$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bce0494a-ea55-37d5-890f-f7e08109514e.roa File: bce0494a-ea55-37d5-890f-f7e08109514e.roa (raw, json) Hash identifier: txRfVO0NgfYgjo/2mH4nIFzLVMvacYJLkhNhcLx/bjw= Subject key identifier: 59:FE:0C:9E:8A:F3:EE:57:7A:56:E3:31:8E:09:FF:4F:31:92:90:E7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E4AEF6D3F3F7E82188F2DE340 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bce0494a-ea55-37d5-890f-f7e08109514e.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.153.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:6d:3f:3f:7e:82:18:8f:2d:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=e77e8307-6bf2-4ec2-a14d-79380b910d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:27:3b:8f:61:92:d5:6a:ee:c7:d4:f0:9a:9f: 2a:58:a1:bf:f0:57:ea:a3:bb:96:bf:73:64:4c:7d: 08:52:ab:40:9d:29:46:f1:a2:ea:26:73:0b:e9:68: 64:09:d7:ea:e4:ef:69:2c:53:e9:d8:09:f8:09:8c: 92:58:11:a5:93:82:7c:f1:9c:07:14:bb:7d:2c:d9: 48:a6:a8:fb:a2:17:22:4c:90:e8:42:5c:17:ab:4b: 3c:c9:60:ab:9a:c0:de:31:2f:e0:1c:2a:b7:31:c1: d7:4a:cb:17:17:61:80:99:e8:97:f5:32:16:a3:d5: a4:eb:31:c5:95:c0:d2:15:70:76:0e:51:04:5c:6b: 50:b5:2c:25:6f:2d:e7:c7:e7:16:21:99:f4:49:30: 94:a2:71:cc:de:48:aa:99:ff:35:cd:f7:22:ff:f2: a7:4b:c3:bc:4c:6e:79:aa:f8:04:d1:a8:d7:0d:fe: 0d:cd:d1:de:ab:18:b9:d9:c4:0d:a9:14:d7:4c:07: 92:4a:3c:b4:9e:8b:37:f9:b9:30:9a:07:94:26:f4: a3:23:6d:8a:cd:a3:f3:0d:44:b6:65:ba:d3:2b:82: bf:ca:e4:22:bf:6f:6f:57:5b:2d:76:93:b8:91:2f: 7c:1c:b1:86:1f:bb:d2:a7:14:54:f7:9e:e4:8c:78: 63:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FE:0C:9E:8A:F3:EE:57:7A:56:E3:31:8E:09:FF:4F:31:92:90:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bce0494a-ea55-37d5-890f-f7e08109514e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e1:8f:3c:f7:f5:2c:6d:d4:35:fb:c7:75:25:34:9c:df:bb: 1e:55:f2:4b:d2:4f:26:21:c6:15:26:4b:58:1a:b3:ef:46:84: 5b:a0:2c:13:0a:dd:0c:3f:74:8a:49:56:bf:43:8f:d1:85:a7: d7:73:1e:8e:f5:e8:70:c0:13:b2:32:67:60:bb:14:b2:9e:99: 0b:95:d5:eb:7e:1a:2d:57:e4:bd:f7:9c:1a:fe:9d:38:72:e6: 6b:68:3b:0b:84:3d:ea:89:52:57:b3:17:90:78:7c:e7:17:53: 27:77:41:08:2c:64:cb:37:74:fb:ec:0c:ca:9b:4b:67:5d:48: 73:01:8c:b8:77:4f:6f:4d:c9:7c:14:42:b4:c9:07:b8:9c:77: de:7d:47:9d:03:1a:85:e0:1d:ef:87:a8:57:66:d3:a4:71:6b: d2:67:c2:e3:4a:8c:47:ed:7e:da:15:8a:82:ff:9a:a8:6b:36: a9:40:0f:ff:e4:cd:f5:fe:13:e6:4e:66:b4:fb:e3:e0:9e:84: af:89:2f:15:31:46:aa:ed:b9:fc:d2:c0:a4:53:e5:94:06:98: 9a:73:76:d8:83:3b:d7:ba:35:45:77:7e:09:26:71:63:ae:b5: 9d:87:2a:41:96:96:92:5f:89:a2:ad:4c:1b:0c:97:b5:b7:6f: 8b:82:2b:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K720/P36CGI8t40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZTc3ZTgzMDctNmJmMi00ZWMyLWExNGQtNzkzODBiOTEwZDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtic7j2GS1Wrux9Twmp8qWKG/8Ffqo7uWv3Nk TH0IUqtAnSlG8aLqJnML6WhkCdfq5O9pLFPp2An4CYySWBGlk4J88ZwHFLt9LNlI pqj7ohciTJDoQlwXq0s8yWCrmsDeMS/gHCq3McHXSssXF2GAmeiX9TIWo9Wk6zHF lcDSFXB2DlEEXGtQtSwlby3nx+cWIZn0STCUonHM3kiqmf81zfci//KnS8O8TG55 qvgE0ajXDf4NzdHeqxi52cQNqRTXTAeSSjy0nos3+bkwmgeUJvSjI22KzaPzDUS2 ZbrTK4K/yuQiv29vV1stdpO4kS98HLGGH7vSpxRU957kjHhj6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn+DJ6K8+5XelbjMY4J/08xkpDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYmNlMDQ5NGEtZWE1NS0z N2Q1LTg5MGYtZjdlMDgxMDk1MTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILhjzz39Sxt1DX7x3UlNJzfux5V8kvSTyYhxhUmS1gas+9GhFugLBMK 3Qw/dIpJVr9Dj9GFp9dzHo716HDAE7IyZ2C7FLKemQuV1et+Gi1X5L33nBr+nThy 5mtoOwuEPeqJUlezF5B4fOcXUyd3QQgsZMs3dPvsDMqbS2ddSHMBjLh3T29NyXwU QrTJB7icd959R50DGoXgHe+HqFdm06Rxa9JnwuNKjEftftoVioL/mqhrNqlAD//k zfX+E+ZOZrT74+CehK+JLxUxRqrtufzSwKRT5ZQGmJpzdtiDO9e6NUV3fgkmcWOu tZ2HKkGWlpJfiaKtTBsMl7W3b4uCK1I= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:51 2026 by rpki-client