$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e0bd01d-65c2-33cc-9974-f5fbd98fc2d7.roa File: 4e0bd01d-65c2-33cc-9974-f5fbd98fc2d7.roa (raw, json) Hash identifier: TqZgudNEyPzHaH6RG44GuT3e1ku/bk8GCDqO/n+hf2k= Subject key identifier: C1:46:79:C4:01:AC:5E:E6:5B:A2:1B:22:39:97:08:8A:95:F6:67:DC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E4559CE6072767209752B8A60 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e0bd01d-65c2-33cc-9974-f5fbd98fc2d7.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.153.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:ce:60:72:76:72:09:75:2b:8a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=0ffe42e0-5ad7-4078-a142-55c32f06d3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d2:0b:bb:20:b9:3c:34:02:15:36:b4:8b:df: 59:16:92:28:60:53:1a:91:39:f0:6e:03:b6:db:35: b8:2d:85:0d:95:e7:58:5c:c4:a4:8b:a7:8f:e5:ab: 91:d8:92:c9:23:2d:20:5b:cd:57:9e:81:40:c9:6f: ce:53:3d:74:27:e8:5c:24:1a:d8:69:a6:71:fd:c4: 5a:c6:d9:42:62:1e:21:05:ea:04:59:68:c6:5b:70: a0:26:c2:67:8b:0f:ce:00:77:e8:b8:de:ce:33:9a: 1c:f2:9e:a9:e4:fc:76:7c:c1:e6:38:90:b0:a3:23: f8:eb:57:88:8b:d9:04:7e:e3:ec:25:41:ff:29:d6: 99:24:93:81:60:33:de:22:bd:42:b9:d5:b9:70:e2: cc:34:47:cc:2f:60:11:ec:1b:63:5d:1f:10:7d:ce: 30:e3:6d:94:f5:57:c5:f6:dc:a6:49:ca:cf:5e:d0: d1:2c:10:56:80:6c:9d:c7:da:75:5e:ce:00:c3:57: 71:91:b0:08:76:9c:21:2d:34:f2:4a:65:be:cf:de: 8f:bb:7a:1a:d5:9a:5c:e1:0f:48:ac:83:68:04:f8: b4:dc:52:b4:09:fa:bd:03:3c:fb:60:51:46:a6:f2: 60:fb:06:27:54:39:eb:c6:e3:23:4c:cb:8d:92:7b: 0e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:46:79:C4:01:AC:5E:E6:5B:A2:1B:22:39:97:08:8A:95:F6:67:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e0bd01d-65c2-33cc-9974-f5fbd98fc2d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:0a:86:dd:a2:1f:3a:97:f4:56:77:0b:a5:5d:dc:a8:02:7c: a7:cb:44:16:e3:7e:7c:26:86:ab:0d:d2:7d:e6:20:8e:9a:d2: fb:e6:f5:68:02:7b:06:fc:53:29:30:47:07:c6:4e:0a:61:0a: bd:a3:8a:0d:26:55:a2:17:8c:a4:a4:f0:3d:3e:29:a8:28:92: cf:e9:46:61:e6:0e:19:46:08:f0:fc:a1:56:19:6e:f4:4a:ca: 25:56:30:bf:d1:88:4b:8e:58:37:00:15:1d:ce:3a:34:e3:f7: 78:cb:41:22:3a:da:45:c0:bc:90:c1:e4:d8:84:91:c8:5a:e2: 43:3a:e1:d8:40:75:a6:16:dc:82:01:d8:3a:c5:c1:fd:a6:bc: 42:c0:29:bc:7e:ad:42:03:41:3f:98:40:2a:d1:d2:81:2d:15: 5e:dc:79:43:bd:1c:fa:44:d5:99:59:e0:ea:2e:d5:56:ff:ff: c5:cc:20:45:d3:8c:11:cb:9e:c0:b4:15:8d:94:a4:76:2a:fc: cc:5f:83:71:aa:75:66:1c:09:34:59:19:83:f3:71:3f:35:f2: 2c:b2:8c:0f:95:5d:b0:1e:81:b2:bc:50:4f:35:e9:87:16:63: 68:49:8e:a2:4f:6f:dd:34:95:69:a1:cd:43:02:f6:5a:57:28: cd:67:0b:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWc5gcnZyCXUrimAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk MGZmZTQyZTAtNWFkNy00MDc4LWExNDItNTVjMzJmMDZkM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNILuyC5PDQCFTa0i99ZFpIoYFMakTnwbgO2 2zW4LYUNledYXMSki6eP5auR2JLJIy0gW81XnoFAyW/OUz10J+hcJBrYaaZx/cRa xtlCYh4hBeoEWWjGW3CgJsJniw/OAHfouN7OM5oc8p6p5Px2fMHmOJCwoyP461eI i9kEfuPsJUH/KdaZJJOBYDPeIr1CudW5cOLMNEfML2AR7BtjXR8Qfc4w422U9VfF 9tymScrPXtDRLBBWgGydx9p1Xs4Aw1dxkbAIdpwhLTTySmW+z96Pu3oa1Zpc4Q9I rINoBPi03FK0Cfq9Azz7YFFGpvJg+wYnVDnrxuMjTMuNknsOZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFGecQBrF7mW6IbIjmXCIqV9mfcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGUwYmQwMWQtNjVjMi0z M2NjLTk5NzQtZjVmYmQ5OGZjMmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJm8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4Kht2iHzqX9FZ3C6Vd3KgCfKfLRBbjfnwmhqsN0n3mII6a0vvm9WgC ewb8UykwRwfGTgphCr2jig0mVaIXjKSk8D0+Kagoks/pRmHmDhlGCPD8oVYZbvRK yiVWML/RiEuOWDcAFR3OOjTj93jLQSI62kXAvJDB5NiEkcha4kM64dhAdaYW3IIB 2DrFwf2mvELAKbx+rUIDQT+YQCrR0oEtFV7ceUO9HPpE1ZlZ4Oou1Vb//8XMIEXT jBHLnsC0FY2UpHYq/Mxfg3GqdWYcCTRZGYPzcT818iyyjA+VXbAegbK8UE816YcW Y2hJjqJPb900lWmhzUMC9lpXKM1nC48= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:21 2026 by rpki-client