$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa File: c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa (raw, json) Hash identifier: X5Z79G1/2Do5OxmdwGdZSZUksYw32kNeTMQbJcBLwJw= Subject key identifier: B9:80:4F:92:96:54:B1:7F:9D:19:7B:4C:2C:01:8F:42:3A:76:E0:00 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E779A29397AA7472FF878A900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 8069 IP address blocks: 20.153.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:29:39:7a:a7:47:2f:f8:78:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=5c57221b-a555-4328-8359-26d04e409ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:19:c7:7b:db:ae:ce:ab:1e:e7:30:1c:de: 2b:1e:f2:11:68:9f:59:c3:23:3b:e1:a2:9b:c0:a0: 99:17:35:68:6c:0c:cc:93:19:e3:ab:5a:ed:a8:db: 04:c6:8f:21:5c:86:fb:d4:dc:fc:35:ec:0a:d6:55: 9a:74:6c:96:34:ca:63:22:b9:d0:4b:fb:8c:2f:d9: 48:4b:8d:7c:3b:c2:c6:52:06:03:c8:f8:ce:c9:5b: bc:f8:1f:c4:b9:ab:11:42:57:82:93:57:bf:f0:7d: 74:f3:2e:5f:2b:f5:4e:cc:10:8e:77:2f:a2:d2:d2: eb:6e:9d:37:40:85:b7:58:75:36:31:c0:cb:d5:e3: 01:2c:a6:36:6d:27:89:d2:6d:9b:f1:2e:9a:7c:e3: fb:7f:26:34:fa:91:b4:2b:ff:80:e0:2e:3a:7c:fc: 3c:dd:84:34:39:d1:de:8a:ee:97:6b:1a:b8:ac:78: 78:f8:b1:69:e7:be:2a:4c:7c:60:de:54:d8:da:73: 87:d7:78:79:2b:c3:c3:9e:e7:9e:1f:86:4c:87:26: 12:71:1e:8c:83:f2:34:aa:c5:1e:b3:be:2d:47:91: e8:cb:64:4f:2b:c0:2d:c5:8c:48:7c:25:7e:8f:2c: 59:8e:71:f0:38:8c:17:16:af:e7:ff:b4:cb:32:5a: 1b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:80:4F:92:96:54:B1:7F:9D:19:7B:4C:2C:01:8F:42:3A:76:E0:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b4:f3:69:f5:37:88:3d:ff:36:87:47:ab:9b:a7:2a:2f:3e: f6:28:cc:ab:93:69:b3:d7:f4:48:bf:09:fa:ab:ff:e6:37:24: 10:18:83:d5:43:41:f5:cb:eb:b0:48:b7:7b:35:5e:13:8e:98: 14:78:92:55:84:90:b8:aa:30:fe:b5:bd:07:38:bb:63:db:76: 33:cf:85:9b:57:50:39:a9:cc:41:08:98:16:60:13:88:c7:a5: 4f:5d:b4:90:65:4c:b5:30:89:72:44:f5:c6:9a:72:ec:b9:0f: 6a:58:79:56:8d:bf:b8:41:77:fb:f6:37:c1:dd:ee:4c:f8:01: 69:1b:3a:d4:14:7c:7f:d2:10:b9:3c:4d:57:e3:3b:54:92:c7: 63:94:45:a0:df:ab:c4:3d:46:21:c9:1a:15:9a:7a:d1:26:e9: a0:99:df:3e:12:40:61:a2:45:8b:ae:26:59:a6:7b:94:58:fa: 8b:7a:74:ac:d6:26:c3:6f:2c:d9:8b:87:70:d3:c3:ea:87:84: e6:e5:f9:c5:92:bf:52:ec:69:30:fe:65:3f:b8:18:d7:6a:bd: 2f:bf:9b:7e:ab:87:cb:d1:04:80:97:c6:32:f1:dc:87:e7:3c: 28:25:df:e3:4e:b5:b3:fb:3c:ef:fc:01:ed:16:0a:c2:a3:3f: 41:ed:8b:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53mik5eqdHL/h4qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk NWM1NzIyMWItYTU1NS00MzI4LTgzNTktMjZkMDRlNDA5Y2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zkZx3vbrs6rHucwHN4rHvIRaJ9ZwyM74aKb wKCZFzVobAzMkxnjq1rtqNsExo8hXIb71Nz8NewK1lWadGyWNMpjIrnQS/uML9lI S418O8LGUgYDyPjOyVu8+B/EuasRQleCk1e/8H108y5fK/VOzBCOdy+i0tLrbp03 QIW3WHU2McDL1eMBLKY2bSeJ0m2b8S6afOP7fyY0+pG0K/+A4C46fPw83YQ0OdHe iu6Xaxq4rHh4+LFp574qTHxg3lTY2nOH13h5K8PDnueeH4ZMhyYScR6Mg/I0qsUe s74tR5Hoy2RPK8AtxYxIfCV+jyxZjnHwOIwXFq/n/7TLMlobWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmAT5KWVLF/nRl7TCwBj0I6duAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzRjYzMyN2EtMTcyYS0z Yjc5LWFhMDgtZGQ1ZjJmZGQzZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi082n1N4g9/zaHR6ubpyovPvYozKuTabPX9Ei/Cfqr/+Y3JBAYg9VD QfXL67BIt3s1XhOOmBR4klWEkLiqMP61vQc4u2PbdjPPhZtXUDmpzEEImBZgE4jH pU9dtJBlTLUwiXJE9caacuy5D2pYeVaNv7hBd/v2N8Hd7kz4AWkbOtQUfH/SELk8 TVfjO1SSx2OURaDfq8Q9RiHJGhWaetEm6aCZ3z4SQGGiRYuuJlmme5RY+ot6dKzW JsNvLNmLh3DTw+qHhObl+cWSv1LsaTD+ZT+4GNdqvS+/m36rh8vRBICXxjLx3Ifn PCgl3+NOtbP7PO/8Ae0WCsKjP0Hti1M= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:43 2026 by rpki-client