$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9fe82129-7ac7-3807-a8b1-97e83fcba244.roa File: 9fe82129-7ac7-3807-a8b1-97e83fcba244.roa (raw, json) Hash identifier: IEuMWZhQjgVcQdv9bvvSUvTR3pJZvLa+5+As5lu68P8= Subject key identifier: 8E:0B:E2:9B:63:F3:18:E6:3A:47:79:4E:E9:8F:2D:58:CA:2D:68:63 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E4AEF452BFD164A9AF7EFFE40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9fe82129-7ac7-3807-a8b1-97e83fcba244.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.153.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:45:2b:fd:16:4a:9a:f7:ef:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=0b30b719-03d0-4b94-979b-eb53f5574fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:de:8d:d7:99:ef:08:8b:37:c1:df:b8:bb:75: 74:47:57:50:78:a4:6c:bc:e6:27:69:67:ba:8a:08: 70:90:02:f9:e7:25:04:9c:c7:b1:eb:b4:da:81:b7: 90:e6:ba:b6:43:c8:08:a4:97:5d:d6:8d:75:3d:57: 05:19:6c:0a:09:a5:5d:98:c8:15:e7:bf:b8:19:d7: 4a:5c:c2:d4:07:bc:36:22:ca:a8:76:97:10:0d:06: e2:b6:8b:50:0f:2f:4d:88:95:f4:4e:9d:27:50:74: 4a:71:65:9d:d4:79:e6:a5:c5:a5:d0:cd:59:30:1e: f6:56:9a:3c:e6:cf:9c:e6:ac:9d:95:67:33:34:02: 03:08:d7:c3:c6:9b:6c:92:33:5d:61:02:c6:7e:b4: 5b:0d:c7:df:0b:32:b8:0e:e3:ad:35:82:e5:93:15: fe:01:c5:fc:f2:86:0d:1c:09:57:cc:7f:6c:2e:82: 72:ef:61:19:12:84:e1:72:ef:ff:fe:78:3b:51:80: 96:05:da:0f:78:24:83:64:13:5d:75:12:7e:f0:90: a6:26:a6:a8:48:fa:8a:d4:c4:ee:ea:d3:df:2d:04: 08:9b:4f:03:f8:40:45:c4:46:20:ac:52:b2:ef:f8: 17:4d:c8:46:fb:5c:db:86:8a:9a:a6:93:a4:79:5d: 4a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0B:E2:9B:63:F3:18:E6:3A:47:79:4E:E9:8F:2D:58:CA:2D:68:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9fe82129-7ac7-3807-a8b1-97e83fcba244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:57:38:da:71:be:7e:27:cf:ef:40:e3:37:1f:aa:f7:49:d7: a0:e9:c0:f5:ae:3e:1f:b9:b1:11:06:f2:0f:1d:d6:80:e8:06: ce:b2:80:b9:bf:bd:71:a4:73:3e:2b:c8:49:f4:57:15:0c:a5: 26:8b:5f:ec:62:85:89:96:0e:7a:31:4b:b1:cc:db:25:56:f9: d8:2c:f3:21:41:8d:f6:13:77:ac:ff:7c:0a:b3:1d:46:61:16: 6f:32:51:66:f2:f8:46:fb:e3:a3:ef:37:cc:f4:60:60:4d:4f: d8:e2:f3:e5:12:7d:fe:45:46:26:86:78:a2:b7:38:65:e2:c8: 12:9f:98:15:0a:f6:34:d6:de:7b:d3:55:56:00:ca:93:78:26: 47:ba:9a:e5:7c:25:fa:5b:2a:26:19:cd:b3:a2:f6:4f:37:ee: bb:35:31:ef:ae:fd:2f:83:e6:b0:7e:1d:13:71:2a:17:6b:7f: 83:99:d4:7a:0c:63:e1:3c:b0:5d:fe:2c:39:ae:fb:54:55:b9: 47:92:8c:50:4e:e9:3e:69:ce:b9:21:0f:45:5f:c6:14:1c:b3: bb:1b:25:68:8e:0b:75:c3:9a:74:a9:e5:69:ca:5b:4d:1e:29: 80:38:0c:89:45:c9:ea:15:01:02:b0:9b:d3:9b:37:0d:11:51: a7:81:72:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K70Ur/RZKmvfv/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk MGIzMGI3MTktMDNkMC00Yjk0LTk3OWItZWI1M2Y1NTc0ZmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt6N15nvCIs3wd+4u3V0R1dQeKRsvOYnaWe6 ighwkAL55yUEnMex67TagbeQ5rq2Q8gIpJdd1o11PVcFGWwKCaVdmMgV57+4GddK XMLUB7w2IsqodpcQDQbitotQDy9NiJX0Tp0nUHRKcWWd1HnmpcWl0M1ZMB72Vpo8 5s+c5qydlWczNAIDCNfDxptskjNdYQLGfrRbDcffCzK4DuOtNYLlkxX+AcX88oYN HAlXzH9sLoJy72EZEoThcu///ng7UYCWBdoPeCSDZBNddRJ+8JCmJqaoSPqK1MTu 6tPfLQQIm08D+EBFxEYgrFKy7/gXTchG+1zbhoqappOkeV1K1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4L4ptj8xjmOkd5TumPLVjKLWhjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWZlODIxMjktN2FjNy0z ODA3LWE4YjEtOTdlODNmY2JhMjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtXONpxvn4nz+9A4zcfqvdJ16DpwPWuPh+5sREG8g8d1oDoBs6ygLm/ vXGkcz4ryEn0VxUMpSaLX+xihYmWDnoxS7HM2yVW+dgs8yFBjfYTd6z/fAqzHUZh Fm8yUWby+Eb746PvN8z0YGBNT9ji8+USff5FRiaGeKK3OGXiyBKfmBUK9jTW3nvT VVYAypN4Jke6muV8JfpbKiYZzbOi9k837rs1Me+u/S+D5rB+HRNxKhdrf4OZ1HoM Y+E8sF3+LDmu+1RVuUeSjFBO6T5pzrkhD0VfxhQcs7sbJWiOC3XDmnSp5WnKW00e KYA4DIlFyeoVAQKwm9ObNw0RUaeBclQ= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:06 2026 by rpki-client