$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e181be4e-3fdd-3e66-8cb6-88a2ad3b3294.roa File: e181be4e-3fdd-3e66-8cb6-88a2ad3b3294.roa (raw, json) Hash identifier: esUMTA8cdcFLjTOKujStpfRBBrf0+I5MF2nOlRzSDmA= Subject key identifier: 1D:DA:C9:3C:04:15:0B:2C:29:21:0A:19:E5:45:BB:5C:1B:10:D9:81 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E4559FFA02056118998CABB00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e181be4e-3fdd-3e66-8cb6-88a2ad3b3294.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.153.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:ff:a0:20:56:11:89:98:ca:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=bcfb6806-503d-4533-9dc7-1fb865606f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:76:4a:47:11:85:e9:f4:d4:c2:ae:f9:38:1d: 5e:e4:f2:a5:64:cc:02:a4:e7:41:29:8e:40:a3:10: 98:97:50:82:ca:ae:28:cf:0d:1d:0d:a4:2b:c4:4f: 51:78:42:e6:12:0e:e8:72:b7:69:88:c2:b8:18:27: 8b:aa:59:df:18:48:e1:eb:cd:eb:10:42:fe:d0:ea: a0:ee:62:71:bb:76:46:e0:57:40:5e:ed:80:87:b0: d9:32:10:57:56:c4:c0:68:2c:aa:cb:dd:a7:23:bd: f5:48:0c:58:c9:65:a4:a8:25:6a:d6:c2:43:3c:76: 85:2e:e5:1f:d0:34:36:a0:fe:71:43:61:92:ae:aa: 44:66:73:3f:f7:88:64:50:5d:31:a2:1b:64:6b:4b: 40:4e:4e:2e:d5:73:0f:9e:bb:3e:a3:ad:6c:11:29: be:63:fa:77:f3:3d:02:b7:4d:6c:41:69:fc:c1:5e: 08:1e:66:70:0e:25:28:f3:e7:c9:26:b3:3a:2c:af: cf:5e:5e:67:69:bb:97:c1:ec:ac:c5:1b:d5:5a:50: 2e:e2:96:0d:d8:95:5e:8e:ff:bb:4d:63:33:e4:b4: 62:e9:c8:e8:87:a7:bd:4c:23:73:12:38:d6:9a:3c: d0:c8:b2:9f:f5:72:7d:b7:a9:f5:65:f3:a7:d7:a5: 73:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DA:C9:3C:04:15:0B:2C:29:21:0A:19:E5:45:BB:5C:1B:10:D9:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e181be4e-3fdd-3e66-8cb6-88a2ad3b3294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:37:5c:4b:ab:6b:27:1e:95:8f:9a:1d:62:52:03:df:e8:79: c3:f9:8b:6d:31:71:fc:8c:bc:f8:33:26:ef:87:b9:5d:bb:f0: 17:6b:ae:2d:ce:88:6c:48:0f:e5:53:ff:13:8d:e2:87:fd:7b: 0b:49:e3:e1:35:8f:af:24:b4:bd:c1:22:b2:77:67:a1:07:0c: 76:be:32:9d:cd:98:1e:eb:fe:50:64:c5:4a:1d:8e:81:c2:8a: 7c:31:e5:86:ea:67:39:97:f8:04:ae:a7:4a:c8:94:c9:ce:7e: 82:c1:37:65:5f:c8:f7:0f:41:f8:21:74:23:1f:8c:a3:d0:9d: f6:9a:59:cd:34:95:c3:a7:6d:be:07:a4:0c:83:57:9b:59:16: 6d:f2:24:8f:cf:f1:e8:e4:1c:71:94:51:54:77:b0:dd:41:60: 2e:65:62:ab:af:f4:2d:64:42:4f:da:19:b7:62:99:df:4d:54: 0e:ee:e3:a8:ac:fc:dd:66:b7:4f:fe:b7:59:5f:73:9d:95:94: 3c:a0:1c:ba:76:a0:62:99:d6:8f:fe:b3:b2:b6:eb:aa:b6:8a: b5:12:45:f9:e8:21:81:be:16:1b:1f:c9:21:86:d0:71:b6:4b: aa:fd:c0:49:9d:ab:4a:6a:a3:fd:79:e6:d9:93:3c:6c:3b:83: a5:d8:bc:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWf+gIFYRiZjKuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk YmNmYjY4MDYtNTAzZC00NTMzLTlkYzctMWZiODY1NjA2ZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHZKRxGF6fTUwq75OB1e5PKlZMwCpOdBKY5A oxCYl1CCyq4ozw0dDaQrxE9ReELmEg7ocrdpiMK4GCeLqlnfGEjh683rEEL+0Oqg 7mJxu3ZG4FdAXu2Ah7DZMhBXVsTAaCyqy92nI731SAxYyWWkqCVq1sJDPHaFLuUf 0DQ2oP5xQ2GSrqpEZnM/94hkUF0xohtka0tATk4u1XMPnrs+o61sESm+Y/p38z0C t01sQWn8wV4IHmZwDiUo8+fJJrM6LK/PXl5nabuXweysxRvVWlAu4pYN2JVejv+7 TWMz5LRi6cjoh6e9TCNzEjjWmjzQyLKf9XJ9t6n1ZfOn16Vz1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3ayTwEFQssKSEKGeVFu1wbENmBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTE4MWJlNGUtM2ZkZC0z ZTY2LThjYjYtODhhMmFkM2IzMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFJmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEc3XEuraycelY+aHWJSA9/oecP5i20xcfyMvPgzJu+HuV278Bdrri3O iGxID+VT/xON4of9ewtJ4+E1j68ktL3BIrJ3Z6EHDHa+Mp3NmB7r/lBkxUodjoHC inwx5YbqZzmX+ASup0rIlMnOfoLBN2VfyPcPQfghdCMfjKPQnfaaWc00lcOnbb4H pAyDV5tZFm3yJI/P8ejkHHGUUVR3sN1BYC5lYquv9C1kQk/aGbdimd9NVA7u46is /N1mt0/+t1lfc52VlDygHLp2oGKZ1o/+s7K266q2irUSRfnoIYG+FhsfySGG0HG2 S6r9wEmdq0pqo/155tmTPGw7g6XYvDk= -----END CERTIFICATE-----Generated at Tue Jul 21 21:05:48 2026 by rpki-client