$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f671a-d520-39bf-bbc0-7a9f1b087044.roa File: 433f671a-d520-39bf-bbc0-7a9f1b087044.roa (raw, json) Hash identifier: 31OJGDTSDcRByIk+T/g951SBnQWjWaZnlUiKBVqLE0Q= Subject key identifier: 4B:3D:13:A3:65:F8:93:51:BB:95:1F:B4:AA:83:54:26:0F:26:41:4D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E4129E7C178370AF5DC023980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f671a-d520-39bf-bbc0-7a9f1b087044.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 8069 IP address blocks: 20.153.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:e7:c1:78:37:0a:f5:dc:02:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=edfd70ed-face-437e-9018-8cb5218f35bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ac:9f:35:e0:91:30:ae:e3:f0:db:5b:c0:bb: 3e:9e:34:da:3d:26:fe:e1:ee:19:dc:4a:13:1e:bf: 90:01:1b:86:29:e9:60:ef:94:c3:30:66:19:3f:49: 33:e1:7b:d2:2c:06:a8:81:e6:5b:3b:f1:d4:6e:d6: 5e:f5:c3:96:37:24:70:9e:c8:3e:64:e4:f9:4e:6c: fe:36:62:c2:c3:f6:a4:15:76:12:83:e3:6b:dd:a2: 0a:65:25:b7:dd:fe:9c:b0:67:69:4b:73:8d:a8:67: b7:14:29:e6:c6:a3:51:59:45:f1:ed:32:b4:be:ff: c3:3e:ac:16:2e:2c:07:d7:36:06:2d:ce:4a:1e:4a: 0f:94:bd:74:96:4f:53:6e:ef:50:26:10:6d:16:b7: c4:e2:11:d3:19:9b:19:12:98:03:70:e0:16:e9:38: 22:6a:03:90:c2:db:53:5c:a6:58:66:d3:15:2f:e2: 32:03:7f:0f:60:6d:47:a4:d1:78:cf:b8:17:a8:30: 82:9e:70:19:8a:be:a8:ed:25:9c:b2:aa:0a:da:7e: 22:b2:22:8e:62:af:82:c9:1a:e2:a3:dd:d4:f0:61: 38:84:ba:7f:51:f2:7b:1b:88:48:0c:58:4e:75:07: 57:88:7c:1e:1c:8b:f5:bc:f0:ee:27:2c:57:c5:e2: 2c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3D:13:A3:65:F8:93:51:BB:95:1F:B4:AA:83:54:26:0F:26:41:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f671a-d520-39bf-bbc0-7a9f1b087044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:8e:c9:7b:f8:0e:67:d3:bf:f8:27:b3:b4:44:cc:f6:18:c2: 3f:cf:df:10:69:d7:f5:d1:72:bc:66:71:cb:a6:1e:08:b3:3e: 44:af:3b:f1:b4:8f:50:d7:db:67:bc:c7:29:45:f6:47:30:3b: e7:a9:fb:85:33:81:4b:0a:1a:ed:ec:b1:64:8f:e4:b9:81:e0: cb:d3:e0:77:b3:2e:2b:8c:8e:d3:e5:f6:0a:34:9d:ac:0e:cd: 88:b7:7b:f1:b2:ef:4a:b1:1e:89:4a:65:48:cf:36:05:93:9c: af:96:5e:e9:30:de:06:e2:e3:1b:a8:79:d4:57:99:a7:4b:c1: c8:5a:b1:b9:4f:46:c5:7d:0e:8b:55:7e:72:a2:0d:6a:4a:99: 6f:e9:2b:cc:84:35:ff:31:44:4e:56:73:9e:8b:33:6d:14:7a: 30:6e:58:0b:54:87:28:b7:a4:c9:8a:3b:50:68:7c:8f:2b:b8: dd:08:29:bc:54:a0:91:90:b6:7c:08:dd:37:cf:1c:38:a3:7a: de:01:60:9a:ee:e1:ce:f2:dd:6f:8c:a2:a8:16:89:83:e3:6d: d6:6f:39:85:ff:ed:dd:51:a0:51:f5:0f:e5:fd:63:29:b6:9c: 10:40:c2:e0:eb:50:46:a5:14:67:49:7f:0a:b7:f8:0f:fb:99: 80:f7:65:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKefBeDcK9dwCOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk ZWRmZDcwZWQtZmFjZS00MzdlLTkwMTgtOGNiNTIxOGYzNWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKyfNeCRMK7j8NtbwLs+njTaPSb+4e4Z3EoT Hr+QARuGKelg75TDMGYZP0kz4XvSLAaogeZbO/HUbtZe9cOWNyRwnsg+ZOT5Tmz+ NmLCw/akFXYSg+Nr3aIKZSW33f6csGdpS3ONqGe3FCnmxqNRWUXx7TK0vv/DPqwW LiwH1zYGLc5KHkoPlL10lk9Tbu9QJhBtFrfE4hHTGZsZEpgDcOAW6TgiagOQwttT XKZYZtMVL+IyA38PYG1HpNF4z7gXqDCCnnAZir6o7SWcsqoK2n4isiKOYq+CyRri o93U8GE4hLp/UfJ7G4hIDFhOdQdXiHweHIv1vPDuJyxXxeIseQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEs9E6Nl+JNRu5UftKqDVCYPJkFNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDMzZjY3MWEtZDUyMC0z OWJmLWJiYzAtN2E5ZjFiMDg3MDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2OyXv4DmfTv/gns7REzPYYwj/P3xBp1/XRcrxmccumHgizPkSvO/G0 j1DX22e8xylF9kcwO+ep+4UzgUsKGu3ssWSP5LmB4MvT4HezLiuMjtPl9go0nawO zYi3e/Gy70qxHolKZUjPNgWTnK+WXukw3gbi4xuoedRXmadLwchasblPRsV9DotV fnKiDWpKmW/pK8yENf8xRE5Wc56LM20UejBuWAtUhyi3pMmKO1BofI8ruN0IKbxU oJGQtnwI3TfPHDijet4BYJru4c7y3W+MoqgWiYPjbdZvOYX/7d1RoFH1D+X9Yym2 nBBAwuDrUEalFGdJfwq3+A/7mYD3ZXs= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:49 2026 by rpki-client