$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e19c29c0-9b90-32c5-8f64-85fb3a59f907.roa File: e19c29c0-9b90-32c5-8f64-85fb3a59f907.roa (raw, json) Hash identifier: rriO2MqSCL89Sn+8//FPP45Lpvh/835bVKWZ4n3kv/M= Subject key identifier: 3E:18:34:8C:6E:5F:06:18:82:2B:03:DD:BE:44:2D:B3:13:B6:7F:20 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E779A29E80E9F8E7370BA5E80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e19c29c0-9b90-32c5-8f64-85fb3a59f907.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 8069 IP address blocks: 20.153.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:29:e8:0e:9f:8e:73:70:ba:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=87b418f6-335e-4371-93b9-14cc3cc6d154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:39:ca:ff:2c:31:eb:6c:83:d5:ea:db:ce:c4: 91:1b:3d:45:c0:de:a0:8a:6d:0b:14:17:8d:8b:24: a2:1f:15:66:e8:95:92:87:fa:89:67:bc:ae:56:b0: 60:57:ed:bf:70:a5:1e:28:2a:f5:b4:01:f9:3c:65: cd:78:54:40:10:c2:6c:30:a9:83:79:c4:f2:22:87: f6:76:50:d5:04:14:f7:5b:25:38:d3:e0:40:ec:b3: 86:46:4f:61:9b:7d:2f:3d:ee:2b:0c:84:2b:3b:d0: 04:ee:99:36:f0:25:5a:48:9f:7f:4f:e9:6e:b8:9c: 10:cb:2d:ab:9a:57:3c:67:41:60:5f:2b:10:de:6d: 20:47:3a:1e:db:74:cc:d3:de:41:ef:ff:40:8d:04: f7:d1:1d:04:9a:37:b7:fd:72:e8:52:10:d2:93:b2: ed:1e:7f:43:59:67:ec:50:8b:18:66:36:79:01:be: 2f:b7:cf:ea:d3:e1:f7:86:96:00:77:25:0b:de:cf: e1:ae:be:0b:a5:66:9a:90:95:c1:a4:dc:0d:e7:cd: 57:0f:a3:fa:45:da:16:50:42:67:d4:99:6d:43:72: 1f:7e:ec:8c:00:aa:4e:8b:65:78:14:c0:c0:33:9e: 23:81:18:13:c7:41:5b:0b:26:ed:dd:7c:ce:4a:a8: 52:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:18:34:8C:6E:5F:06:18:82:2B:03:DD:BE:44:2D:B3:13:B6:7F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e19c29c0-9b90-32c5-8f64-85fb3a59f907.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:73:72:a9:ad:c4:f4:e6:85:ea:d5:af:fa:ba:48:48:f6:d1: 89:e8:7a:c7:c4:cb:35:f7:e2:e2:4c:25:69:5d:2e:a4:ff:0c: 3e:0a:84:3e:84:be:14:20:cb:59:c0:11:4a:0a:4c:78:a1:97: 0e:58:e6:4b:27:a6:69:ff:05:f8:b6:df:dd:ef:1b:49:fb:87: 67:f9:3e:78:38:10:42:9c:cf:4a:ac:eb:96:81:3e:82:86:29: 7d:21:ca:ba:08:4f:a7:e5:9b:4e:fb:98:34:99:38:27:4e:91: df:d5:53:79:4b:71:47:93:11:77:b0:4f:c9:0a:94:79:8e:0c: 35:5b:ab:21:01:65:15:09:41:36:bc:73:7e:a5:b1:78:cf:38: 2d:a1:c2:95:3b:85:45:70:a7:92:dd:48:d6:60:5b:22:0c:38: f9:7a:15:8e:0a:99:a9:0e:38:86:36:f5:58:d4:be:2b:5e:ff: 8e:fb:68:45:8a:c4:ae:29:f4:9f:fa:19:0f:13:8f:b2:64:c6: a4:8f:da:50:36:15:c3:25:cc:13:7a:c4:11:91:07:66:18:5f: b8:f7:e7:8f:e9:b1:d6:64:b4:77:97:91:47:f2:76:30:6e:8d: 12:c6:e0:a3:aa:d8:74:29:59:7d:f3:24:c2:bf:9d:6c:fc:52: 3b:4b:6f:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53minoDp+Oc3C6XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk ODdiNDE4ZjYtMzM1ZS00MzcxLTkzYjktMTRjYzNjYzZkMTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvznK/ywx62yD1erbzsSRGz1FwN6gim0LFBeN iySiHxVm6JWSh/qJZ7yuVrBgV+2/cKUeKCr1tAH5PGXNeFRAEMJsMKmDecTyIof2 dlDVBBT3WyU40+BA7LOGRk9hm30vPe4rDIQrO9AE7pk28CVaSJ9/T+luuJwQyy2r mlc8Z0FgXysQ3m0gRzoe23TM095B7/9AjQT30R0Emje3/XLoUhDSk7LtHn9DWWfs UIsYZjZ5Ab4vt8/q0+H3hpYAdyUL3s/hrr4LpWaakJXBpNwN581XD6P6RdoWUEJn 1JltQ3IffuyMAKpOi2V4FMDAM54jgRgTx0FbCybt3XzOSqhSgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4YNIxuXwYYgisD3b5ELbMTtn8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTE5YzI5YzAtOWI5MC0z MmM1LThmNjQtODVmYjNhNTlmOTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNzcqmtxPTmherVr/q6SEj20YnoesfEyzX34uJMJWldLqT/DD4KhD6E vhQgy1nAEUoKTHihlw5Y5ksnpmn/Bfi2393vG0n7h2f5Png4EEKcz0qs65aBPoKG KX0hyroIT6flm077mDSZOCdOkd/VU3lLcUeTEXewT8kKlHmODDVbqyEBZRUJQTa8 c36lsXjPOC2hwpU7hUVwp5LdSNZgWyIMOPl6FY4KmakOOIY29VjUvite/477aEWK xK4p9J/6GQ8Tj7JkxqSP2lA2FcMlzBN6xBGRB2YYX7j354/psdZktHeXkUfydjBu jRLG4KOq2HQpWX3zJMK/nWz8UjtLb+c= -----END CERTIFICATE-----Generated at Tue Jul 21 21:07:20 2026 by rpki-client