$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7dc95a14-2a26-334d-b6a8-873f3200a247.roa File: 7dc95a14-2a26-334d-b6a8-873f3200a247.roa (raw, json) Hash identifier: hN1x/2iKuqFehmdDxNA+ELMII7nUE3XJyFAOkZXgi0w= Subject key identifier: 5D:02:6A:91:4A:36:66:03:08:07:B9:0F:E2:02:4B:4E:59:70:7D:99 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DF4DB4B57BD1FD53060A7F500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7dc95a14-2a26-334d-b6a8-873f3200a247.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:4b:57:bd:1f:d5:30:60:a7:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=28593606-aa87-4146-ad10-5bee84880401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4b:df:33:20:7e:98:c5:e4:81:d2:fd:02:d0: 8c:3b:81:5b:06:0f:94:5e:c2:2b:8e:cb:f1:88:b6: a7:95:ef:c4:48:38:db:f0:89:b7:94:b5:e5:14:c1: 09:d2:25:f7:10:bc:ed:c4:69:67:0b:2a:6a:26:e6: 35:df:87:60:2c:b8:ad:34:e5:19:f3:5f:1e:e0:a6: 86:bf:f1:6f:08:c6:78:54:bf:cf:32:a6:2a:55:46: c0:f7:7a:0b:4c:d7:dd:00:49:45:fa:cd:fe:cd:7c: 1f:33:d3:61:3c:f6:24:ba:64:43:c6:fe:37:dd:89: dc:1e:05:17:12:de:36:4f:29:0f:00:bf:3b:51:2c: f5:81:88:01:f8:d2:7e:47:16:71:cd:30:af:12:da: 2e:ca:4e:8a:23:a0:56:c4:5d:2b:ef:18:33:a3:6e: bd:f3:e1:22:2c:3b:72:6f:df:d3:a0:f4:6a:7b:ea: d7:ae:dd:e1:cd:cf:af:73:a9:3d:12:77:79:4f:8d: df:52:cb:de:ae:04:4f:7e:73:6c:f5:66:b4:0e:a8: 33:f0:c3:38:77:d5:a8:aa:16:9d:26:22:44:9b:ec: 9d:9f:b7:79:c3:cb:55:25:27:e1:a8:b6:e4:7c:18: 6b:30:89:75:67:69:e3:a6:7d:9b:35:fe:14:2b:5d: fb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:02:6A:91:4A:36:66:03:08:07:B9:0F:E2:02:4B:4E:59:70:7D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7dc95a14-2a26-334d-b6a8-873f3200a247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:6c:e5:e2:ce:d7:47:0e:dd:c1:dd:9f:b3:6a:c4:9a:3d:9a: 84:ab:6c:67:e7:e9:72:52:3e:aa:f8:3f:55:7f:cd:26:52:54: bc:b5:ae:ef:10:a4:ff:f2:8c:88:47:c5:50:62:99:ab:2d:43: 1e:27:cf:7f:fe:b4:ed:ec:0f:41:f3:96:ae:a1:95:cf:bb:c0: 4d:a8:73:f1:35:b2:a9:02:03:1a:c1:7d:3b:23:4d:80:da:da: 08:d5:b6:59:60:7b:28:b1:7e:79:27:a1:9e:e1:d4:e9:b5:1b: 62:0b:35:25:08:f5:f3:28:48:eb:62:14:86:ee:bf:0f:b8:4f: 92:7f:8d:0f:2c:6c:b0:78:e0:d9:7e:5d:f3:79:73:91:74:f8: 75:9f:1d:ce:8d:ba:45:ec:30:87:66:a1:5c:34:54:9d:14:74: a6:6b:2b:43:f6:62:96:12:d3:a3:72:48:7d:ce:09:b3:ab:76: af:eb:23:40:27:a5:3e:4c:bb:a9:b1:91:7d:53:13:f4:35:4d: c5:47:02:90:d9:30:68:99:fd:0e:9a:2a:93:72:cd:e8:99:54: 07:4b:4e:75:c9:47:86:bd:68:ae:3a:58:6e:51:ac:0d:fc:a1: e4:90:b8:9b:6a:61:0c:02:7b:39:ff:ab:89:e6:33:40:19:f8: 79:53:f8:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3020tXvR/VMGCn9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk Mjg1OTM2MDYtYWE4Ny00MTQ2LWFkMTAtNWJlZTg0ODgwNDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkvfMyB+mMXkgdL9AtCMO4FbBg+UXsIrjsvx iLanle/ESDjb8Im3lLXlFMEJ0iX3ELztxGlnCypqJuY134dgLLitNOUZ818e4KaG v/FvCMZ4VL/PMqYqVUbA93oLTNfdAElF+s3+zXwfM9NhPPYkumRDxv433YncHgUX Et42TykPAL87USz1gYgB+NJ+RxZxzTCvEtouyk6KI6BWxF0r7xgzo2698+EiLDty b9/ToPRqe+rXrt3hzc+vc6k9End5T43fUsvergRPfnNs9Wa0Dqgz8MM4d9Woqhad JiJEm+ydn7d5w8tVJSfhqLbkfBhrMIl1Z2njpn2bNf4UK137+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0CapFKNmYDCAe5D+ICS05ZcH2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2RjOTVhMTQtMmEyNi0z MzRkLWI2YTgtODczZjMyMDBhMjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFps5eLO10cO3cHdn7NqxJo9moSrbGfn6XJSPqr4P1V/zSZSVLy1ru8Q pP/yjIhHxVBimastQx4nz3/+tO3sD0Hzlq6hlc+7wE2oc/E1sqkCAxrBfTsjTYDa 2gjVtllgeyixfnknoZ7h1Om1G2ILNSUI9fMoSOtiFIbuvw+4T5J/jQ8sbLB44Nl+ XfN5c5F0+HWfHc6NukXsMIdmoVw0VJ0UdKZrK0P2YpYS06NySH3OCbOrdq/rI0An pT5Mu6mxkX1TE/Q1TcVHApDZMGiZ/Q6aKpNyzeiZVAdLTnXJR4a9aK46WG5RrA38 oeSQuJtqYQwCezn/q4nmM0AZ+HlT+Eg= -----END CERTIFICATE-----Generated at Sat Jun 6 14:46:49 2026 by rpki-client