$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dad0d392-2c7c-326e-85d5-1901cea0d1e1.roa File: dad0d392-2c7c-326e-85d5-1901cea0d1e1.roa (raw, json) Hash identifier: dBv5O4pEbfokVAnmQI+ZTLLqWhaVhXh8bFmMBllNJEo= Subject key identifier: 38:52:EB:DC:F1:34:EA:63:D2:5E:BD:8A:4A:22:A6:7A:1D:40:B9:E9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E4559E7F0BA3D373295345280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dad0d392-2c7c-326e-85d5-1901cea0d1e1.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.153.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:e7:f0:ba:3d:37:32:95:34:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=3a21b5b3-3de5-4aae-9478-98c47b35f8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cb:8e:d9:45:31:59:71:c8:06:4f:7d:d7:6b: ca:87:6d:a7:f0:22:eb:c8:b3:ed:5c:23:75:ac:71: 6d:a4:b9:69:af:15:d4:1d:ee:8f:95:0d:36:42:30: b3:ef:e9:08:4f:09:b5:a6:82:62:70:98:3d:6a:87: 8b:20:04:de:08:00:1a:9b:26:bb:1e:00:16:07:07: 41:44:7b:c5:a0:87:a5:52:ad:27:66:e9:84:98:5f: 96:56:7f:27:73:31:ae:84:41:4a:c2:2c:12:ce:c9: 40:61:0d:fa:2e:08:61:a9:87:37:cd:ab:b1:e7:8f: 70:e4:e5:20:81:0f:e3:00:73:73:cf:53:4f:ad:c6: 50:e6:01:df:19:6c:65:57:de:d2:03:0b:c0:cf:b2: cd:39:ce:ad:bf:93:68:e0:82:77:4f:04:f1:7e:3e: ac:53:cc:bd:d5:db:c8:83:09:42:08:52:09:7f:52: d8:b6:5d:8f:77:25:58:37:78:e9:79:3e:b4:08:38: 84:07:f3:b7:33:9b:01:64:22:06:ae:2d:c3:24:ba: 80:75:77:ac:26:4f:f6:86:b4:1d:05:77:91:43:d9: e3:f3:d5:5b:0c:0b:7f:23:cd:a9:16:07:fc:bd:17: 80:33:03:02:1d:8c:1c:51:9f:d4:cb:68:86:cb:db: 48:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:52:EB:DC:F1:34:EA:63:D2:5E:BD:8A:4A:22:A6:7A:1D:40:B9:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dad0d392-2c7c-326e-85d5-1901cea0d1e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b4:02:e2:46:5d:19:ae:32:71:66:98:84:f4:2e:2f:a4:b0: 74:38:8d:59:1b:80:cb:e5:5a:54:ff:8b:42:a8:de:fe:5a:dd: c9:e5:05:06:fb:77:d5:4b:65:b0:5c:6e:2d:9b:65:3a:86:58: 0f:14:18:45:8a:38:ba:00:06:e2:b6:6d:47:6d:b0:a2:20:59: 0e:bd:0e:86:a1:25:45:d5:36:99:c8:34:46:31:8b:43:0b:fa: 37:55:0b:ec:11:b4:29:ff:e8:02:93:5f:39:0c:a2:c8:3c:ca: 20:3e:8e:5b:72:7e:1d:b1:3b:fa:de:cb:1b:83:02:43:bc:df: bc:06:32:7d:95:63:f1:54:12:23:d1:8d:1f:3e:af:45:85:0b: 94:f8:1a:3e:8b:cf:fc:8e:72:cd:7a:ab:16:2f:71:96:6e:07: ed:f4:f2:9c:0f:47:11:a4:89:38:7c:e6:35:da:a4:11:93:55: b3:c5:11:92:d8:8f:fd:5c:5b:41:e1:80:99:2c:4c:5a:23:7d: ea:f6:fd:42:8d:92:41:c8:41:eb:57:d8:2c:38:4e:28:56:0d: ef:54:8c:9a:56:83:0a:27:62:6e:09:86:92:9b:6c:53:60:aa: e8:bd:a2:91:00:b5:4c:c9:48:22:85:d6:ef:29:b7:c7:9d:be: 48:f2:24:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWefwuj03MpU0UoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk M2EyMWI1YjMtM2RlNS00YWFlLTk0NzgtOThjNDdiMzVmOGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8uO2UUxWXHIBk9912vKh22n8CLryLPtXCN1 rHFtpLlprxXUHe6PlQ02QjCz7+kITwm1poJicJg9aoeLIATeCAAamya7HgAWBwdB RHvFoIelUq0nZumEmF+WVn8nczGuhEFKwiwSzslAYQ36LghhqYc3zaux549w5OUg gQ/jAHNzz1NPrcZQ5gHfGWxlV97SAwvAz7LNOc6tv5No4IJ3TwTxfj6sU8y91dvI gwlCCFIJf1LYtl2PdyVYN3jpeT60CDiEB/O3M5sBZCIGri3DJLqAdXesJk/2hrQd BXeRQ9nj89VbDAt/I82pFgf8vReAMwMCHYwcUZ/Uy2iGy9tI2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhS69zxNOpj0l69ikoipnodQLnpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGFkMGQzOTItMmM3Yy0z MjZlLTg1ZDUtMTkwMWNlYTBkMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJm3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC0AuJGXRmuMnFmmIT0Li+ksHQ4jVkbgMvlWlT/i0Ko3v5a3cnlBQb7 d9VLZbBcbi2bZTqGWA8UGEWKOLoABuK2bUdtsKIgWQ69DoahJUXVNpnINEYxi0ML +jdVC+wRtCn/6AKTXzkMosg8yiA+jltyfh2xO/reyxuDAkO837wGMn2VY/FUEiPR jR8+r0WFC5T4Gj6Lz/yOcs16qxYvcZZuB+308pwPRxGkiTh85jXapBGTVbPFEZLY j/1cW0HhgJksTFojfer2/UKNkkHIQetX2Cw4TihWDe9UjJpWgwonYm4JhpKbbFNg qui9opEAtUzJSCKF1u8pt8edvkjyJJw= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:17 2026 by rpki-client