$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/08795fcf-e040-301e-b174-61231872c055.roa File: 08795fcf-e040-301e-b174-61231872c055.roa (raw, json) Hash identifier: DeZy0TkRWXtqNpe8w+ApgVb1lT5nvauJH5wsN6H4YQY= Subject key identifier: EE:BC:CA:41:5C:13:32:45:29:B2:1B:AF:A8:EB:0C:F8:63:FF:80:68 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA788BED744D3F6A7A1757760 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/08795fcf-e040-301e-b174-61231872c055.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.153.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:be:d7:44:d3:f6:a7:a1:75:77:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6f240a29-5ccf-4e4d-ad18-0a4a138cb3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8a:3f:f8:88:8a:fa:31:6f:2b:5c:1f:06:5f: 88:6b:95:86:1a:ce:3c:41:96:fa:d1:6e:06:41:4e: 12:eb:3a:a0:3c:36:2d:d1:7f:72:1e:e4:43:fa:1c: fe:e4:fc:01:ac:e2:e6:80:05:73:fd:a1:02:67:db: a4:7d:c6:cb:76:bb:5d:9f:fe:7e:ca:10:8c:a3:8a: 8b:55:7d:56:6d:2b:f6:61:d2:3d:d1:51:ba:4a:96: 1f:c9:34:8a:95:0c:15:14:37:2c:de:20:91:d4:3f: 07:dd:6a:27:12:55:fe:a4:c8:7c:4d:bc:98:b6:79: 50:18:09:8c:97:5a:de:ae:5f:6b:36:02:fd:3c:01: d6:36:4f:8d:77:28:d9:65:ef:00:7c:a6:db:9b:16: c6:a6:d8:b7:7f:e6:36:f4:b2:01:61:81:b5:69:a4: 2b:1f:0b:2f:30:9f:01:41:d7:2e:d2:08:e7:4e:1f: fa:f2:c7:a9:69:9c:ff:5a:db:f4:ec:72:8c:6c:3e: 63:aa:bb:08:17:bf:e0:f9:bc:3d:39:b9:b0:b2:eb: 37:e6:fd:0d:53:5d:9d:be:09:74:89:33:ba:af:a2: f9:82:dd:0d:0e:5a:41:1b:74:35:3a:c0:64:ba:d3: f7:95:ad:7f:b4:0c:d7:72:96:79:27:f3:79:a1:38: 02:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BC:CA:41:5C:13:32:45:29:B2:1B:AF:A8:EB:0C:F8:63:FF:80:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/08795fcf-e040-301e-b174-61231872c055.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:50:12:a3:36:86:02:97:0b:e2:49:3f:d0:62:68:ee:3d:65: d3:2b:ac:ea:04:e7:36:ed:20:5c:27:dc:23:02:69:94:3d:92: 0e:be:8f:0b:5a:be:f4:aa:50:11:06:d5:07:e2:22:84:1e:0f: 5a:43:e9:1d:82:1a:9b:af:af:8c:7e:da:81:bb:62:21:8d:84: 56:99:b8:f2:c0:5b:40:28:f8:63:a8:05:3f:d4:f3:0c:fc:95: 99:59:dc:32:f9:46:d7:16:a6:13:af:71:46:41:ca:2d:c6:f1: 86:0a:26:a7:5a:10:1f:e8:1f:ac:87:25:80:9c:35:94:40:dc: 10:e0:c8:81:6b:5f:5c:4c:ae:30:af:f0:5b:e8:87:35:19:00: 96:04:fe:d5:31:53:53:cb:0e:37:21:ab:22:82:53:41:f3:f7: 2d:30:09:9d:6c:19:4d:f6:16:ca:e1:5a:9b:8f:b8:00:92:5c: a3:3f:52:c8:68:93:1e:d2:93:23:6f:0b:88:fd:c1:49:41:45: af:69:37:c9:2c:c6:1c:da:be:9e:80:4b:3c:40:61:8d:8e:b8: 5f:21:e7:b4:ce:e0:67:27:be:9b:fe:64:25:bc:f0:ad:34:11: 8f:d3:88:a4:f2:df:c4:e9:11:43:27:c8:35:c2:8e:d8:c9:e4: c8:56:77:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niL7XRNP2p6F1d2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmYyNDBhMjktNWNjZi00ZTRkLWFkMTgtMGE0YTEzOGNiM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4o/+IiK+jFvK1wfBl+Ia5WGGs48QZb60W4G QU4S6zqgPDYt0X9yHuRD+hz+5PwBrOLmgAVz/aECZ9ukfcbLdrtdn/5+yhCMo4qL VX1WbSv2YdI90VG6SpYfyTSKlQwVFDcs3iCR1D8H3WonElX+pMh8TbyYtnlQGAmM l1rerl9rNgL9PAHWNk+NdyjZZe8AfKbbmxbGpti3f+Y29LIBYYG1aaQrHwsvMJ8B Qdcu0gjnTh/68sepaZz/Wtv07HKMbD5jqrsIF7/g+bw9Obmwsus35v0NU12dvgl0 iTO6r6L5gt0NDlpBG3Q1OsBkutP3la1/tAzXcpZ5J/N5oTgClwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO68ykFcEzJFKbIbr6jrDPhj/4BoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDg3OTVmY2YtZTA0MC0z MDFlLWIxNzQtNjEyMzE4NzJjMDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdQEqM2hgKXC+JJP9BiaO49ZdMrrOoE5zbtIFwn3CMCaZQ9kg6+jwta vvSqUBEG1QfiIoQeD1pD6R2CGpuvr4x+2oG7YiGNhFaZuPLAW0Ao+GOoBT/U8wz8 lZlZ3DL5RtcWphOvcUZByi3G8YYKJqdaEB/oH6yHJYCcNZRA3BDgyIFrX1xMrjCv 8FvohzUZAJYE/tUxU1PLDjchqyKCU0Hz9y0wCZ1sGU32FsrhWpuPuACSXKM/Usho kx7SkyNvC4j9wUlBRa9pN8ksxhzavp6ASzxAYY2OuF8h57TO4Gcnvpv+ZCW88K00 EY/TiKTy38TpEUMnyDXCjtjJ5MhWd0Q= -----END CERTIFICATE-----Generated at Wed Jul 29 06:48:49 2026 by rpki-client