$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f677773a-b10a-380d-a881-4cc73b5bed13.roa File: f677773a-b10a-380d-a881-4cc73b5bed13.roa (raw, json) Hash identifier: mh4wYYCyp4G5rMTHN/uV9NIYwGN7YF+/f/Lo4YCcrEw= Subject key identifier: BE:35:C2:0C:EC:93:47:12:B5:72:7C:F6:E9:01:74:64:05:88:4E:18 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E86F5091F6E142E466FF03300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f677773a-b10a-380d-a881-4cc73b5bed13.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 8069 IP address blocks: 20.153.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:09:1f:6e:14:2e:46:6f:f0:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=880f492e-8ba5-48da-80f0-51356f80a8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:32:2f:e2:ae:e0:e8:a2:7d:a9:2c:7d:48:52: 13:f0:6d:02:39:c6:83:07:d6:78:b8:fc:69:2e:70: 2d:3c:41:65:6b:f5:91:76:27:0b:5d:4b:9f:b7:0e: de:fb:87:3a:cf:6b:a5:c3:bb:5b:b0:28:d3:f6:40: dd:c8:9b:47:36:b6:d7:a4:b0:45:c4:5c:90:f3:4f: 5d:9e:4a:cf:a4:8a:b9:6a:6d:e8:71:d7:b6:6d:5c: 63:f8:5f:75:0c:89:c8:ae:43:6f:00:86:c2:72:28: 3e:9e:bf:f8:01:ab:2a:cc:f4:3a:2b:d1:7a:e7:b8: 5a:ed:94:3b:d4:3f:8a:ad:e5:72:0d:ca:8c:6b:1d: 52:94:6e:42:7f:43:cd:1f:fe:27:41:12:0d:ee:97: 07:cf:59:1b:d1:fc:5d:b3:8e:24:f9:44:9b:22:be: a0:2f:46:c9:72:25:0e:99:2d:b6:09:8f:33:74:c1: 1a:ec:ab:fd:33:a7:07:99:87:a9:20:51:9e:23:c1: 00:12:5a:6e:19:af:f9:9b:5e:be:1c:e3:ff:b8:cc: 14:af:b1:5c:ac:d7:39:68:e4:5f:50:c9:2d:12:30: 83:13:36:26:cf:be:e0:64:2d:ff:c8:ff:fb:8e:21: a4:d0:8e:30:c5:98:e7:0a:48:07:7a:68:a6:94:78: bf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:35:C2:0C:EC:93:47:12:B5:72:7C:F6:E9:01:74:64:05:88:4E:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f677773a-b10a-380d-a881-4cc73b5bed13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d6:6e:d7:e7:54:b4:77:e8:4c:84:82:a2:8d:0e:c0:8b:9f: 02:3a:eb:63:2b:19:23:a4:0e:16:4d:91:0d:10:02:3e:a9:5a: f0:14:7e:f4:6e:e5:88:c5:40:a1:6f:77:f8:4b:f9:d7:a3:9c: 02:54:ae:1e:7c:30:fd:00:67:ac:f3:a4:84:75:0e:aa:05:36: 18:42:0b:bc:7f:a3:ec:17:a4:74:09:dc:c5:cf:e1:61:62:e1: 74:38:79:a4:66:ff:f9:f6:d4:bc:d1:c4:f2:41:2b:7e:00:d9: 24:45:17:83:5c:31:cd:23:86:83:81:3b:16:e7:c8:22:19:98: 73:04:b6:fa:99:75:11:65:bc:59:41:e5:a2:2d:23:79:03:d6: 09:60:e1:6c:fd:4e:58:37:b8:7d:ae:21:7f:7d:fd:0f:6a:d4: 40:88:3b:55:be:b6:45:4e:d8:46:3b:8b:24:44:41:66:1e:b4: a1:be:19:60:36:cc:68:68:9f:44:17:2b:bb:8b:0e:c0:17:1d: 9a:f2:cf:cf:b0:a5:d4:bd:8a:e6:c3:c9:be:b9:bc:09:ed:81: d3:c4:f6:b6:3f:ca:63:b7:74:b1:22:d4:c9:7c:f7:4d:e2:d5: bd:ef:77:ce:2f:29:17:ec:af:b2:78:f5:e5:45:7e:10:2c:17: b1:4b:81:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9QkfbhQuRm/wMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk ODgwZjQ5MmUtOGJhNS00OGRhLTgwZjAtNTEzNTZmODBhOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjIv4q7g6KJ9qSx9SFIT8G0COcaDB9Z4uPxp LnAtPEFla/WRdicLXUuftw7e+4c6z2ulw7tbsCjT9kDdyJtHNrbXpLBFxFyQ809d nkrPpIq5am3ocde2bVxj+F91DInIrkNvAIbCcig+nr/4AasqzPQ6K9F657ha7ZQ7 1D+KreVyDcqMax1SlG5Cf0PNH/4nQRIN7pcHz1kb0fxds44k+USbIr6gL0bJciUO mS22CY8zdMEa7Kv9M6cHmYepIFGeI8EAElpuGa/5m16+HOP/uMwUr7FcrNc5aORf UMktEjCDEzYmz77gZC3/yP/7jiGk0I4wxZjnCkgHemimlHi/DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL41wgzsk0cStXJ89ukBdGQFiE4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjY3Nzc3M2EtYjEwYS0z ODBkLWE4ODEtNGNjNzNiNWJlZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJnjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADWbtfnVLR36EyEgqKNDsCLnwI662MrGSOkDhZNkQ0QAj6pWvAUfvRu 5YjFQKFvd/hL+dejnAJUrh58MP0AZ6zzpIR1DqoFNhhCC7x/o+wXpHQJ3MXP4WFi 4XQ4eaRm//n21LzRxPJBK34A2SRFF4NcMc0jhoOBOxbnyCIZmHMEtvqZdRFlvFlB 5aItI3kD1glg4Wz9Tlg3uH2uIX99/Q9q1ECIO1W+tkVO2EY7iyREQWYetKG+GWA2 zGhon0QXK7uLDsAXHZryz8+wpdS9iubDyb65vAntgdPE9rY/ymO3dLEi1Ml8903i 1b3vd84vKRfsr7J49eVFfhAsF7FLgUY= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:18 2026 by rpki-client