$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b4dbd1cf-ce7a-344f-95d1-9d94f9ffaa21.roa File: b4dbd1cf-ce7a-344f-95d1-9d94f9ffaa21.roa (raw, json) Hash identifier: Ezaj8l+9x5rNjWUNJ6Xt8K8U4eofpNojhOaB9KN5T0A= Subject key identifier: 58:95:85:6A:74:D3:19:2D:C9:F6:93:C5:8F:44:CF:8E:C8:CB:EF:C7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA79648D503CD9AD23E3C8380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b4dbd1cf-ce7a-344f-95d1-9d94f9ffaa21.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.153.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:48:d5:03:cd:9a:d2:3e:3c:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=06b2a7e8-915d-4e91-9341-7111bc98196e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b3:b8:34:5e:18:a2:23:a2:a3:17:75:23:44: 66:21:e4:e1:ee:26:28:eb:3f:e5:3a:bb:6a:c3:db: 85:83:63:e0:af:94:ab:fd:68:14:86:3e:49:b2:09: 9e:5f:9f:16:d0:19:27:f6:f0:99:fb:07:bc:03:2d: 8e:52:ae:27:32:fc:3d:2d:03:bf:ee:cc:f5:b9:44: 24:88:db:2c:6c:b0:b4:41:98:4e:3b:fb:65:87:83: 07:54:aa:ec:b4:95:69:35:8c:2c:8e:29:21:42:c9: 09:0f:71:97:c0:75:61:30:c8:7d:01:07:23:5f:1a: 4a:a6:d6:7f:59:73:0d:e9:c7:f9:01:a2:28:91:4e: 5f:64:62:8d:5a:6b:a4:b6:80:b0:9c:67:89:77:d6: 88:2d:92:f3:b4:2f:74:b6:f7:8e:fe:63:65:a4:31: 2b:76:46:88:41:02:72:aa:b5:d4:68:7f:ce:37:55: e8:35:71:be:a6:60:b7:11:78:a9:8d:7b:67:97:00: 53:cb:86:a3:74:17:4d:29:54:59:6c:cf:92:ce:ce: 79:37:c6:62:b5:ad:f0:0a:9b:4d:d6:23:ac:20:36: d6:7c:33:70:29:df:54:01:95:80:f9:3c:03:a2:c0: 5d:45:d0:39:05:05:9e:ef:18:a8:47:d1:bc:ea:bf: 81:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:95:85:6A:74:D3:19:2D:C9:F6:93:C5:8F:44:CF:8E:C8:CB:EF:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b4dbd1cf-ce7a-344f-95d1-9d94f9ffaa21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f1:c0:95:be:b4:ce:59:e8:20:c4:58:a6:ce:1c:66:88:99: 20:59:0b:71:f4:4f:98:90:e6:54:6c:0e:5c:5e:b4:c8:28:40: 8c:5d:bc:6d:32:1e:2a:a6:ed:a5:b0:29:1e:82:d4:2b:21:57: aa:5f:e9:d3:82:eb:95:72:71:5f:f9:09:51:f0:f0:0d:8a:dc: ad:44:d6:9e:52:52:af:63:bb:3c:82:2c:3b:b1:b2:56:22:4a: a3:e2:ff:da:1c:f0:90:91:07:98:18:fc:5b:bc:57:4a:81:3c: b3:f2:e2:05:ff:37:01:25:46:11:ff:55:e7:49:c8:10:b8:2d: 41:3e:b6:a5:f4:52:5a:48:cc:2a:f8:b2:98:b5:59:41:0a:1f: d2:7e:b2:4e:b5:66:be:14:83:79:06:40:09:35:53:8b:51:09: 82:f7:5a:df:d1:6f:56:b5:28:95:5e:fa:d0:d6:68:59:49:40: ec:52:4c:c4:60:ac:20:9c:eb:b0:f0:a8:f9:a5:75:3a:65:e0: 1e:f6:7c:78:fd:1c:a3:69:66:ef:ef:10:4a:c2:bc:a6:15:9f: 63:ba:ff:e8:58:8f:97:c6:9a:ff:8d:b8:2a:59:18:74:1f:17: 2f:85:7b:fe:85:a3:ab:e9:a1:a7:fd:47:a3:9e:cb:6a:85:2e: 5f:4e:99:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlkjVA82a0j48g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDZiMmE3ZTgtOTE1ZC00ZTkxLTkzNDEtNzExMWJjOTgxOTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorO4NF4YoiOioxd1I0RmIeTh7iYo6z/lOrtq w9uFg2Pgr5Sr/WgUhj5JsgmeX58W0Bkn9vCZ+we8Ay2OUq4nMvw9LQO/7sz1uUQk iNssbLC0QZhOO/tlh4MHVKrstJVpNYwsjikhQskJD3GXwHVhMMh9AQcjXxpKptZ/ WXMN6cf5AaIokU5fZGKNWmuktoCwnGeJd9aILZLztC90tveO/mNlpDErdkaIQQJy qrXUaH/ON1XoNXG+pmC3EXipjXtnlwBTy4ajdBdNKVRZbM+Szs55N8Zita3wCptN 1iOsIDbWfDNwKd9UAZWA+TwDosBdRdA5BQWe7xioR9G86r+BXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiVhWp00xktyfaTxY9Ez47Iy+/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjRkYmQxY2YtY2U3YS0z NDRmLTk1ZDEtOWQ5NGY5ZmZhYTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7xwJW+tM5Z6CDEWKbOHGaImSBZC3H0T5iQ5lRsDlxetMgoQIxdvG0y Hiqm7aWwKR6C1CshV6pf6dOC65VycV/5CVHw8A2K3K1E1p5SUq9juzyCLDuxslYi SqPi/9oc8JCRB5gY/Fu8V0qBPLPy4gX/NwElRhH/VedJyBC4LUE+tqX0UlpIzCr4 spi1WUEKH9J+sk61Zr4Ug3kGQAk1U4tRCYL3Wt/Rb1a1KJVe+tDWaFlJQOxSTMRg rCCc67DwqPmldTpl4B72fHj9HKNpZu/vEErCvKYVn2O6/+hYj5fGmv+NuCpZGHQf Fy+Fe/6Fo6vpoaf9R6Oey2qFLl9OmS4= -----END CERTIFICATE-----Generated at Sat Sep 5 07:04:35 2026 by rpki-client