$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f90d2759-a01a-3f35-b0a2-fed6a02774a6.roa File: f90d2759-a01a-3f35-b0a2-fed6a02774a6.roa (raw, json) Hash identifier: xbEgRIz5uNov1rKR2WutJrJJhgjHRBKf85FHYaTClj4= Subject key identifier: CE:9E:50:8F:EA:75:FC:28:9A:10:E9:55:2A:62:EC:D9:01:6D:F3:44 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA796269481C438F48E12E940 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f90d2759-a01a-3f35-b0a2-fed6a02774a6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.153.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:26:94:81:c4:38:f4:8e:12:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b92d823a-b3cf-4904-9e1a-f9adaea07f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9a:02:94:10:78:96:b4:35:58:bd:36:1d:e2: 55:81:d2:00:d1:ea:ab:45:03:50:a6:4c:1a:02:f0: 62:7b:0d:52:95:6c:5d:66:a7:8f:2c:02:31:ef:15: d4:ed:0e:a9:12:61:97:ad:a6:17:97:ae:12:65:31: 06:41:ce:33:36:1a:df:be:47:72:b0:13:ff:5c:c9: c3:75:49:f2:56:a4:6b:84:c6:48:52:91:f0:d1:78: 00:45:da:b4:6c:6d:7b:1a:4a:0e:02:19:cf:ff:49: 58:53:48:73:6f:c9:69:12:e7:b1:cf:c6:19:ad:5b: ee:b6:17:65:b4:db:49:f5:d0:e7:31:91:73:3d:21: b0:af:96:32:1a:aa:f7:67:23:7a:c3:fc:34:a7:0b: d6:72:3f:2e:7e:3c:ed:c2:6b:39:e1:b4:09:4f:86: 5d:eb:b0:ee:6e:ba:60:d7:2e:3f:b0:91:c4:bf:00: c7:42:81:7e:a1:7e:13:c8:d1:26:ed:95:99:ed:19: cc:87:c3:2a:0c:31:7e:11:9e:d1:ae:16:b0:68:c9: 69:63:46:4c:70:f9:89:93:aa:15:55:25:d3:87:d4: 12:56:d2:7e:31:53:bf:7c:e8:3c:58:61:0f:1f:ca: 5f:b1:46:bd:40:b3:6a:b2:5f:c8:29:c3:7e:1c:65: a1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9E:50:8F:EA:75:FC:28:9A:10:E9:55:2A:62:EC:D9:01:6D:F3:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f90d2759-a01a-3f35-b0a2-fed6a02774a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d3:d9:08:ae:82:6f:6b:70:e4:30:41:22:0c:fe:14:48:8c: 1a:b7:aa:13:11:0b:0a:fd:0b:79:b4:ef:cf:6c:e8:13:e4:45: 15:b4:5d:ca:02:90:15:1d:93:df:0b:ef:f4:46:e2:6f:27:8f: ac:f8:db:d3:8c:e6:70:83:7f:c8:8f:58:0d:90:b9:d4:57:99: ef:4b:4b:f0:81:78:7c:97:54:a0:0a:87:1d:71:6a:c5:65:79: a9:9e:38:f8:f1:a4:ba:06:51:2e:3f:52:9f:80:25:7b:00:70: 1f:de:9d:32:74:f4:83:3f:4f:85:3d:22:53:88:54:9d:b6:8a: c9:a1:0e:1f:a3:31:b6:5e:26:6c:f8:56:50:d6:ce:bc:53:5c: 95:9d:45:f5:db:89:d6:49:98:c4:7a:52:56:01:b9:5b:70:ee: e2:36:a3:d1:3b:51:84:64:4e:bf:43:a9:14:2c:5b:0f:4a:df: f8:6b:26:dc:21:f0:49:f7:7b:cd:fb:c0:59:cb:d8:50:91:5f: 91:e4:83:2e:fc:f9:37:a4:86:10:b0:74:d4:97:89:68:48:8a: 83:07:03:61:f2:21:72:04:7d:d0:0f:67:52:84:eb:4f:72:9f: d9:e5:7c:35:ef:9c:a1:02:17:5d:31:a8:38:60:34:7a:6c:56: d5:c4:51:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nliaUgcQ49I4S6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjkyZDgyM2EtYjNjZi00OTA0LTllMWEtZjlhZGFlYTA3ZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJoClBB4lrQ1WL02HeJVgdIA0eqrRQNQpkwa AvBiew1SlWxdZqePLAIx7xXU7Q6pEmGXraYXl64SZTEGQc4zNhrfvkdysBP/XMnD dUnyVqRrhMZIUpHw0XgARdq0bG17GkoOAhnP/0lYU0hzb8lpEuexz8YZrVvuthdl tNtJ9dDnMZFzPSGwr5YyGqr3ZyN6w/w0pwvWcj8ufjztwms54bQJT4Zd67Dubrpg 1y4/sJHEvwDHQoF+oX4TyNEm7ZWZ7RnMh8MqDDF+EZ7RrhawaMlpY0ZMcPmJk6oV VSXTh9QSVtJ+MVO/fOg8WGEPH8pfsUa9QLNqsl/IKcN+HGWh1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6eUI/qdfwomhDpVSpi7NkBbfNEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjkwZDI3NTktYTAxYS0z ZjM1LWIwYTItZmVkNmEwMjc3NGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbT2Qiugm9rcOQwQSIM/hRIjBq3qhMRCwr9C3m0789s6BPkRRW0XcoC kBUdk98L7/RG4m8nj6z429OM5nCDf8iPWA2QudRXme9LS/CBeHyXVKAKhx1xasVl eameOPjxpLoGUS4/Up+AJXsAcB/enTJ09IM/T4U9IlOIVJ22ismhDh+jMbZeJmz4 VlDWzrxTXJWdRfXbidZJmMR6UlYBuVtw7uI2o9E7UYRkTr9DqRQsWw9K3/hrJtwh 8En3e837wFnL2FCRX5Hkgy78+TekhhCwdNSXiWhIioMHA2HyIXIEfdAPZ1KE609y n9nlfDXvnKECF10xqDhgNHpsVtXEUeE= -----END CERTIFICATE-----Generated at Sat Sep 5 08:13:16 2026 by rpki-client