$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/405e4284-f69f-3e95-b871-67ba6fa28d23.roa File: 405e4284-f69f-3e95-b871-67ba6fa28d23.roa (raw, json) Hash identifier: nVo5xf/CKto73umzBRooAwjAy3dpnGHJUw3hxl6Li5g= Subject key identifier: 18:50:C1:68:4B:D9:32:EF:45:F5:B3:3C:46:2E:59:01:9A:5A:92:D8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F4F3F51653379A97260340 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/405e4284-f69f-3e95-b871-67ba6fa28d23.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.153.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:f3:f5:16:53:37:9a:97:26:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=ed7a7123-ee1f-41bb-9056-ce2cc2b99b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:0a:ef:2f:a9:d1:79:e9:4e:60:49:70:0d: 14:da:5c:7b:30:46:fa:23:19:24:23:a7:da:f6:6f: 1a:df:c6:70:85:48:34:b3:95:e7:ba:1c:e9:3e:70: b5:4c:d9:37:be:0d:3b:45:12:a5:a1:8b:5f:a6:db: 8b:c6:ab:32:60:ef:c8:fd:9e:37:5e:67:06:96:f9: 8e:8c:cd:a1:e3:0a:08:b1:66:6d:f5:0f:0a:d7:e4: b9:d3:92:0a:83:ff:b6:b1:c9:07:4d:f6:13:4a:75: e0:7e:52:16:ce:10:68:34:48:75:ce:79:fd:1f:cd: b0:09:cf:fa:77:11:66:fe:1e:d3:d1:bc:b1:f9:5c: 78:cf:1e:fd:74:5f:16:8c:fd:55:cd:a5:7a:63:87: fe:1c:27:0c:ac:4c:bd:9d:72:86:6a:33:ab:7b:52: b8:34:81:9c:26:ec:fc:9e:04:61:aa:b5:64:10:60: 31:f9:aa:14:e9:c3:22:40:84:f5:c9:fe:33:e7:d9: 9d:52:c6:e8:e5:a7:62:cd:6d:24:8a:90:23:16:dc: 03:75:a7:5f:c2:6f:5a:cd:d4:fb:ba:c0:8b:11:7c: 3f:86:1f:28:92:4f:7d:ab:f9:70:02:87:a9:a8:21: 57:7a:7e:51:63:3a:02:88:35:c5:43:cc:2f:a7:97: 7a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:50:C1:68:4B:D9:32:EF:45:F5:B3:3C:46:2E:59:01:9A:5A:92:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/405e4284-f69f-3e95-b871-67ba6fa28d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:92:86:7c:c7:79:58:a9:00:a5:95:61:b3:3d:f8:29:ae:38: 5b:f2:cb:07:16:06:32:5e:f7:1b:11:51:b6:2e:77:d7:b2:a2: b9:a4:be:c0:f9:97:25:38:92:64:28:78:e8:64:b5:a9:46:38: 5c:56:3c:de:88:20:aa:ad:d9:80:b6:48:64:ed:fe:7f:67:d6: 3c:76:c8:1f:92:73:c5:59:5f:77:16:c1:1d:14:29:2e:e2:44: f6:69:c3:57:f9:bd:fa:19:4f:8b:b3:f9:cd:4f:24:02:33:bb: 57:cd:b5:67:c7:22:86:4a:ac:f4:a5:71:b4:f8:be:f2:ae:79: b7:d8:c9:40:98:91:b2:ca:62:b9:92:59:a5:28:c4:a1:a4:19: 62:17:3f:ff:0c:dd:7f:d3:dc:0a:31:c4:78:59:46:be:49:ef: 79:32:49:72:ab:28:d2:ef:d3:5a:3f:69:7e:06:8e:30:01:c8: 08:1e:74:d7:cd:3d:0f:90:c0:54:e0:ca:0f:d4:65:6e:4c:f1: 2f:8c:fc:63:8c:59:dd:3b:fb:38:a6:92:45:9d:9d:b7:57:7a: b2:23:e3:15:07:e6:7c:28:f9:0e:5f:e8:67:a0:a2:b0:d6:60: 8e:73:20:4b:42:7c:f7:12:6a:72:35:11:e4:b8:8e:b7:2b:fe: f0:fa:ef:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9PP1FlM3mpcmA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk ZWQ3YTcxMjMtZWUxZi00MWJiLTkwNTYtY2UyY2MyYjk5YjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomUK7y+p0XnpTmBJcA0U2lx7MEb6IxkkI6fa 9m8a38ZwhUg0s5XnuhzpPnC1TNk3vg07RRKloYtfptuLxqsyYO/I/Z43XmcGlvmO jM2h4woIsWZt9Q8K1+S505IKg/+2sckHTfYTSnXgflIWzhBoNEh1znn9H82wCc/6 dxFm/h7T0byx+Vx4zx79dF8WjP1VzaV6Y4f+HCcMrEy9nXKGajOre1K4NIGcJuz8 ngRhqrVkEGAx+aoU6cMiQIT1yf4z59mdUsbo5adizW0kipAjFtwDdadfwm9azdT7 usCLEXw/hh8okk99q/lwAoepqCFXen5RYzoCiDXFQ8wvp5d6zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhQwWhL2TLvRfWzPEYuWQGaWpLYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDA1ZTQyODQtZjY5Zi0z ZTk1LWI4NzEtNjdiYTZmYTI4ZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJn8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2ShnzHeVipAKWVYbM9+CmuOFvyywcWBjJe9xsRUbYud9eyormkvsD5 lyU4kmQoeOhktalGOFxWPN6IIKqt2YC2SGTt/n9n1jx2yB+Sc8VZX3cWwR0UKS7i RPZpw1f5vfoZT4uz+c1PJAIzu1fNtWfHIoZKrPSlcbT4vvKuebfYyUCYkbLKYrmS WaUoxKGkGWIXP/8M3X/T3AoxxHhZRr5J73kySXKrKNLv01o/aX4GjjAByAgedNfN PQ+QwFTgyg/UZW5M8S+M/GOMWd07+zimkkWdnbdXerIj4xUH5nwo+Q5f6GegorDW YI5zIEtCfPcSanI1EeS4jrcr/vD670M= -----END CERTIFICATE-----Generated at Tue Jul 21 21:09:27 2026 by rpki-client