$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ac33e084-14c8-3912-b024-0e8df49402d3.roa File: ac33e084-14c8-3912-b024-0e8df49402d3.roa (raw, json) Hash identifier: IESh4NAfPjX1CHRq/KPMB1iV4FmQzrOYUmL+uWcOdRU= Subject key identifier: 6A:9A:18:05:B3:16:66:86:69:B5:6E:A1:45:99:EB:21:B4:53:42:57 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EA78FE55AFE830F6B78F5D780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ac33e084-14c8-3912-b024-0e8df49402d3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8069 IP address blocks: 20.153.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:e5:5a:fe:83:0f:6b:78:f5:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8326284d-4047-4176-a439-b60ba5f1d31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:6d:64:9b:15:bd:7e:21:ea:cb:c0:4c:52: a4:83:3a:39:87:1d:e7:d1:7e:82:8f:b6:bd:52:43: 78:a9:77:19:3c:e5:23:50:f9:c9:fa:7a:e2:9c:f9: 99:75:30:01:c5:bd:19:fc:d8:21:f3:bf:4d:d1:ce: 19:c9:70:25:8b:6f:75:3c:f4:2e:97:05:19:c8:70: b2:58:ec:43:50:22:cd:ca:dc:c7:ff:b8:96:76:b2: 15:80:5d:d9:60:5b:3e:62:d5:4d:a6:c1:b9:d9:66: 03:f3:77:4b:9f:3f:0b:0f:06:f7:2e:5c:5d:88:18: 9b:54:68:9a:5d:c8:e2:21:6c:e4:8c:f7:80:18:32: 2e:ac:1c:f8:72:39:94:1c:ba:c8:74:02:76:7c:ad: be:65:4f:e2:c3:b9:63:75:50:c3:da:7e:0f:a7:8b: 19:5d:e2:37:af:d8:4c:6a:1f:b5:e4:4a:d7:30:51: d2:00:c3:1c:bc:84:39:1a:c7:d6:b0:b6:fd:91:75: d1:e2:36:76:78:e1:84:2f:8d:28:3c:03:60:89:8a: 00:d1:d2:f1:6d:b5:8c:a4:98:e5:b4:73:94:7b:ba: e8:e1:c2:d4:14:39:6a:c6:f2:e7:e8:7d:61:f9:2e: 59:3c:9e:52:82:fc:c1:9a:df:aa:3d:3f:fb:fe:e5: d9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9A:18:05:B3:16:66:86:69:B5:6E:A1:45:99:EB:21:B4:53:42:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ac33e084-14c8-3912-b024-0e8df49402d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d5:7c:84:3a:e1:cb:be:7a:4e:28:87:44:cd:ea:19:f0:c2: c9:a9:fc:71:aa:cc:7a:08:e1:89:8a:74:7b:26:a3:ba:28:5f: 9f:17:f8:b7:3e:1d:9e:8f:59:f1:c1:9b:f2:93:f9:8c:13:a9: 2f:c1:76:32:0e:8d:96:96:37:30:ae:42:46:b0:77:c3:98:be: 2a:39:81:f9:6f:30:b2:87:2a:87:a7:da:74:32:08:fe:8b:2b: 81:4b:c0:98:27:2b:81:af:b8:cc:7f:8b:d3:59:ee:c1:f7:41: fd:6d:33:ef:9f:27:75:d5:0b:27:a2:9b:41:6d:f3:d3:3e:f2: 6d:2f:01:ca:2b:51:3b:f6:95:71:96:9a:c4:64:23:44:f8:e0: 1e:d9:08:2e:f4:d8:7f:39:57:52:cb:be:fb:1b:10:42:aa:10: d2:73:12:e1:1a:56:e5:12:35:c5:fc:08:b4:11:ee:a7:d1:4d: 73:42:8a:21:3f:37:52:97:34:9e:95:2c:c4:68:a4:f7:70:85: 26:33:23:1d:ee:03:4c:7d:9a:69:7d:02:63:9b:a1:89:5b:cc: fd:c1:bd:66:34:f1:69:04:fa:0f:8f:41:8c:9f:dc:0f:10:89: 35:62:a5:18:43:a8:15:16:7d:73:f3:07:62:33:56:05:e1:ab: 71:8d:3a:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj+Va/oMPa3j114AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODMyNjI4NGQtNDA0Ny00MTc2LWE0MzktYjYwYmE1ZjFkMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L5tZJsVvX4h6svATFKkgzo5hx3n0X6Cj7a9 UkN4qXcZPOUjUPnJ+nrinPmZdTABxb0Z/Ngh879N0c4ZyXAli291PPQulwUZyHCy WOxDUCLNytzH/7iWdrIVgF3ZYFs+YtVNpsG52WYD83dLnz8LDwb3LlxdiBibVGia XcjiIWzkjPeAGDIurBz4cjmUHLrIdAJ2fK2+ZU/iw7ljdVDD2n4Pp4sZXeI3r9hM ah+15ErXMFHSAMMcvIQ5GsfWsLb9kXXR4jZ2eOGEL40oPANgiYoA0dLxbbWMpJjl tHOUe7ro4cLUFDlqxvLn6H1h+S5ZPJ5SgvzBmt+qPT/7/uXZHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqaGAWzFmaGabVuoUWZ6yG0U0JXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWMzM2UwODQtMTRjOC0z OTEyLWIwMjQtMGU4ZGY0OTQwMmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvVfIQ64cu+ek4oh0TN6hnwwsmp/HGqzHoI4YmKdHsmo7ooX58X+Lc+ HZ6PWfHBm/KT+YwTqS/BdjIOjZaWNzCuQkawd8OYvio5gflvMLKHKoen2nQyCP6L K4FLwJgnK4GvuMx/i9NZ7sH3Qf1tM++fJ3XVCyeim0Ft89M+8m0vAcorUTv2lXGW msRkI0T44B7ZCC702H85V1LLvvsbEEKqENJzEuEaVuUSNcX8CLQR7qfRTXNCiiE/ N1KXNJ6VLMRopPdwhSYzIx3uA0x9mml9AmOboYlbzP3BvWY08WkE+g+PQYyf3A8Q iTVipRhDqBUWfXPzB2IzVgXhq3GNOu8= -----END CERTIFICATE-----Generated at Wed Jul 29 09:08:28 2026 by rpki-client