$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ced08657-3eb3-3ad7-a7fc-e9058c5a7521.roa File: ced08657-3eb3-3ad7-a7fc-e9058c5a7521.roa (raw, json) Hash identifier: CaCN+WztILtEO0J1GHMdy0OyF4/FRWBiRp+jWyZvvPY= Subject key identifier: 98:8A:D2:43:51:4C:A3:58:75:43:8E:00:68:75:00:8C:D8:2E:CF:E9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E779A28390D6DF54C1FD14E98 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ced08657-3eb3-3ad7-a7fc-e9058c5a7521.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 8069 IP address blocks: 20.153.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:28:39:0d:6d:f5:4c:1f:d1:4e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=866ce71f-0ef8-4824-8264-34ae168fc7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:73:32:60:7c:a8:51:57:25:23:66:ff:5b: 6e:9a:39:87:f1:cb:d7:58:ce:9f:75:5c:c1:78:14: 2e:34:8c:8d:dc:bf:38:f1:90:d0:39:b2:8d:eb:ac: 2b:d0:42:9c:87:c3:ba:67:9f:32:62:62:26:4e:13: 2f:d4:13:7d:e9:c5:d0:82:37:aa:09:70:3e:53:1a: fb:82:ae:40:92:5a:e9:59:05:68:f7:d9:44:c0:74: f4:43:74:a4:dc:59:f8:8c:a1:52:53:3b:aa:b5:91: b4:09:e8:35:d6:88:ee:b4:a9:ab:c4:fb:21:3b:fc: 45:22:2b:49:94:2b:f5:d6:82:5d:a1:a4:63:cd:25: 73:d3:2b:fe:c2:08:15:c7:8a:4c:15:b7:77:bc:ba: 55:85:dd:64:c6:1e:bf:1f:48:95:69:3a:36:31:92: a0:71:9f:c1:48:38:7e:a1:36:c7:9f:1b:54:60:d3: 06:6a:f3:44:8c:be:cd:61:5f:b5:6c:23:40:41:77: 14:b2:1e:8f:71:27:00:20:0a:45:1c:20:bb:8a:a5: 2f:9b:9f:84:60:f6:a4:a5:d8:64:29:3a:53:6b:a6: e6:91:85:56:ba:8d:bb:fc:98:b5:21:14:89:79:d5: 31:78:da:80:c8:8f:fd:33:45:a4:c8:f2:2b:5d:7e: aa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8A:D2:43:51:4C:A3:58:75:43:8E:00:68:75:00:8C:D8:2E:CF:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ced08657-3eb3-3ad7-a7fc-e9058c5a7521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a5:0b:70:96:50:43:dd:02:a1:44:25:22:94:55:ed:0c:a0: f4:9b:94:c2:36:7c:3c:f7:63:5c:d3:00:f6:87:77:fe:8e:8a: fc:4b:f8:b1:c5:cd:56:e1:ce:20:12:46:b1:0d:50:dd:93:e7: 15:a2:3c:fd:0f:0f:5b:17:26:ea:67:e3:08:b7:a6:5a:58:b0: 88:e9:3b:ff:f6:ea:3e:b5:aa:bb:5f:f9:04:a2:22:3c:b3:3f: c1:28:cf:c4:74:94:a4:9a:0b:be:44:04:d9:c5:9b:f3:3a:e8: 39:c5:35:db:7f:54:e5:fc:37:c8:0d:98:4b:a8:84:b7:61:26: f4:a8:fc:68:62:2c:9b:9e:7d:f1:23:df:83:e9:49:ce:c5:40: 71:e3:76:15:cc:f8:29:74:16:52:b8:d3:f5:1b:17:9e:bb:b8: fb:a3:21:c5:5e:d7:c6:db:42:2d:38:71:86:a2:c0:87:24:46: 3d:c8:d4:92:fb:e1:b3:51:85:bb:77:9c:12:69:31:78:f0:63: fd:24:57:82:17:98:de:2d:ed:4e:46:56:f8:d5:61:c1:70:28: f1:22:6c:62:47:8e:e0:88:05:f3:7e:99:4d:1f:2b:d4:9b:74: 36:37:d8:fa:92:0d:69:17:d1:4b:54:04:58:aa:d1:84:e2:46: af:22:51:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53mig5DW31TB/RTpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk ODY2Y2U3MWYtMGVmOC00ODI0LTgyNjQtMzRhZTE2OGZjN2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm9zMmB8qFFXJSNm/1tumjmH8cvXWM6fdVzB eBQuNIyN3L848ZDQObKN66wr0EKch8O6Z58yYmImThMv1BN96cXQgjeqCXA+Uxr7 gq5AklrpWQVo99lEwHT0Q3Sk3Fn4jKFSUzuqtZG0Ceg11ojutKmrxPshO/xFIitJ lCv11oJdoaRjzSVz0yv+wggVx4pMFbd3vLpVhd1kxh6/H0iVaTo2MZKgcZ/BSDh+ oTbHnxtUYNMGavNEjL7NYV+1bCNAQXcUsh6PcScAIApFHCC7iqUvm5+EYPakpdhk KTpTa6bmkYVWuo27/Ji1IRSJedUxeNqAyI/9M0WkyPIrXX6qYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiK0kNRTKNYdUOOAGh1AIzYLs/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2VkMDg2NTctM2ViMy0z YWQ3LWE3ZmMtZTkwNThjNWE3NTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmlC3CWUEPdAqFEJSKUVe0MoPSblMI2fDz3Y1zTAPaHd/6OivxL+LHF zVbhziASRrENUN2T5xWiPP0PD1sXJupn4wi3plpYsIjpO//26j61qrtf+QSiIjyz P8Eoz8R0lKSaC75EBNnFm/M66DnFNdt/VOX8N8gNmEuohLdhJvSo/GhiLJueffEj 34PpSc7FQHHjdhXM+Cl0FlK40/UbF567uPujIcVe18bbQi04cYaiwIckRj3I1JL7 4bNRhbt3nBJpMXjwY/0kV4IXmN4t7U5GVvjVYcFwKPEibGJHjuCIBfN+mU0fK9Sb dDY32PqSDWkX0UtUBFiq0YTiRq8iUbc= -----END CERTIFICATE-----Generated at Tue Jul 21 21:05:54 2026 by rpki-client