$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/efa840d3-3c79-3ab5-8811-c67bec71e4d2.roa File: efa840d3-3c79-3ab5-8811-c67bec71e4d2.roa (raw, json) Hash identifier: RJffdw0WRLzrwXUCDDM8AV2D/EFKoNw009u9S6vTeqM= Subject key identifier: 9D:78:EF:43:CD:EC:A1:1B:9A:53:EA:FC:ED:1C:6B:2C:D5:23:8F:20 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EED51FD2E5A15D8CB03135C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/efa840d3-3c79-3ab5-8811-c67bec71e4d2.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:fd:2e:5a:15:d8:cb:03:13:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=585d268b-3bf9-4616-bb57-75d1511db337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f7:f1:4e:37:57:14:b5:47:e0:fe:bb:1f:ed: f5:43:df:3f:7d:b5:66:c4:70:ad:e4:0c:b9:c0:68: 5a:2a:fc:a9:85:c8:ab:7e:34:ed:77:21:f7:07:2f: b6:18:95:99:ad:4f:ec:0e:2a:4e:7a:3b:f9:fb:46: c2:80:c6:1b:49:b8:39:fd:e3:51:5d:f2:3a:fd:8e: 9a:c8:78:69:6c:dd:8f:5d:0c:de:a7:2e:3b:08:4d: ab:df:3d:0f:48:b7:e9:4b:a7:b7:95:11:32:74:68: ce:3d:39:0f:b0:82:22:da:46:5a:f5:17:a6:af:54: 48:68:e4:3b:94:bf:fe:6c:29:e5:8a:54:c4:ac:4f: e0:2f:35:0b:40:2c:98:d0:77:00:b4:60:18:46:76: 62:83:79:3e:30:19:6e:93:cc:7c:71:bc:e0:76:52: 22:04:c5:d9:8f:a7:6d:80:7d:6f:39:88:77:23:b0: 17:61:25:e9:81:d8:45:28:c7:31:ed:bb:b4:7f:0f: 33:ad:8f:0d:14:ba:f6:38:12:a3:83:89:fe:b2:b9: f9:67:98:04:e1:45:c3:0b:ed:95:80:d5:bb:a7:e7: 58:83:73:a0:f0:95:ba:40:af:ff:c1:27:ae:2e:37: 0e:f8:34:88:f1:5c:8d:96:19:c5:3c:09:c5:54:ca: 1f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:78:EF:43:CD:EC:A1:1B:9A:53:EA:FC:ED:1C:6B:2C:D5:23:8F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/efa840d3-3c79-3ab5-8811-c67bec71e4d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ba:7d:16:16:aa:75:61:8b:d5:73:7e:8a:1e:d6:d0:13:74: b2:0b:3d:72:75:4b:67:3c:23:87:e7:eb:26:07:34:8b:5d:dc: d0:be:c5:3c:c3:5f:36:39:28:90:e0:e7:09:20:3b:8a:8d:06: 4a:bc:a7:6a:c2:0f:ac:49:0e:b7:33:23:6e:ed:a4:ef:31:b5: 65:c7:de:9d:d4:e1:57:1d:29:22:ab:e2:36:75:cc:54:0e:2a: ac:89:92:4a:e1:d4:ea:03:09:f8:bf:c7:89:51:32:ec:ea:6f: 49:97:6b:27:87:8c:9b:bc:df:1f:b5:3d:85:d7:cd:dd:2a:a5: 1b:49:6e:b7:fe:21:18:4f:b6:cd:cb:f1:e9:cf:b9:ed:17:4c: bd:ff:53:d4:c2:2d:9f:20:c4:a0:08:56:de:8b:56:a0:66:2b: e7:a8:f5:64:65:cf:92:29:43:5f:0a:d0:73:4d:c1:c2:b9:b3: dd:dc:4a:c4:67:82:b8:6e:07:08:83:89:e7:a0:45:c8:94:eb: 56:db:0a:47:78:96:98:8d:d3:25:e4:b4:23:49:0a:60:cc:4a: e0:ba:5c:0a:83:a6:f1:74:89:d7:b5:e4:70:1d:71:34:67:54: 9f:da:fb:4d:5f:b4:f9:49:5a:37:10:e6:bf:2e:b1:37:fa:24: c0:47:f3:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUf0uWhXYywMTXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NTg1ZDI2OGItM2JmOS00NjE2LWJiNTctNzVkMTUxMWRiMzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsffxTjdXFLVH4P67H+31Q98/fbVmxHCt5Ay5 wGhaKvyphcirfjTtdyH3By+2GJWZrU/sDipOejv5+0bCgMYbSbg5/eNRXfI6/Y6a yHhpbN2PXQzepy47CE2r3z0PSLfpS6e3lREydGjOPTkPsIIi2kZa9Remr1RIaOQ7 lL/+bCnlilTErE/gLzULQCyY0HcAtGAYRnZig3k+MBluk8x8cbzgdlIiBMXZj6dt gH1vOYh3I7AXYSXpgdhFKMcx7bu0fw8zrY8NFLr2OBKjg4n+srn5Z5gE4UXDC+2V gNW7p+dYg3Og8JW6QK//wSeuLjcO+DSI8VyNlhnFPAnFVMofZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1470PN7KEbmlPq/O0cayzVI48gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWZhODQwZDMtM2M3OS0z YWI1LTg4MTEtYzY3YmVjNzFlNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFK6fRYWqnVhi9Vzfooe1tATdLILPXJ1S2c8I4fn6yYHNItd3NC+xTzD XzY5KJDg5wkgO4qNBkq8p2rCD6xJDrczI27tpO8xtWXH3p3U4VcdKSKr4jZ1zFQO KqyJkkrh1OoDCfi/x4lRMuzqb0mXayeHjJu83x+1PYXXzd0qpRtJbrf+IRhPts3L 8enPue0XTL3/U9TCLZ8gxKAIVt6LVqBmK+eo9WRlz5IpQ18K0HNNwcK5s93cSsRn grhuBwiDieegRciU61bbCkd4lpiN0yXktCNJCmDMSuC6XAqDpvF0ide15HAdcTRn VJ/a+01ftPlJWjcQ5r8usTf6JMBH8z0= -----END CERTIFICATE-----Generated at Sat Sep 5 06:51:02 2026 by rpki-client