$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/691cb6c7-e2ea-39f7-ba50-5e36c69c6b28.roa File: 691cb6c7-e2ea-39f7-ba50-5e36c69c6b28.roa (raw, json) Hash identifier: RQCCkPbAHDIfKxyMv3oMwv3N5alCey0Qa2f+3ULt3js= Subject key identifier: D3:7F:C9:B1:BC:C9:D7:17:7A:9B:73:91:9B:B1:43:FE:63:A0:11:76 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E4559E7E4C7D9578802F2C380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/691cb6c7-e2ea-39f7-ba50-5e36c69c6b28.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.153.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:e7:e4:c7:d9:57:88:02:f2:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=c57adacb-10fd-4399-ad54-ce856ea88b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:99:dd:a3:20:c2:1a:16:0f:ed:d0:3c:e3: 14:ff:3e:5e:3d:a9:17:5d:0b:e6:dc:5d:80:99:ab: 81:29:43:00:45:27:a1:d9:8e:cd:2b:e8:eb:c0:27: d5:5e:0f:a6:7b:80:35:45:52:5d:1c:cc:47:0d:79: b0:3e:93:fd:56:11:90:c2:59:10:36:a4:3c:53:a7: b4:01:9b:8a:19:a8:43:4c:98:2c:d7:4f:f9:82:e3: a4:11:11:60:a5:5a:dd:d4:4b:97:34:ac:7b:f8:9f: c6:6e:b4:98:9d:5a:8d:24:0f:2e:57:a8:85:11:5e: ce:2e:1c:54:fc:45:fd:46:d6:5f:9b:3b:c5:e7:c1: af:07:06:3d:ae:3d:f5:7d:1d:3f:04:9d:2d:db:ff: 84:55:16:d9:92:b6:f3:b7:9f:d8:4a:b0:c2:c9:60: fa:56:a8:77:b9:3b:bb:fe:2f:e7:d6:4a:ac:b6:7a: 95:fe:cf:25:82:31:02:8b:9e:15:15:da:5c:a1:a7: 7f:43:c6:67:70:cf:a3:87:7b:31:b5:57:85:13:77: 5e:f8:20:e6:06:a0:cc:08:5e:af:e9:2a:77:b3:ae: 4c:43:96:17:a4:59:70:11:74:6a:57:68:a9:8a:6e: 55:18:3a:b5:61:55:50:20:45:1d:f4:87:74:70:4b: 60:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7F:C9:B1:BC:C9:D7:17:7A:9B:73:91:9B:B1:43:FE:63:A0:11:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/691cb6c7-e2ea-39f7-ba50-5e36c69c6b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f8:4a:46:0f:43:b6:29:97:36:69:23:92:de:1b:ef:56:4b: 92:9f:34:f2:6f:e4:c3:e7:9e:13:55:d8:08:1f:65:11:43:3a: c9:36:e8:b0:2c:8a:77:08:2a:1a:3c:6a:44:d3:8f:25:99:78: 00:5f:3c:d1:67:69:8c:d9:fa:68:71:5b:79:1e:08:54:33:ad: c8:d1:2b:20:0f:e2:a9:36:4e:16:5c:f7:8a:d4:9d:da:3f:61: 63:70:48:ba:ae:be:f7:08:92:97:1e:91:61:57:ab:b2:06:79: 1d:00:55:d9:18:e8:86:b3:54:36:a8:7a:b6:2f:d2:25:0a:d3: fa:a4:d7:08:1f:c4:01:bd:aa:62:69:65:d5:d6:c7:3d:77:91: 6e:e7:c7:e8:36:0f:4f:dd:72:48:76:16:55:65:16:26:b1:ab: c2:44:77:f7:b4:10:cc:66:35:5c:b2:41:4b:39:66:11:ce:f5: cd:ca:c2:17:82:46:36:2e:de:e0:08:33:9f:f3:d5:b2:d8:fb: af:b0:91:a2:b0:0e:d5:94:cf:7c:d2:b5:82:90:fe:24:cb:7e: 15:9f:2a:c7:c9:c5:8a:8b:5c:61:5b:f1:78:eb:d7:0f:2c:05: 10:a0:2a:e4:8f:cb:8e:75:b4:90:4e:75:cb:81:23:32:8a:1d: 6d:a5:2b:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWefkx9lXiALyw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk YzU3YWRhY2ItMTBmZC00Mzk5LWFkNTQtY2U4NTZlYTg4YjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk6Z3aMgwhoWD+3QPOMU/z5ePakXXQvm3F2A mauBKUMARSeh2Y7NK+jrwCfVXg+me4A1RVJdHMxHDXmwPpP9VhGQwlkQNqQ8U6e0 AZuKGahDTJgs10/5guOkERFgpVrd1EuXNKx7+J/GbrSYnVqNJA8uV6iFEV7OLhxU /EX9RtZfmzvF58GvBwY9rj31fR0/BJ0t2/+EVRbZkrbzt5/YSrDCyWD6Vqh3uTu7 /i/n1kqstnqV/s8lgjECi54VFdpcoad/Q8ZncM+jh3sxtVeFE3de+CDmBqDMCF6v 6Sp3s65MQ5YXpFlwEXRqV2ipim5VGDq1YVVQIEUd9Id0cEtgZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNN/ybG8ydcXeptzkZuxQ/5joBF2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjkxY2I2YzctZTJlYS0z OWY3LWJhNTAtNWUzNmM2OWM2YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIH4SkYPQ7YplzZpI5LeG+9WS5KfNPJv5MPnnhNV2AgfZRFDOsk26LAs incIKho8akTTjyWZeABfPNFnaYzZ+mhxW3keCFQzrcjRKyAP4qk2ThZc94rUndo/ YWNwSLquvvcIkpcekWFXq7IGeR0AVdkY6IazVDaoerYv0iUK0/qk1wgfxAG9qmJp ZdXWxz13kW7nx+g2D0/dckh2FlVlFiaxq8JEd/e0EMxmNVyyQUs5ZhHO9c3KwheC RjYu3uAIM5/z1bLY+6+wkaKwDtWUz3zStYKQ/iTLfhWfKsfJxYqLXGFb8Xjr1w8s BRCgKuSPy451tJBOdcuBIzKKHW2lK1E= -----END CERTIFICATE-----Generated at Tue Jul 21 21:05:52 2026 by rpki-client