$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44e165bb-a59b-3f83-a408-caf7462b0f54.roa File: 44e165bb-a59b-3f83-a408-caf7462b0f54.roa (raw, json) Hash identifier: igB1V7xF5ZM/VKqkEdh9C8s2GY/3PuH64cp/PG22Q4M= Subject key identifier: 78:8F:6F:05:A0:0E:32:A3:46:AB:C5:1A:98:AD:B6:C6:AC:CC:AD:63 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E7A64F36762B0465145C2E400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44e165bb-a59b-3f83-a408-caf7462b0f54.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 8069 IP address blocks: 20.153.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:f3:67:62:b0:46:51:45:c2:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=6bc69f96-107b-4c10-a85e-78b17174ad1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:38:67:68:bb:4e:56:b0:7b:7c:b9:8d:31:3d: 50:7a:36:3d:41:ce:f1:53:35:0a:1c:0b:8d:df:81: 34:53:77:57:83:2e:55:25:95:9a:c3:c1:0c:81:30: 19:31:dc:47:92:c1:1a:f7:7d:41:81:26:45:6a:b1: 72:bd:49:7c:81:06:c9:98:70:5f:60:ef:cc:de:cf: 2c:16:94:94:37:e1:58:de:d5:bb:41:52:91:68:12: dd:11:06:09:2b:0c:42:ec:81:cf:4a:1d:e8:fa:3a: f4:24:5e:d2:39:1a:5c:12:b4:92:5a:45:27:31:ac: 5e:fe:79:85:de:2a:0a:db:2e:fb:dd:9d:c4:06:34: 4b:d3:23:3e:ab:31:da:e5:ca:44:63:60:d6:f4:41: 07:41:3f:a4:02:51:95:34:a4:93:27:50:e9:4c:b0: 03:b8:6e:13:12:b0:3d:73:5b:6e:d4:5c:c9:4a:e6: a7:c6:1d:a4:1c:1e:e7:ba:76:11:53:db:dd:e8:9b: ca:fe:e8:ec:0f:fd:cb:ab:36:7e:35:32:97:53:ad: c9:c8:c3:bd:7c:d6:77:87:fd:46:1e:ce:bd:df:06: 68:4f:d6:c6:ee:b3:ae:62:7f:97:e8:30:92:00:af: 17:ff:5e:8a:1f:37:e5:41:d5:2c:b1:46:42:31:31: fc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8F:6F:05:A0:0E:32:A3:46:AB:C5:1A:98:AD:B6:C6:AC:CC:AD:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44e165bb-a59b-3f83-a408-caf7462b0f54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:fe:38:b2:87:23:d9:1d:e7:4d:69:41:14:7f:e6:2a:78:21: fd:7a:c9:c4:79:90:23:1b:24:0d:ee:a3:10:af:55:6d:dd:61: 21:28:b4:85:3f:c8:31:2d:bc:20:29:07:3d:7f:b7:3c:ec:2d: 73:d7:db:08:3d:0d:c9:93:f2:76:fd:62:c5:75:98:9e:1e:ff: 0f:57:02:ee:bf:64:a8:36:d1:6f:3b:00:2d:d5:c7:5f:e8:a1: c8:6f:26:9d:b7:1d:a9:3d:50:25:10:50:eb:c3:e0:05:a6:a1: c4:ed:b1:96:e7:fd:9c:36:de:15:28:0f:b0:da:a9:23:76:82: d1:91:fb:4b:da:40:43:63:74:09:23:74:b9:1c:b0:48:0e:42: fa:15:c0:43:c9:9a:89:be:61:c0:8a:d2:75:a1:4a:81:9c:c2: 88:16:2d:52:a3:d7:f9:61:22:ce:c9:15:43:ef:8a:8e:c0:d1: a0:7f:39:50:0b:48:7f:1c:c7:34:0f:97:b9:c9:47:01:0f:ee: 75:8f:ce:11:ef:4d:3c:fa:78:55:35:ea:ab:57:d8:7c:de:18: 9d:8e:f6:ba:52:0b:68:67:fe:5d:aa:80:59:d4:d1:b5:8f:03: 6f:c5:49:91:5b:e7:01:75:27:43:96:02:cf:a3:90:d5:f2:a4: 8b:f1:37:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZPNnYrBGUUXC5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk NmJjNjlmOTYtMTA3Yi00YzEwLWE4NWUtNzhiMTcxNzRhZDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjhnaLtOVrB7fLmNMT1QejY9Qc7xUzUKHAuN 34E0U3dXgy5VJZWaw8EMgTAZMdxHksEa931BgSZFarFyvUl8gQbJmHBfYO/M3s8s FpSUN+FY3tW7QVKRaBLdEQYJKwxC7IHPSh3o+jr0JF7SORpcErSSWkUnMaxe/nmF 3ioK2y773Z3EBjRL0yM+qzHa5cpEY2DW9EEHQT+kAlGVNKSTJ1DpTLADuG4TErA9 c1tu1FzJSuanxh2kHB7nunYRU9vd6JvK/ujsD/3LqzZ+NTKXU63JyMO9fNZ3h/1G Hs693wZoT9bG7rOuYn+X6DCSAK8X/16KHzflQdUssUZCMTH85wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiPbwWgDjKjRqvFGpittsaszK1jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDRlMTY1YmItYTU5Yi0z ZjgzLWE0MDgtY2FmNzQ2MmIwZjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADz+OLKHI9kd501pQRR/5ip4If16ycR5kCMbJA3uoxCvVW3dYSEotIU/ yDEtvCApBz1/tzzsLXPX2wg9DcmT8nb9YsV1mJ4e/w9XAu6/ZKg20W87AC3Vx1/o ochvJp23Hak9UCUQUOvD4AWmocTtsZbn/Zw23hUoD7DaqSN2gtGR+0vaQENjdAkj dLkcsEgOQvoVwEPJmom+YcCK0nWhSoGcwogWLVKj1/lhIs7JFUPvio7A0aB/OVAL SH8cxzQPl7nJRwEP7nWPzhHvTTz6eFU16qtX2HzeGJ2O9rpSC2hn/l2qgFnU0bWP A2/FSZFb5wF1J0OWAs+jkNXypIvxN3c= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:20 2026 by rpki-client