$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa File: 9682b18d-084f-339c-8a00-ef1f480f78c1.roa (raw, json) Hash identifier: oBs01IKzi9N0Ha1rp3YF87upkIskiG1xBiXCQtn7kTw= Subject key identifier: 7D:99:17:59:7F:58:EC:E9:8D:7C:37:B6:52:4A:AE:AE:46:2E:0B:C4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA788BECC70A3DFE337884640 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.153.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:be:cc:70:a3:df:e3:37:88:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d6b07cf0-0c3d-41b3-bf06-ea68661dd4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c5:71:47:d9:8b:c4:83:2c:01:c4:5e:15:bc: 38:98:16:d7:2b:6e:22:18:0b:64:1b:46:d2:9a:2a: f9:a6:75:26:47:2b:96:ca:99:07:a2:72:a2:de:8b: f0:3f:42:1c:b7:6a:bb:24:45:c9:5c:1b:e2:57:17: 62:64:9a:1d:b1:cd:8e:80:c2:3d:01:22:4c:35:1b: 68:73:3c:6e:50:7e:e4:44:92:6f:82:b9:ff:9d:07: 2e:80:15:dc:e8:ac:3e:a0:b2:6e:b4:de:f1:0f:8d: 5b:f0:56:4e:4f:a9:f8:5e:c0:d1:06:99:4f:c7:92: 29:04:ae:dc:b3:98:af:2a:84:9d:63:f9:25:94:fc: 2a:2e:48:14:ac:66:9b:10:ee:41:7f:e5:f7:79:78: a3:3f:d6:90:71:cb:0d:19:0f:04:12:c9:68:94:39: f4:8c:14:44:11:d8:7d:f8:6b:55:bf:56:45:64:d1: b6:c4:90:25:17:a2:c4:e2:70:a3:dd:bf:48:dc:de: 9d:66:22:72:06:93:4c:57:d3:4b:c9:2b:cb:b3:ce: 16:83:82:d1:8c:e9:73:19:17:8a:a0:05:73:f7:66: 96:b7:d9:b0:8f:5a:54:f9:bf:8b:d8:ad:51:12:ef: 5d:87:1d:4a:f7:7f:ab:81:be:18:0d:ed:14:fd:d6: 77:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:99:17:59:7F:58:EC:E9:8D:7C:37:B6:52:4A:AE:AE:46:2E:0B:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:4d:48:14:31:30:e1:7a:eb:70:2b:71:53:d7:83:72:6f:62: 22:b5:27:1b:ca:da:28:57:ed:36:08:70:91:e7:48:48:96:fa: 19:b9:2c:d0:59:a4:7a:e6:29:73:82:ec:0d:ad:14:22:51:04: 18:83:9c:99:55:1f:df:83:e7:a8:31:cf:ca:26:0d:c0:b0:fc: a3:89:4e:11:78:ce:92:2d:5c:ba:c2:99:df:82:63:ef:0d:d2: c6:c3:95:d7:ad:70:03:d1:ba:ca:81:11:1b:19:f2:dc:04:d4: d6:39:ac:69:71:76:80:bd:d8:cf:1c:41:4e:4c:b0:af:0e:32: 8b:44:c7:81:10:6c:86:23:a9:d4:81:68:74:69:97:71:dd:3a: ef:1b:1e:d0:8b:42:bf:a6:52:08:94:01:18:d3:da:b3:75:58: e5:d4:0b:12:6d:21:e2:10:e4:55:eb:bc:cb:15:03:d4:24:54: f4:89:85:75:fb:d6:ef:49:3e:69:9e:49:3a:11:2c:7d:eb:30: 2e:81:df:ce:6c:50:53:4d:87:82:b0:17:14:37:9b:4a:1d:b4: 62:3d:e1:e0:f6:c8:1b:9c:83:f1:de:65:f2:2d:d7:80:8b:b1: 7e:94:ab:1a:99:d2:e1:12:8e:3c:c8:3f:ac:d2:2e:34:13:a3: 95:44:6e:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niL7McKPf4zeIRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDZiMDdjZjAtMGMzZC00MWIzLWJmMDYtZWE2ODY2MWRkNGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsVxR9mLxIMsAcReFbw4mBbXK24iGAtkG0bS mir5pnUmRyuWypkHonKi3ovwP0Ict2q7JEXJXBviVxdiZJodsc2OgMI9ASJMNRto czxuUH7kRJJvgrn/nQcugBXc6Kw+oLJutN7xD41b8FZOT6n4XsDRBplPx5IpBK7c s5ivKoSdY/kllPwqLkgUrGabEO5Bf+X3eXijP9aQccsNGQ8EEslolDn0jBREEdh9 +GtVv1ZFZNG2xJAlF6LE4nCj3b9I3N6dZiJyBpNMV9NLySvLs84Wg4LRjOlzGReK oAVz92aWt9mwj1pU+b+L2K1REu9dhx1K93+rgb4YDe0U/dZ3cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2ZF1l/WOzpjXw3tlJKrq5GLgvEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTY4MmIxOGQtMDg0Zi0z MzljLThhMDAtZWYxZjQ4MGY3OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtNSBQxMOF663ArcVPXg3JvYiK1JxvK2ihX7TYIcJHnSEiW+hm5LNBZ pHrmKXOC7A2tFCJRBBiDnJlVH9+D56gxz8omDcCw/KOJThF4zpItXLrCmd+CY+8N 0sbDldetcAPRusqBERsZ8twE1NY5rGlxdoC92M8cQU5MsK8OMotEx4EQbIYjqdSB aHRpl3HdOu8bHtCLQr+mUgiUARjT2rN1WOXUCxJtIeIQ5FXrvMsVA9QkVPSJhXX7 1u9JPmmeSToRLH3rMC6B385sUFNNh4KwFxQ3m0odtGI94eD2yBucg/HeZfIt14CL sX6UqxqZ0uESjjzIP6zSLjQTo5VEbgU= -----END CERTIFICATE-----Generated at Wed Jul 29 07:37:53 2026 by rpki-client