$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d0c868c-622f-3528-9fd1-29db14f7e967.roa File: 7d0c868c-622f-3528-9fd1-29db14f7e967.roa (raw, json) Hash identifier: FitRjOHrbxTyOLN1R+I+CMp6OZMYWZoqmQaU2auip3c= Subject key identifier: CD:2B:B6:44:80:08:28:4A:D7:21:E4:75:BF:83:4D:ED:5F:3C:F4:79 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E4559CF6902DC0D50C2476800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d0c868c-622f-3528-9fd1-29db14f7e967.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.153.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:cf:69:02:dc:0d:50:c2:47:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=75273ffd-94aa-479e-ac74-afab2d7f0b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:61:9d:42:2b:3d:ea:21:60:18:16:00:56:74: 94:8c:5d:60:3e:8a:4f:aa:54:4e:3e:7d:92:e6:be: a2:d9:e8:aa:f4:77:f0:89:95:e4:ce:73:ab:4e:4e: 87:fd:8c:f4:9f:87:85:c5:47:9f:37:da:42:93:7c: 91:18:64:8f:85:59:d0:76:bd:11:18:14:61:36:03: 64:88:4e:24:91:81:7f:1f:b5:e5:2f:e9:a9:45:3e: 34:57:7e:dc:af:c1:6a:40:cd:1f:99:0c:a0:81:7f: fd:f8:58:44:e6:ca:38:3e:b1:08:7b:e6:13:01:ce: e2:01:0f:37:c2:92:4c:81:b6:e5:83:ae:a7:55:18: 75:67:cc:a2:45:b7:43:73:7c:f0:b2:da:18:98:d6: e5:9e:43:a4:9b:12:30:40:ac:15:b9:cb:7c:a6:a3: d0:63:f4:93:41:b8:bd:24:78:d7:6c:69:d3:27:5a: bd:16:fe:0b:ae:79:6a:df:4f:a5:6c:e2:c2:52:b6: 4a:df:c4:f7:f7:fc:77:dd:c7:05:01:b3:21:e0:ea: 1c:57:20:03:ad:0d:e4:d8:8e:95:88:0c:4f:2b:53: da:2e:26:21:32:36:79:69:46:5f:24:ec:d5:4b:40: 8a:fe:cc:d4:7d:7a:9f:20:02:2a:82:89:de:50:42: d0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2B:B6:44:80:08:28:4A:D7:21:E4:75:BF:83:4D:ED:5F:3C:F4:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d0c868c-622f-3528-9fd1-29db14f7e967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:60:e7:e0:d6:4a:dd:d5:ae:2e:1c:c0:89:e5:66:f9:e6:ac: 0a:85:ca:92:48:3f:6f:ea:2d:5d:4f:cd:47:f7:2b:85:88:61: bb:81:1b:3a:a7:47:04:db:c6:c6:80:bc:01:ff:ce:32:26:b2: ee:15:35:aa:b9:b6:08:9b:66:6e:8f:a5:2e:63:cf:a6:d8:64: 63:82:d3:e1:a1:9a:20:61:db:d1:5c:bc:ea:cd:79:79:b2:3b: 88:68:4b:cc:e2:57:08:cf:08:c4:64:0a:ff:48:02:3f:8f:c8: 3b:ef:a6:5b:fe:ad:0a:f4:28:ad:78:c9:0f:19:0b:db:3e:c5: b5:cc:ae:5b:ae:8f:f1:a0:a5:1e:0c:d0:08:66:4e:74:02:0c: f9:51:18:65:dc:b5:a7:63:e0:14:1e:97:90:2c:20:c5:fd:85: f3:da:15:6a:1b:5c:e8:f8:04:f7:01:e1:89:ac:d7:19:d3:b8: d0:ce:00:1d:ef:74:61:5c:bb:d4:38:eb:df:d8:19:87:dc:b1: 54:0f:06:c7:2d:d1:65:38:08:9f:9c:48:f9:35:77:63:96:26: 9d:b4:11:da:ab:c6:63:05:31:cf:ba:11:5d:99:97:7e:58:b8: 5e:55:76:3c:ae:df:ca:2a:b7:80:37:e1:6a:37:11:63:36:b7: 37:88:69:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWc9pAtwNUMJHaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk NzUyNzNmZmQtOTRhYS00NzllLWFjNzQtYWZhYjJkN2YwYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2GdQis96iFgGBYAVnSUjF1gPopPqlROPn2S 5r6i2eiq9HfwiZXkznOrTk6H/Yz0n4eFxUefN9pCk3yRGGSPhVnQdr0RGBRhNgNk iE4kkYF/H7XlL+mpRT40V37cr8FqQM0fmQyggX/9+FhE5so4PrEIe+YTAc7iAQ83 wpJMgbblg66nVRh1Z8yiRbdDc3zwstoYmNblnkOkmxIwQKwVuct8pqPQY/STQbi9 JHjXbGnTJ1q9Fv4Lrnlq30+lbOLCUrZK38T39/x33ccFAbMh4OocVyADrQ3k2I6V iAxPK1PaLiYhMjZ5aUZfJOzVS0CK/szUfXqfIAIqgoneUELQ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0rtkSACChK1yHkdb+DTe1fPPR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2QwYzg2OGMtNjIyZi0z NTI4LTlmZDEtMjlkYjE0ZjdlOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJniMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJg5+DWSt3Vri4cwInlZvnmrAqFypJIP2/qLV1PzUf3K4WIYbuBGzqn RwTbxsaAvAH/zjImsu4VNaq5tgibZm6PpS5jz6bYZGOC0+GhmiBh29FcvOrNeXmy O4hoS8ziVwjPCMRkCv9IAj+PyDvvplv+rQr0KK14yQ8ZC9s+xbXMrluuj/GgpR4M 0AhmTnQCDPlRGGXctadj4BQel5AsIMX9hfPaFWobXOj4BPcB4Yms1xnTuNDOAB3v dGFcu9Q469/YGYfcsVQPBsct0WU4CJ+cSPk1d2OWJp20EdqrxmMFMc+6EV2Zl35Y uF5Vdjyu38oqt4A34Wo3EWM2tzeIad4= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:20 2026 by rpki-client