$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/27bda6dc-9063-3dcc-afd5-cc773c661064.roa File: 27bda6dc-9063-3dcc-afd5-cc773c661064.roa (raw, json) Hash identifier: rCEFWeA9YMVwPJXV+9jV52kbEwJclNNhmMnbI/tOBN8= Subject key identifier: 61:84:1F:CE:4A:AC:B1:45:B1:2D:3C:A6:6F:57:10:E9:3F:9D:52:19 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DE2B5E1C678EEEEE7B123F0C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/27bda6dc-9063-3dcc-afd5-cc773c661064.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.153.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:e1:c6:78:ee:ee:e7:b1:23:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=769dce38-ea11-4ba1-87a5-a3e3cd8fc957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ca:65:eb:5b:ea:ba:eb:d1:df:69:e7:48:2c: 77:f8:ad:a5:18:4e:50:6c:f6:74:75:4b:65:63:20: 9e:82:79:d3:32:c4:fc:0f:99:07:bc:09:27:44:eb: d9:c4:2b:11:b9:a4:20:4d:0f:3b:5e:83:ae:19:ff: 12:c5:39:fa:f8:e9:75:51:3c:75:da:f4:51:e2:66: 2e:1c:6b:05:94:0d:1c:01:bb:5a:58:3d:f5:2d:84: bd:34:93:65:f3:4b:2b:53:cf:97:91:1f:30:e1:f7: 1a:1d:30:f4:54:e9:4c:bf:9a:98:a2:2b:83:6d:8e: 7d:b6:4c:98:6b:2b:73:81:e0:5a:d2:8c:5c:1d:83: 12:0c:2b:c3:60:eb:c8:30:48:33:8d:05:fc:f9:96: 20:75:63:66:16:2e:f4:6f:48:17:46:b9:a0:b2:d7: 3a:e7:40:11:d3:d8:09:ab:7c:ed:3b:b4:c1:22:a9: 28:02:f9:08:9f:92:86:e6:c1:84:54:23:a1:56:67: fa:34:61:cb:ce:4c:17:a6:e2:71:56:d3:ab:b3:5b: a1:f8:dd:24:4f:d4:e5:56:17:81:fe:c6:19:44:d8: 6e:2f:8e:92:27:bb:c2:59:66:a8:00:23:f5:72:86: 81:01:c2:bb:16:5c:d6:33:75:06:41:4e:63:95:f6: d6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:84:1F:CE:4A:AC:B1:45:B1:2D:3C:A6:6F:57:10:E9:3F:9D:52:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/27bda6dc-9063-3dcc-afd5-cc773c661064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9d:1a:39:19:d9:53:47:4c:3a:1e:d2:78:18:04:02:45:0d: 6b:6d:5b:cb:da:20:ab:a4:79:b6:1d:10:3c:9b:a9:03:ea:4e: b9:ba:4d:ee:ce:96:8b:b7:22:18:67:87:4c:2c:70:d5:42:5b: 88:cc:73:8e:d9:3c:b9:e9:21:59:67:69:d7:33:df:1b:a7:11: 8e:15:30:76:4f:36:15:17:35:92:56:13:e2:bf:2e:fe:a8:13: 38:a3:32:66:53:bf:af:5b:39:f2:06:c6:40:fb:6c:07:04:8c: c4:c1:1f:97:fb:a2:0a:36:06:43:c1:fc:8e:78:57:ca:07:51: 87:f4:6e:cc:e2:e1:b2:e0:19:97:9a:cc:ec:4f:16:7b:88:61: 8d:7d:ee:d9:a1:8d:66:e8:a0:0b:fc:e5:58:9d:11:97:a7:64: 24:ad:0f:37:7d:bc:75:7a:ff:3b:7c:cb:93:21:68:f4:f0:2b: ae:ac:ad:25:09:2c:b6:85:05:b1:13:0f:f2:10:70:3e:08:9b: f2:6b:27:f5:1c:00:11:79:1b:33:53:18:53:96:0c:31:c4:1c: dd:e0:ce:3e:ab:17:18:56:9e:04:81:06:6e:f9:8a:51:71:56: d9:a9:58:4b:57:e6:f8:b1:38:5b:e4:7e:fb:a5:61:36:e7:bf: c5:63:ee:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3iteHGeO7u57Ej8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk NzY5ZGNlMzgtZWExMS00YmExLTg3YTUtYTNlM2NkOGZjOTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8pl61vquuvR32nnSCx3+K2lGE5QbPZ0dUtl YyCegnnTMsT8D5kHvAknROvZxCsRuaQgTQ87XoOuGf8SxTn6+Ol1UTx12vRR4mYu HGsFlA0cAbtaWD31LYS9NJNl80srU8+XkR8w4fcaHTD0VOlMv5qYoiuDbY59tkyY aytzgeBa0oxcHYMSDCvDYOvIMEgzjQX8+ZYgdWNmFi70b0gXRrmgstc650AR09gJ q3ztO7TBIqkoAvkIn5KG5sGEVCOhVmf6NGHLzkwXpuJxVtOrs1uh+N0kT9TlVheB /sYZRNhuL46SJ7vCWWaoACP1coaBAcK7FlzWM3UGQU5jlfbWSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGEH85KrLFFsS08pm9XEOk/nVIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjdiZGE2ZGMtOTA2My0z ZGNjLWFmZDUtY2M3NzNjNjYxMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWdGjkZ2VNHTDoe0ngYBAJFDWttW8vaIKukebYdEDybqQPqTrm6Te7O lou3Ihhnh0wscNVCW4jMc47ZPLnpIVlnadcz3xunEY4VMHZPNhUXNZJWE+K/Lv6o EzijMmZTv69bOfIGxkD7bAcEjMTBH5f7ogo2BkPB/I54V8oHUYf0bszi4bLgGZea zOxPFnuIYY197tmhjWbooAv85VidEZenZCStDzd9vHV6/zt8y5MhaPTwK66srSUJ LLaFBbETD/IQcD4Im/JrJ/UcABF5GzNTGFOWDDHEHN3gzj6rFxhWngSBBm75ilFx VtmpWEtX5vixOFvkfvulYTbnv8Vj7mM= -----END CERTIFICATE-----Generated at Sat Jun 6 14:46:57 2026 by rpki-client