$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24803b2e-172b-3508-a3e4-a9a666ba5d61.roa File: 24803b2e-172b-3508-a3e4-a9a666ba5d61.roa (raw, json) Hash identifier: o1PonZppoeTa8pIERkQgLn7jiMdtl7h1X+XLCDLVWLE= Subject key identifier: D2:66:D8:4E:9B:95:43:48:5C:47:BC:71:C8:F2:45:00:BD:BF:B6:BD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EED51FD0752976BFACD4EAD00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24803b2e-172b-3508-a3e4-a9a666ba5d61.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:fd:07:52:97:6b:fa:cd:4e:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=7e950564-2090-4740-bd17-24cba38a0bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:56:97:4d:1c:14:1f:32:49:52:8d:2d:c8:15: cd:a5:80:49:03:b1:e4:53:c5:75:e7:a7:fb:e3:77: a1:64:d7:76:0e:2e:c6:12:76:bc:61:4f:ce:19:eb: 3d:7b:74:ae:c9:77:4a:16:6d:31:45:08:6d:62:5a: fd:eb:b6:cf:01:d9:ef:5a:07:da:98:0f:62:2f:c0: 1b:9b:e1:a5:39:ba:66:a5:1e:27:77:8a:2f:37:f6: 66:5e:1a:78:4f:c7:87:8e:d8:d0:fb:a5:f8:25:04: ae:a9:00:74:c6:e0:15:96:80:e8:16:3e:84:b2:e8: a7:70:e5:9e:1f:9f:01:d7:45:ce:ed:38:9c:d7:d4: b2:56:b7:79:09:12:02:ce:f9:80:d2:9a:51:3a:78: 09:b8:4a:be:7a:58:42:24:dd:87:02:0c:c4:4c:25: 92:7a:a6:53:da:aa:bc:e4:f9:a4:86:0e:c6:a0:63: 5f:9c:b5:25:8f:d3:9d:63:e6:37:11:e7:00:03:3d: 1d:5b:ef:d7:20:ef:98:f7:ba:44:bc:3b:2c:4c:21: ef:7d:a6:88:0e:73:33:b7:0c:f2:59:ae:ab:81:3d: e9:b9:51:4f:ee:4a:8a:13:1b:a7:c4:c3:69:6e:1f: a7:74:1d:8c:16:6b:59:47:49:16:3c:72:77:9a:7c: 79:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:66:D8:4E:9B:95:43:48:5C:47:BC:71:C8:F2:45:00:BD:BF:B6:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24803b2e-172b-3508-a3e4-a9a666ba5d61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a0:d5:66:19:d5:a3:07:88:0a:fc:38:25:14:10:99:08:c8: 41:9a:24:64:d3:7a:49:ef:9c:e8:03:8a:18:28:cb:48:aa:f8: 81:b7:b8:00:19:f3:5a:4b:10:06:11:21:a0:a7:6c:f8:c9:1d: 68:ce:4a:cd:1b:c2:3d:b9:db:c8:5d:ca:26:0d:6f:f0:a2:e2: cb:0a:31:ea:24:36:99:7d:89:84:bb:08:2e:c8:14:81:a9:0a: d3:22:13:62:21:30:89:0e:38:55:b9:85:bb:90:41:a5:85:55: 36:d0:0f:7e:a0:f1:93:a9:42:cc:24:76:cb:e4:cd:db:bc:f3: df:54:3a:46:a0:79:47:53:53:7d:11:b7:2d:6a:fb:e9:51:d5: d4:02:7c:82:6d:f8:2f:2c:14:d5:e0:0f:fc:89:f4:6b:0d:39: f3:0a:22:d9:68:d9:4b:37:50:a9:c7:46:a4:0a:5d:65:40:0f: 90:7e:30:29:02:2e:f9:6b:97:58:a7:a2:b8:88:35:d1:86:94: 4c:4d:58:9e:75:a4:52:e6:81:02:a2:7d:bb:10:38:7c:89:b6: 79:9f:10:66:12:65:76:58:ef:96:5b:f8:90:8a:e4:f7:ac:89: 3b:f6:fb:a0:c3:70:fd:ff:43:85:09:0d:68:07:85:5b:85:03: d8:c1:2e:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUf0HUpdr+s1OrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk N2U5NTA1NjQtMjA5MC00NzQwLWJkMTctMjRjYmEzOGEwYmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1aXTRwUHzJJUo0tyBXNpYBJA7HkU8V156f7 43ehZNd2Di7GEna8YU/OGes9e3SuyXdKFm0xRQhtYlr967bPAdnvWgfamA9iL8Ab m+GlObpmpR4nd4ovN/ZmXhp4T8eHjtjQ+6X4JQSuqQB0xuAVloDoFj6EsuincOWe H58B10XO7Tic19SyVrd5CRICzvmA0ppROngJuEq+elhCJN2HAgzETCWSeqZT2qq8 5Pmkhg7GoGNfnLUlj9OdY+Y3EecAAz0dW+/XIO+Y97pEvDssTCHvfaaIDnMztwzy Wa6rgT3puVFP7kqKExunxMNpbh+ndB2MFmtZR0kWPHJ3mnx5vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJm2E6blUNIXEe8ccjyRQC9v7a9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjQ4MDNiMmUtMTcyYi0z NTA4LWEzZTQtYTlhNjY2YmE1ZDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWg1WYZ1aMHiAr8OCUUEJkIyEGaJGTTeknvnOgDihgoy0iq+IG3uAAZ 81pLEAYRIaCnbPjJHWjOSs0bwj2528hdyiYNb/Ci4ssKMeokNpl9iYS7CC7IFIGp CtMiE2IhMIkOOFW5hbuQQaWFVTbQD36g8ZOpQswkdsvkzdu8899UOkageUdTU30R ty1q++lR1dQCfIJt+C8sFNXgD/yJ9GsNOfMKItlo2Us3UKnHRqQKXWVAD5B+MCkC Lvlrl1inoriINdGGlExNWJ51pFLmgQKifbsQOHyJtnmfEGYSZXZY75Zb+JCK5Pes iTv2+6DDcP3/Q4UJDWgHhVuFA9jBLro= -----END CERTIFICATE-----Generated at Sat Sep 5 06:51:33 2026 by rpki-client