$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/686bda1e-0667-3f81-bc55-7f44920b456a.roa File: 686bda1e-0667-3f81-bc55-7f44920b456a.roa (raw, json) Hash identifier: 5wbYeXL5vul3zHf3CM2PHOpDOvwmCLSPIPDtXK2mfng= Subject key identifier: 9F:79:20:E6:82:31:45:47:2D:F6:AC:08:DC:2A:CE:AA:91:5F:44:E0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E842A403D41A1B8B4F43DA8C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/686bda1e-0667-3f81-bc55-7f44920b456a.roa Signing time: Thu 16 Jul 2026 09:00:12 +0000 ROA not before: Thu 16 Jul 2026 09:00:12 +0000 ROA not after: Wed 14 Oct 2026 09:00:12 +0000 asID: 8069 IP address blocks: 20.153.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:2a:40:3d:41:a1:b8:b4:f4:3d:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 16 09:00:12 2026 GMT Not After : Oct 14 09:00:12 2026 GMT Subject: CN=7611b1b9-b393-4210-b844-579d864b81ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:eb:78:4b:89:9f:2f:93:d6:84:28:e5:58:f3: 1c:35:1f:75:94:77:a2:f7:d2:e2:a4:d6:52:b2:59: be:30:b7:70:0f:f0:6b:c2:f8:0b:a2:9a:5e:9f:94: 01:69:bb:74:1d:f4:cb:47:ad:e2:c4:24:b2:b1:d0: 8a:33:7f:80:b5:70:64:c5:e7:a7:67:e4:b7:ae:e9: ff:52:92:68:80:b6:6e:30:26:30:de:c5:db:50:30: 7e:e7:f9:0b:69:19:bf:78:48:f6:13:8b:64:33:70: 27:af:e1:09:87:a6:ea:34:61:9a:e8:04:49:46:5b: b9:cc:ed:30:8e:de:ff:af:97:42:83:a6:22:0f:42: 2e:79:4b:3c:79:ba:71:c9:25:bf:f7:a4:bb:0a:09: 11:60:09:2c:87:99:92:57:c3:af:ea:e6:83:84:00: 52:fc:66:c1:32:e0:af:86:e0:76:69:1e:73:ff:42: 9e:75:54:6e:ed:8d:e0:ef:32:a1:5e:19:03:06:de: c0:ff:92:cd:03:00:88:19:42:ef:61:1e:a0:77:6e: 48:16:53:1a:3d:2e:49:ad:00:a1:8b:ec:0b:73:ce: f8:3b:a3:0e:ce:92:f2:a5:6d:8a:69:f3:02:60:74: a6:54:16:d6:89:c6:0d:f5:20:04:95:4a:72:03:c9: f9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:79:20:E6:82:31:45:47:2D:F6:AC:08:DC:2A:CE:AA:91:5F:44:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/686bda1e-0667-3f81-bc55-7f44920b456a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:9b:f0:9b:47:b4:b9:ae:70:1b:3f:0d:7b:b9:e5:36:3c:54: 02:37:56:09:a9:e5:5d:e6:ec:d8:5c:95:fc:76:c4:04:a2:b6: 5b:e6:1a:ab:33:0a:ca:6f:e7:4f:a9:94:a9:2d:b0:ad:a8:24: 5d:e8:28:b5:0b:42:33:80:34:19:79:4d:68:76:5f:fc:3a:b4: 40:3c:47:c6:d8:38:5c:c6:f8:0c:56:ab:fc:49:e5:e2:01:78: f2:c5:38:5c:02:96:e3:8c:7c:17:c2:71:50:0d:21:6b:51:56: 4d:eb:f9:36:dc:2c:b3:1c:70:17:86:d3:a9:bf:56:b5:3d:95: 7f:18:02:d5:12:cd:1a:8b:68:99:cb:15:6c:6a:e1:91:c5:7f: a2:b3:93:16:5d:4d:e8:ea:d6:f6:af:9a:06:04:97:15:3f:d7: 30:9a:dd:8b:4e:19:3f:40:d5:14:b6:fd:9b:0d:b6:9b:51:2f: 88:49:e7:e9:fe:ff:17:dc:dc:68:cb:6b:55:c8:e4:13:8a:6c: 99:6c:ee:af:17:93:5a:0a:9c:a4:b4:97:0e:85:e6:21:d0:dc: 65:ba:62:ff:0d:e9:8e:48:9c:90:47:7f:bd:3d:eb:9c:43:01: f9:81:89:d3:4d:1e:9e:c9:30:59:ea:84:5d:54:d2:ca:d3:fc: 68:51:8b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EKkA9QaG4tPQ9qMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk NzYxMWIxYjktYjM5My00MjEwLWI4NDQtNTc5ZDg2NGI4MWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuut4S4mfL5PWhCjlWPMcNR91lHei99LipNZS slm+MLdwD/BrwvgLoppen5QBabt0HfTLR63ixCSysdCKM3+AtXBkxeenZ+S3run/ UpJogLZuMCYw3sXbUDB+5/kLaRm/eEj2E4tkM3Anr+EJh6bqNGGa6ARJRlu5zO0w jt7/r5dCg6YiD0IueUs8ebpxySW/96S7CgkRYAksh5mSV8Ov6uaDhABS/GbBMuCv huB2aR5z/0KedVRu7Y3g7zKhXhkDBt7A/5LNAwCIGULvYR6gd25IFlMaPS5JrQCh i+wLc874O6MOzpLypW2KafMCYHSmVBbWicYN9SAElUpyA8n5DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ95IOaCMUVHLfasCNwqzqqRX0TgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjg2YmRhMWUtMDY2Ny0z ZjgxLWJjNTUtN2Y0NDkyMGI0NTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABab8JtHtLmucBs/DXu55TY8VAI3Vgmp5V3m7Nhclfx2xASitlvmGqsz Cspv50+plKktsK2oJF3oKLULQjOANBl5TWh2X/w6tEA8R8bYOFzG+AxWq/xJ5eIB ePLFOFwCluOMfBfCcVANIWtRVk3r+TbcLLMccBeG06m/VrU9lX8YAtUSzRqLaJnL FWxq4ZHFf6KzkxZdTejq1vavmgYElxU/1zCa3YtOGT9A1RS2/ZsNtptRL4hJ5+n+ /xfc3GjLa1XI5BOKbJls7q8Xk1oKnKS0lw6F5iHQ3GW6Yv8N6Y5InJBHf70965xD AfmBidNNHp7JMFnqhF1U0srT/GhRi34= -----END CERTIFICATE-----Generated at Tue Jul 21 21:09:18 2026 by rpki-client