$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7aeab62e-dc0a-314c-873d-1a87e53fa67f.roa File: 7aeab62e-dc0a-314c-873d-1a87e53fa67f.roa (raw, json) Hash identifier: UOsG3Qhz1ecDzF+6Hv9E4n+dXUQuxNIa2uaepp/v1lU= Subject key identifier: D6:21:9F:B9:9C:7B:4C:53:DC:C0:4C:83:40:24:92:94:6B:B2:5E:5F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DF4DB4C0DE179A627ABED4000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7aeab62e-dc0a-314c-873d-1a87e53fa67f.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:4c:0d:e1:79:a6:27:ab:ed:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=6e611eac-93e4-4ceb-8658-5ff2f7fe707c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3d:1d:a6:fe:fb:5c:83:ea:04:28:41:ae:83: 04:c0:d3:0a:99:24:87:97:af:1d:bc:b8:b2:05:2a: 3c:f9:3b:11:54:00:7f:5f:16:1c:dd:4e:74:a2:30: 47:23:f8:69:1a:e5:96:8e:4a:5b:4e:bd:ae:f5:25: e4:ec:8d:c8:75:38:f7:d0:33:e7:67:a8:59:70:9e: dd:23:82:35:8b:9c:97:58:94:b0:4e:af:50:1e:d0: 1c:7e:bd:7e:57:6a:69:69:ac:c1:a9:9a:69:e6:bd: 10:9c:6b:36:0b:51:bf:a7:c7:0d:95:f0:b3:29:43: 8a:12:e6:be:4a:72:42:4b:c2:ed:51:bd:f1:37:f9: 60:a8:89:12:4d:fd:30:ab:c9:b2:46:b9:ee:38:42: ec:16:9c:32:17:e3:bb:41:c9:0b:2a:8d:fd:ef:af: a4:12:12:0a:ee:3f:a3:dd:6d:30:77:a9:a2:62:17: 53:8a:25:d0:b8:6a:ab:e7:30:2c:b9:f8:71:18:23: e1:a0:2d:e6:f1:5e:b9:f1:20:73:1e:f3:0a:02:62: 65:45:af:ba:5f:d8:5b:32:17:a8:b0:9d:91:4c:c9: 77:15:05:b8:2f:b1:1d:0a:43:23:6d:e9:f9:40:38: 8a:a0:cd:3b:43:74:42:66:a3:d7:f2:23:7f:59:1a: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:21:9F:B9:9C:7B:4C:53:DC:C0:4C:83:40:24:92:94:6B:B2:5E:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7aeab62e-dc0a-314c-873d-1a87e53fa67f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:d2:75:fb:b0:e4:63:b1:a7:f5:47:74:4f:5f:c2:9d:4a:b2: 26:49:4d:15:24:00:2f:14:ef:3a:5f:42:fe:74:62:ab:fe:d7: aa:fb:06:3f:a0:70:ad:05:6d:52:53:12:ce:d7:da:a9:b5:bd: 03:bb:24:09:25:31:ea:34:62:bf:1f:dc:00:96:35:31:bf:07: ec:ac:a8:31:ef:20:57:5a:3d:2f:70:67:27:3b:0f:bb:62:b7: ee:32:34:fa:3d:71:fc:dd:3f:32:7f:6f:3a:06:95:40:03:f8: 68:c4:b4:20:2e:be:99:b4:f8:f2:9a:1c:2d:59:da:76:8a:43: 0f:15:7f:03:80:26:64:0d:60:3d:d7:81:af:25:b9:dc:fc:d7: 37:3b:1c:78:ae:0a:09:9c:5c:78:22:e2:f3:2c:36:c6:de:35: 7c:a0:dc:ff:10:3a:eb:c7:6c:d4:99:64:0e:a6:73:9c:25:84: ed:94:f1:91:4f:88:7b:df:11:3d:6f:ac:39:0e:86:ea:36:be: 42:b9:ed:4d:dd:5b:bd:2a:4c:7b:0c:e4:a5:dc:f3:e1:81:7a: dd:f2:6b:1d:49:2d:df:18:8e:b6:d5:c2:6c:8c:cf:1b:8d:60: 2f:e3:de:e3:d2:08:93:fc:83:82:d7:1b:9d:02:3f:d9:48:aa: 47:3a:78:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3020wN4XmmJ6vtQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk NmU2MTFlYWMtOTNlNC00Y2ViLTg2NTgtNWZmMmY3ZmU3MDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz0dpv77XIPqBChBroMEwNMKmSSHl68dvLiy BSo8+TsRVAB/XxYc3U50ojBHI/hpGuWWjkpbTr2u9SXk7I3IdTj30DPnZ6hZcJ7d I4I1i5yXWJSwTq9QHtAcfr1+V2ppaazBqZpp5r0QnGs2C1G/p8cNlfCzKUOKEua+ SnJCS8LtUb3xN/lgqIkSTf0wq8myRrnuOELsFpwyF+O7QckLKo3976+kEhIK7j+j 3W0wd6miYhdTiiXQuGqr5zAsufhxGCPhoC3m8V658SBzHvMKAmJlRa+6X9hbMheo sJ2RTMl3FQW4L7EdCkMjben5QDiKoM07Q3RCZqPX8iN/WRphfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYhn7mce0xT3MBMg0AkkpRrsl5fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2FlYWI2MmUtZGMwYS0z MTRjLTg3M2QtMWE4N2U1M2ZhNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJlUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPSdfuw5GOxp/VHdE9fwp1KsiZJTRUkAC8U7zpfQv50Yqv+16r7Bj+g cK0FbVJTEs7X2qm1vQO7JAklMeo0Yr8f3ACWNTG/B+ysqDHvIFdaPS9wZyc7D7ti t+4yNPo9cfzdPzJ/bzoGlUAD+GjEtCAuvpm0+PKaHC1Z2naKQw8VfwOAJmQNYD3X ga8ludz81zc7HHiuCgmcXHgi4vMsNsbeNXyg3P8QOuvHbNSZZA6mc5wlhO2U8ZFP iHvfET1vrDkOhuo2vkK57U3dW70qTHsM5KXc8+GBet3yax1JLd8YjrbVwmyMzxuN YC/j3uPSCJP8g4LXG50CP9lIqkc6eKw= -----END CERTIFICATE-----Generated at Sat Jun 6 14:44:56 2026 by rpki-client