$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2d246d-a182-371a-bc59-9c907d654829.roa File: ab2d246d-a182-371a-bc59-9c907d654829.roa (raw, json) Hash identifier: rAZy16GQa8FYhiMFsDIDXwf1ucQyzcyPV+SeIGHK75U= Subject key identifier: 40:27:E8:2A:63:C4:D0:A4:5C:31:53:13:4E:FC:67:43:57:D8:1D:69 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E779A29009005F319D99CF2C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2d246d-a182-371a-bc59-9c907d654829.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 8069 IP address blocks: 20.153.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:29:00:90:05:f3:19:d9:9c:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=29edabf5-c993-4cec-9ea1-5e6e8004c29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0c:69:13:78:6a:a0:90:ed:fa:43:3c:f2:80: 1b:49:81:a6:16:c9:2f:2a:06:09:2d:90:ac:58:64: 46:c9:f0:8f:1a:ea:7b:a0:16:c0:b8:ad:e8:43:f7: 06:1c:14:26:17:74:a8:53:85:8a:9e:c5:7c:76:c6: f2:0d:a6:6f:cf:8e:0b:7e:45:61:83:56:19:ee:6b: e9:e0:aa:1b:6b:c5:df:d6:20:68:a3:61:85:a7:4a: 1c:4d:af:b1:98:52:5a:72:4c:9d:72:1a:0b:e8:a3: a1:0d:56:81:8f:40:93:32:e8:7e:2f:62:25:d1:de: 35:7f:1c:cd:df:6f:19:8e:ab:fd:c1:0c:28:04:da: 8e:17:3f:a5:59:9a:a1:2c:fc:c6:71:79:cd:f3:42: 08:60:5c:93:72:69:60:aa:05:90:52:c8:de:31:19: 2a:d4:dc:d6:33:bf:56:04:66:60:bd:d2:9c:7d:9b: 1a:f8:e4:0b:f9:4d:18:20:20:c3:ce:69:df:d9:73: 73:29:b1:12:51:a7:82:ed:8c:9d:9c:9b:11:d1:d6: df:7c:7d:1f:f3:e4:c0:d5:82:50:58:dc:46:11:fe: e1:34:e2:9b:66:24:16:53:95:d7:28:b0:ed:73:94: f8:ff:03:7c:60:ac:5c:9e:ee:23:46:5a:69:32:a2: 9b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:27:E8:2A:63:C4:D0:A4:5C:31:53:13:4E:FC:67:43:57:D8:1D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2d246d-a182-371a-bc59-9c907d654829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c3:8d:5c:83:38:71:de:ff:47:29:30:da:df:98:07:96:1b: de:39:0d:82:23:98:22:8f:93:8b:8d:96:ea:35:de:ea:b8:e2: 67:4e:39:ba:03:45:5f:12:4f:bb:ee:56:a2:c7:14:8f:6b:b7: 7c:e0:7f:ee:e0:b1:d0:40:7b:62:35:6e:45:35:1f:78:78:51: b7:78:36:a5:20:e2:a2:03:70:8f:1f:3b:10:8f:f9:98:47:ec: 65:36:29:58:f6:b0:1c:0c:a2:67:6a:ce:5c:de:30:ce:15:26: e9:b9:b1:39:4e:96:3a:22:0c:ee:0f:78:8f:01:49:1f:61:74: 34:f1:51:9e:69:35:15:9e:c8:b1:17:00:07:e7:29:24:70:43: 0a:51:98:ef:58:b9:92:f6:ed:91:b2:fe:82:83:9a:94:bb:b8: ac:4e:ac:fc:a5:03:c7:17:2a:36:35:96:4e:52:da:8d:69:20: 39:be:5f:22:95:58:04:49:49:78:70:9c:27:01:dd:a1:de:8b: f0:3e:f1:95:83:fb:5f:79:d0:68:92:45:2d:96:df:f6:86:27: 02:b2:27:7c:9c:b3:ec:fb:4b:d6:4b:2c:5e:bf:e3:45:00:de: 51:8d:cc:7c:08:12:fb:42:5a:eb:55:a3:fd:66:c7:cc:16:d1: 20:71:04:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53mikAkAXzGdmc8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk MjllZGFiZjUtYzk5My00Y2VjLTllYTEtNWU2ZTgwMDRjMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAxpE3hqoJDt+kM88oAbSYGmFskvKgYJLZCs WGRGyfCPGup7oBbAuK3oQ/cGHBQmF3SoU4WKnsV8dsbyDaZvz44LfkVhg1YZ7mvp 4Koba8Xf1iBoo2GFp0ocTa+xmFJackydchoL6KOhDVaBj0CTMuh+L2Il0d41fxzN 328Zjqv9wQwoBNqOFz+lWZqhLPzGcXnN80IIYFyTcmlgqgWQUsjeMRkq1NzWM79W BGZgvdKcfZsa+OQL+U0YICDDzmnf2XNzKbESUaeC7YydnJsR0dbffH0f8+TA1YJQ WNxGEf7hNOKbZiQWU5XXKLDtc5T4/wN8YKxcnu4jRlppMqKbjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAn6CpjxNCkXDFTE078Z0NX2B1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWIyZDI0NmQtYTE4Mi0z NzFhLWJjNTktOWM5MDdkNjU0ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLDjVyDOHHe/0cpMNrfmAeWG945DYIjmCKPk4uNluo13uq44mdOOboD RV8ST7vuVqLHFI9rt3zgf+7gsdBAe2I1bkU1H3h4Ubd4NqUg4qIDcI8fOxCP+ZhH 7GU2KVj2sBwMomdqzlzeMM4VJum5sTlOljoiDO4PeI8BSR9hdDTxUZ5pNRWeyLEX AAfnKSRwQwpRmO9YuZL27ZGy/oKDmpS7uKxOrPylA8cXKjY1lk5S2o1pIDm+XyKV WARJSXhwnCcB3aHei/A+8ZWD+1950GiSRS2W3/aGJwKyJ3ycs+z7S9ZLLF6/40UA 3lGNzHwIEvtCWutVo/1mx8wW0SBxBKY= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:48 2026 by rpki-client