$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72ff52f3-580d-3460-ac7f-36794a6e52fa.roa File: 72ff52f3-580d-3460-ac7f-36794a6e52fa.roa (raw, json) Hash identifier: nnyPVd4k9mRC9ta9rv/wJGSfg5MpI9QJe9EUz5gmR1c= Subject key identifier: 69:02:05:6E:20:28:CD:14:13:3D:6E:C7:59:50:93:BA:1C:3D:B0:53 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E4AEF2F5A2CBFCAD72D4CB740 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72ff52f3-580d-3460-ac7f-36794a6e52fa.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.153.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:2f:5a:2c:bf:ca:d7:2d:4c:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=96f3d068-052a-4f5f-b5b1-c09932ecc183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:df:1b:5a:f6:e6:c7:f1:f4:a4:2f:9c:62: 6f:75:2a:12:b1:94:92:d0:71:44:62:ed:20:33:39: b5:80:4b:82:d2:af:d3:42:ae:5a:ec:cc:4a:fd:85: fc:e6:ad:fc:54:1e:b1:76:bc:55:b9:bc:0c:2f:11: 81:4f:93:26:ab:c9:bd:8c:ec:bb:ff:2c:2b:52:71: ba:56:d5:ec:61:3f:63:9c:e2:4f:d1:66:65:81:9b: d4:d4:ef:22:04:1e:94:3c:57:84:b8:1f:8f:20:6b: c9:bf:a2:ca:b3:9c:ab:1d:c3:ca:14:6c:b4:c9:db: b7:14:3d:51:59:90:1d:fc:b7:7a:52:77:30:c2:95: d9:35:b9:3a:ba:5e:b2:f7:ea:3b:52:d8:3f:be:6a: 74:a5:f1:87:cf:25:38:31:51:81:64:8c:d9:db:f1: 69:f6:1b:4f:93:87:ec:e8:bf:13:ab:9c:ba:23:5a: dc:f5:81:34:85:ee:0a:7f:00:16:73:b1:f1:e2:6f: 4b:d8:89:e7:67:47:9e:a6:e0:b8:3d:4e:e1:af:76: eb:74:13:33:a3:f2:59:fd:c2:06:cb:45:da:57:4e: ae:08:eb:23:16:e5:f3:a8:b7:08:8f:11:f0:d9:ec: f8:a4:a3:02:68:28:52:3f:44:fe:4f:d8:1e:ec:19: 66:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:02:05:6E:20:28:CD:14:13:3D:6E:C7:59:50:93:BA:1C:3D:B0:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72ff52f3-580d-3460-ac7f-36794a6e52fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:1b:f6:a2:57:70:7d:24:55:4a:e9:95:8b:4b:5b:0a:c0:51: ec:89:c1:dd:3c:a5:ce:45:17:48:06:44:58:c8:87:63:ce:c3: c4:cd:38:04:91:fe:a4:d9:a3:01:4c:21:fa:f8:20:95:aa:84: 6a:df:c7:41:a7:ef:b7:37:8c:7c:f6:d8:a1:61:09:b6:21:29: 94:28:5e:3b:cf:89:31:a4:20:09:39:58:99:5f:d9:01:9d:7a: da:f6:8a:ef:76:54:6d:e5:14:ae:e4:94:8b:43:95:fa:7f:97: c0:da:2d:a4:9b:5b:38:6c:fc:39:4e:2f:66:ef:fa:ce:3e:b9: 89:76:a8:d1:ea:14:26:6e:5a:1b:b9:db:06:2a:70:5f:74:be: 01:31:03:1e:73:2f:4f:8e:78:73:d3:0f:df:35:58:10:89:75: e3:28:4f:61:85:20:99:0c:7f:62:d8:ef:a4:d1:74:05:78:40: c6:c2:e8:a4:a2:ec:8a:79:1b:94:32:d7:ae:1e:c3:97:29:78: 8b:da:4a:fe:44:80:95:2a:e3:84:27:ca:65:34:d8:de:de:1a: 16:b2:4e:a2:0f:0c:6a:75:eb:b8:0c:cb:1a:e5:29:10:79:ca: b1:aa:35:8e:a6:b9:aa:21:9b:04:2d:87:a3:ac:f4:77:5c:f0: 97:b1:4e:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K7y9aLL/K1y1Mt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk OTZmM2QwNjgtMDUyYS00ZjVmLWI1YjEtYzA5OTMyZWNjMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRrfG1r25sfx9KQvnGJvdSoSsZSS0HFEYu0g Mzm1gEuC0q/TQq5a7MxK/YX85q38VB6xdrxVubwMLxGBT5Mmq8m9jOy7/ywrUnG6 VtXsYT9jnOJP0WZlgZvU1O8iBB6UPFeEuB+PIGvJv6LKs5yrHcPKFGy0ydu3FD1R WZAd/Ld6UncwwpXZNbk6ul6y9+o7Utg/vmp0pfGHzyU4MVGBZIzZ2/Fp9htPk4fs 6L8Tq5y6I1rc9YE0he4KfwAWc7Hx4m9L2InnZ0eepuC4PU7hr3brdBMzo/JZ/cIG y0XaV06uCOsjFuXzqLcIjxHw2ez4pKMCaChSP0T+T9ge7BlmLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkCBW4gKM0UEz1ux1lQk7ocPbBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzJmZjUyZjMtNTgwZC0z NDYwLWFjN2YtMzY3OTRhNmU1MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQb9qJXcH0kVUrplYtLWwrAUeyJwd08pc5FF0gGRFjIh2POw8TNOASR /qTZowFMIfr4IJWqhGrfx0Gn77c3jHz22KFhCbYhKZQoXjvPiTGkIAk5WJlf2QGd etr2iu92VG3lFK7klItDlfp/l8DaLaSbWzhs/DlOL2bv+s4+uYl2qNHqFCZuWhu5 2wYqcF90vgExAx5zL0+OeHPTD981WBCJdeMoT2GFIJkMf2LY76TRdAV4QMbC6KSi 7Ip5G5Qy164ew5cpeIvaSv5EgJUq44QnymU02N7eGhayTqIPDGp167gMyxrlKRB5 yrGqNY6muaohmwQth6Os9Hdc8JexTrU= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:00 2026 by rpki-client