$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c7680dd-8697-3c50-8181-945c51777f91.roa File: 6c7680dd-8697-3c50-8181-945c51777f91.roa (raw, json) Hash identifier: OZTPDndaCUUuEFtR8dLTP1Afir8CFV8u8J/9BZzanQA= Subject key identifier: C7:F6:81:B5:CA:53:0A:67:FA:8C:62:A4:DB:BD:A1:71:C6:FE:9C:B8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DDD207C568E5B680E97566280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c7680dd-8697-3c50-8181-945c51777f91.roa Signing time: Sun 17 May 2026 13:00:32 +0000 ROA not before: Sun 17 May 2026 13:00:32 +0000 ROA not after: Sat 15 Aug 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.153.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dd:20:7c:56:8e:5b:68:0e:97:56:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 17 13:00:32 2026 GMT Not After : Aug 15 13:00:32 2026 GMT Subject: CN=8b84939a-aff9-4fbd-9a5e-39d58c03028b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:77:d9:81:3e:eb:55:2d:6f:93:4b:1c:46:fe: 98:28:ac:a5:c4:6a:8b:49:bb:ed:53:77:35:d7:4a: c0:1d:d9:fa:ba:0d:95:c7:89:06:16:9a:58:f8:08: d0:82:6c:d5:98:6d:0e:0d:b4:85:d7:4e:83:10:cf: ff:da:c1:10:3e:ea:8a:57:36:1f:89:dd:97:bd:ac: fa:72:11:56:d5:cd:e9:35:02:1e:a5:6e:7f:f4:7d: bf:a0:2e:e5:76:52:0c:51:9f:fc:26:16:34:68:eb: 78:e8:cc:8f:7f:84:06:18:c7:72:dd:d9:a9:4c:85: 13:3a:2b:9e:49:b3:04:a3:7c:29:d9:b8:82:0b:b3: 7c:2b:22:f4:24:d3:52:13:e6:c4:66:e4:dd:4b:3e: f9:65:b8:aa:37:29:8f:43:74:a9:b6:38:88:c6:b1: 89:68:8e:fb:0f:a8:c1:19:57:61:53:6a:46:3e:0e: ab:78:2f:73:ea:fc:dc:51:90:21:64:ae:56:75:f4: 3a:7e:89:fb:74:af:df:6a:74:39:31:c2:4f:da:29: 3a:f8:4f:66:a7:23:3c:05:d7:cf:0f:77:83:2c:bb: d5:72:5f:25:c1:b2:bf:85:b1:e2:49:eb:d6:58:bc: 23:87:11:0f:d7:06:26:5f:55:a5:d8:e2:87:e8:77: 4e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F6:81:B5:CA:53:0A:67:FA:8C:62:A4:DB:BD:A1:71:C6:FE:9C:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c7680dd-8697-3c50-8181-945c51777f91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:7b:35:c6:cb:9f:fa:3e:0a:6c:ed:49:1a:c2:b5:c4:70:c4: c9:1d:4a:e3:a7:8c:81:f4:44:ea:e6:1a:33:51:80:6d:af:3e: 09:79:d2:b6:e6:d8:e8:47:a7:54:03:7d:0b:64:36:24:3a:6e: 7f:a7:5a:7e:e2:17:57:8b:02:a1:18:3b:69:fc:81:3d:f1:6a: 3c:e2:37:ee:8c:23:16:1a:36:b8:c7:b7:62:e8:cc:36:69:f1: b3:33:00:9a:ae:96:fd:a8:0e:5a:82:8c:ca:74:04:33:0b:78: b5:12:51:91:fa:de:c9:18:d4:87:f4:73:a2:ab:37:25:9f:0f: f2:4b:43:6d:61:6f:20:78:de:fe:18:59:72:1d:5b:bc:dc:07: 16:07:1a:3d:2f:b4:e4:fa:c5:cc:4a:d8:cd:e6:65:54:4b:ed: f2:1a:83:d5:3b:2b:f5:fc:0b:f7:60:68:67:16:06:8c:60:30: b4:90:35:47:d4:21:59:ca:0d:88:a1:33:41:8c:16:90:b0:f0: a7:00:1f:68:97:4e:20:2d:ee:f3:bb:c8:b5:66:e9:09:a5:91: db:35:d7:d0:6f:82:e1:1e:7b:68:c8:0c:1a:ca:a2:34:a8:b0: 3b:90:75:41:da:e0:cf:bb:76:91:81:ef:c0:d5:41:97:24:2e: 33:ad:84:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3dIHxWjltoDpdWYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUxNzEzMDAzMloXDTI2MDgxNTEzMDAzMlowLzEtMCsGA1UEAxMk OGI4NDkzOWEtYWZmOS00ZmJkLTlhNWUtMzlkNThjMDMwMjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHfZgT7rVS1vk0scRv6YKKylxGqLSbvtU3c1 10rAHdn6ug2Vx4kGFppY+AjQgmzVmG0ODbSF106DEM//2sEQPuqKVzYfid2Xvaz6 chFW1c3pNQIepW5/9H2/oC7ldlIMUZ/8JhY0aOt46MyPf4QGGMdy3dmpTIUTOiue SbMEo3wp2biCC7N8KyL0JNNSE+bEZuTdSz75ZbiqNymPQ3SptjiIxrGJaI77D6jB GVdhU2pGPg6reC9z6vzcUZAhZK5WdfQ6fon7dK/fanQ5McJP2ik6+E9mpyM8BdfP D3eDLLvVcl8lwbK/hbHiSevWWLwjhxEP1wYmX1Wl2OKH6HdOTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMf2gbXKUwpn+oxipNu9oXHG/py4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmM3NjgwZGQtODY5Ny0z YzUwLTgxODEtOTQ1YzUxNzc3ZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt7NcbLn/o+CmztSRrCtcRwxMkdSuOnjIH0ROrmGjNRgG2vPgl50rbm 2OhHp1QDfQtkNiQ6bn+nWn7iF1eLAqEYO2n8gT3xajziN+6MIxYaNrjHt2LozDZp 8bMzAJqulv2oDlqCjMp0BDMLeLUSUZH63skY1If0c6KrNyWfD/JLQ21hbyB43v4Y WXIdW7zcBxYHGj0vtOT6xcxK2M3mZVRL7fIag9U7K/X8C/dgaGcWBoxgMLSQNUfU IVnKDYihM0GMFpCw8KcAH2iXTiAt7vO7yLVm6Qmlkds119BvguEee2jIDBrKojSo sDuQdUHa4M+7dpGB78DVQZckLjOthBI= -----END CERTIFICATE-----Generated at Sat Jun 6 14:47:56 2026 by rpki-client