H77ZW8C 9kLQP/ut+bR4plxJ/v2y17Z/rRxBAz92UXD8ObOQprRjef+Y6cQ1yyUsREoUmKZc f6ZooxkbKqY6n1d5f/C/qivovEs/sI+Bn9REZ/RZsV1pI8MvAV2CfOJXKJkQb24Y BipVsdTwu1qnUZeUOf5wb1LI4uZmDM1gpcJbC2i1oyfk10skO3H5el+eszkl6qSv vEIAxaqqpeN+8dd+wnhliSp+9P8/MdwIRjklNYadIIGeYX9wvXO47+VEWqY+Ed48 jD+jb19fNsecAfmiMmXa1MznJQx3Jzk= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:40 2026 by rpki-client