$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d72792fe-5daf-30c7-8173-737c0832e061.roa File: d72792fe-5daf-30c7-8173-737c0832e061.roa (raw, json) Hash identifier: /7yqTNly0bHc8eEnuKSIHnlglx25uMOtkJX3NYqNt50= Subject key identifier: EC:E8:89:D3:6F:F5:68:1F:B5:FB:C2:E7:E8:A5:C3:F4:EF:48:3F:68 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E4559FF0C2225E3F80015C500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d72792fe-5daf-30c7-8173-737c0832e061.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.153.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:ff:0c:22:25:e3:f8:00:15:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=d2bbb03a-0d8e-492b-bb25-cd77d2ae0db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4a:b7:cf:e0:7c:7b:2c:fe:45:13:13:0b:67: 06:aa:27:a7:a3:bd:1a:0f:9d:01:93:fb:1c:24:17: 13:96:c0:4a:08:69:35:53:6b:b3:0f:79:83:a2:b7: 3c:01:20:d7:84:08:68:70:91:6d:24:b8:64:08:6b: 9a:82:eb:cb:0a:69:30:10:42:47:b5:81:d5:82:3d: 2b:8f:91:ae:4b:e1:5c:e2:b2:bc:64:7e:cb:72:b7: eb:a9:1a:64:d3:db:c2:e5:23:91:8b:a4:17:56:c0: 8e:44:8d:23:d5:77:51:2a:94:8c:44:03:f0:84:93: 49:4c:91:ff:b0:8b:39:de:ce:15:17:56:1c:4b:fa: 28:58:52:ab:5b:a6:06:e1:eb:98:e1:80:f9:bd:5b: e4:b0:a7:69:f5:3a:6b:50:c2:a8:95:5e:0f:d1:a3: d0:21:0b:e9:60:e1:c9:b1:a6:11:b7:8a:b3:4a:6b: fc:a4:30:5c:c3:cd:aa:7d:5b:0a:cb:d6:29:dc:43: 3f:92:49:ac:45:d7:c4:28:25:b3:25:ce:48:18:d4: d9:6d:4e:2f:0c:eb:95:6b:6f:cb:44:45:18:87:5b: 0b:53:62:d6:6d:c4:b9:6c:6e:6c:9f:45:b1:1f:3e: c8:33:e8:4f:cb:97:e4:0f:43:9f:68:1a:ce:6f:f7: e1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E8:89:D3:6F:F5:68:1F:B5:FB:C2:E7:E8:A5:C3:F4:EF:48:3F:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d72792fe-5daf-30c7-8173-737c0832e061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a5:04:ed:e2:7f:91:05:4c:95:e9:29:32:fc:cc:0a:7c:10: 79:ac:89:eb:bf:f4:b7:5f:66:44:36:aa:1a:2c:84:82:19:3d: 3f:07:68:56:2d:ee:08:9f:c5:d2:e0:7b:5b:4a:63:ea:c0:e8: 82:ba:34:33:47:59:61:54:59:a6:53:0e:36:e8:36:3a:70:53: 9b:94:70:e7:14:93:e0:43:8b:91:fd:08:93:40:97:7c:8b:e8: 08:49:53:12:dd:a4:0a:eb:3d:63:93:0c:58:1b:c1:22:a1:39: 15:3b:8b:59:a5:fc:ed:5d:7d:5b:08:e4:93:97:4e:fd:e4:b4: c8:7d:a7:92:11:88:de:84:56:1e:8c:e6:75:fc:4a:92:1f:dd: ff:e6:5a:3b:0d:a6:78:fd:08:94:a6:aa:04:8d:ab:5e:c8:99: 41:a4:7b:98:1d:e0:0c:d4:cb:87:d2:b6:8e:c9:74:b8:0a:98: 08:a1:d0:de:68:de:a5:2a:c4:cf:e7:fb:73:df:39:2e:1a:3e: 12:93:d7:9c:74:0f:2d:96:8d:45:9a:07:06:e6:34:1b:94:fa: 43:0b:e6:0c:5e:01:43:33:c8:61:da:83:98:e7:9c:9a:e1:41: 21:0b:ea:be:48:c5:c8:61:e3:e8:31:8a:59:19:0a:e5:ab:f0: dc:dd:f4:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWf8MIiXj+AAVxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk ZDJiYmIwM2EtMGQ4ZS00OTJiLWJiMjUtY2Q3N2QyYWUwZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Eq3z+B8eyz+RRMTC2cGqieno70aD50Bk/sc JBcTlsBKCGk1U2uzD3mDorc8ASDXhAhocJFtJLhkCGuaguvLCmkwEEJHtYHVgj0r j5GuS+Fc4rK8ZH7LcrfrqRpk09vC5SORi6QXVsCORI0j1XdRKpSMRAPwhJNJTJH/ sIs53s4VF1YcS/ooWFKrW6YG4euY4YD5vVvksKdp9TprUMKolV4P0aPQIQvpYOHJ saYRt4qzSmv8pDBcw82qfVsKy9Yp3EM/kkmsRdfEKCWzJc5IGNTZbU4vDOuVa2/L REUYh1sLU2LWbcS5bG5sn0WxHz7IM+hPy5fkD0OfaBrOb/fhFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzoidNv9WgftfvC5+ilw/TvSD9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDcyNzkyZmUtNWRhZi0z MGM3LTgxNzMtNzM3YzA4MzJlMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSlBO3if5EFTJXpKTL8zAp8EHmsieu/9LdfZkQ2qhoshIIZPT8HaFYt 7gifxdLge1tKY+rA6IK6NDNHWWFUWaZTDjboNjpwU5uUcOcUk+BDi5H9CJNAl3yL 6AhJUxLdpArrPWOTDFgbwSKhORU7i1ml/O1dfVsI5JOXTv3ktMh9p5IRiN6EVh6M 5nX8SpIf3f/mWjsNpnj9CJSmqgSNq17ImUGke5gd4AzUy4fSto7JdLgKmAih0N5o 3qUqxM/n+3PfOS4aPhKT15x0Dy2WjUWaBwbmNBuU+kML5gxeAUMzyGHag5jnnJrh QSEL6r5Ixchh4+gxilkZCuWr8Nzd9L4= -----END CERTIFICATE-----Generated at Tue Jul 21 21:09:19 2026 by rpki-client