$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3457f2c-3a55-3e62-87a9-8e24926a0545.roa File: b3457f2c-3a55-3e62-87a9-8e24926a0545.roa (raw, json) Hash identifier: 5eZ8iUxQqzDYHQGXZ3Z/Y+HjDvujoEUcfLfouieI6SY= Subject key identifier: DB:BE:A8:E5:C6:50:08:8A:73:A4:80:66:DF:9F:6C:DD:38:48:5A:F1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F4F808A5EA5C0602AEF800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3457f2c-3a55-3e62-87a9-8e24926a0545.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.153.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:f8:08:a5:ea:5c:06:02:ae:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=95c7fb89-dba3-4689-a59b-474470c2ea5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:93:92:e1:6f:34:11:4c:c4:fb:e3:fe:55: 9e:ec:87:a8:c0:c4:01:93:2b:1a:b9:7c:d7:75:31: 09:0d:4d:2a:39:77:c2:08:77:fe:c5:f8:cc:94:72: 10:01:13:65:4e:df:39:4a:9f:59:b6:32:15:56:70: 0e:ec:6e:53:83:d8:56:44:a3:dd:f8:29:64:76:24: 96:45:19:a3:e9:0f:65:2d:12:cc:0b:c7:ed:0c:96: c0:ab:cd:af:56:41:29:c6:69:2e:07:20:f9:8f:d3: d4:5d:a2:66:50:68:36:02:0a:4b:4b:8f:bf:74:ce: 01:e5:96:1f:ac:82:05:dd:10:db:a1:bb:83:a3:8e: e3:7f:1c:6e:79:f1:c7:65:a9:5e:10:c9:70:74:37: d0:9d:ab:0e:66:f6:aa:19:c5:8c:30:82:c2:a0:83: b7:b7:3d:af:21:a8:c3:cd:be:a7:51:92:92:49:be: 28:23:64:80:8f:50:51:e2:76:69:b4:53:46:5e:26: 35:15:f2:3c:ff:7c:59:a2:6f:83:ef:dd:87:54:f6: 09:47:63:4e:13:14:f4:a5:f2:b8:81:2b:88:ea:3a: 4c:dd:96:c2:42:9d:92:80:c6:ed:0f:45:14:9d:d3: cc:53:d6:b8:d3:cf:df:1e:53:0f:27:e0:8e:af:ed: 84:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BE:A8:E5:C6:50:08:8A:73:A4:80:66:DF:9F:6C:DD:38:48:5A:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3457f2c-3a55-3e62-87a9-8e24926a0545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fd:95:28:80:fc:6e:cc:a9:c5:6e:eb:1e:05:34:3c:8d:24: 39:ae:5f:7d:84:d1:7a:ed:25:34:ae:26:f6:12:45:af:cb:63: b4:27:bb:3c:f3:c8:b7:e5:dc:af:f7:61:ff:ad:55:dd:92:a9: 2d:5b:21:15:c8:b8:f9:df:71:66:f7:06:ad:c0:84:4a:ac:f3: 64:4a:9e:7c:7f:bb:60:6e:49:4a:3a:fb:7e:45:98:86:c8:c2: b0:74:b1:f1:88:06:5a:49:4f:c0:08:d0:6d:da:1d:44:28:a1: ed:15:74:b8:44:2c:47:b7:d2:ea:aa:de:62:84:94:00:de:47: ac:c3:77:22:50:0d:98:bb:00:b6:e2:92:5c:9c:1d:04:d4:6e: 32:34:ce:29:6d:5b:ba:13:f6:75:cf:82:94:d3:b9:86:d8:0d: 79:1d:26:bc:3f:d0:14:5b:5e:14:44:52:f0:1f:7b:23:8a:d5: 47:9a:de:d8:8d:c5:81:03:b8:90:d9:b6:07:f3:1c:9e:23:37: 1e:80:a8:c3:5c:d0:4a:f3:ec:e8:ec:1f:d7:97:59:15:34:80: 27:4c:81:40:38:1a:15:26:73:21:7c:5a:71:ce:04:d3:71:c5: 1c:d0:10:83:14:a1:3c:cc:d5:b7:85:81:92:6b:59:a3:8d:3c: f2:3e:33:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9PgIpepcBgKu+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk OTVjN2ZiODktZGJhMy00Njg5LWE1OWItNDc0NDcwYzJlYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDaTkuFvNBFMxPvj/lWe7IeowMQBkysauXzX dTEJDU0qOXfCCHf+xfjMlHIQARNlTt85Sp9ZtjIVVnAO7G5Tg9hWRKPd+ClkdiSW RRmj6Q9lLRLMC8ftDJbAq82vVkEpxmkuByD5j9PUXaJmUGg2AgpLS4+/dM4B5ZYf rIIF3RDbobuDo47jfxxuefHHZaleEMlwdDfQnasOZvaqGcWMMILCoIO3tz2vIajD zb6nUZKSSb4oI2SAj1BR4nZptFNGXiY1FfI8/3xZom+D792HVPYJR2NOExT0pfK4 gSuI6jpM3ZbCQp2SgMbtD0UUndPMU9a408/fHlMPJ+COr+2EMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNu+qOXGUAiKc6SAZt+fbN04SFrxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjM0NTdmMmMtM2E1NS0z ZTYyLTg3YTktOGUyNDkyNmEwNTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf9lSiA/G7MqcVu6x4FNDyNJDmuX32E0XrtJTSuJvYSRa/LY7Qnuzzz yLfl3K/3Yf+tVd2SqS1bIRXIuPnfcWb3Bq3AhEqs82RKnnx/u2BuSUo6+35FmIbI wrB0sfGIBlpJT8AI0G3aHUQooe0VdLhELEe30uqq3mKElADeR6zDdyJQDZi7ALbi klycHQTUbjI0ziltW7oT9nXPgpTTuYbYDXkdJrw/0BRbXhREUvAfeyOK1Uea3tiN xYEDuJDZtgfzHJ4jNx6AqMNc0Erz7OjsH9eXWRU0gCdMgUA4GhUmcyF8WnHOBNNx xRzQEIMUoTzM1beFgZJrWaONPPI+Mw8= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:48 2026 by rpki-client