$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823f884b-6301-377e-8d28-5834d52ead5c.roa File: 823f884b-6301-377e-8d28-5834d52ead5c.roa (raw, json) Hash identifier: mk+l0x3hCI8FI79d6xVRHdbSe+MUp+EAnAk9GRayjUo= Subject key identifier: AE:7E:63:C6:45:E7:3E:4A:51:F7:54:C2:E5:51:9C:87:0F:FF:D7:F8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DF4DB56A719EDE196BB5ECD00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823f884b-6301-377e-8d28-5834d52ead5c.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:56:a7:19:ed:e1:96:bb:5e:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=adffdb1f-dd03-4611-b872-519b77ef37e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:59:65:e0:c6:f6:13:be:37:33:c9:4d:37:54: 99:ab:45:6f:aa:3c:1a:03:fd:ce:d3:a2:83:1d:a6: c9:b5:49:86:b9:76:b8:25:c4:67:38:fd:20:7f:97: 11:9f:29:6f:d9:8e:23:d9:22:9b:7e:78:97:82:85: d0:28:9a:60:88:e1:06:15:fc:ce:52:7c:b2:97:5a: fc:fd:a7:0a:84:4f:9b:16:5a:b4:86:6a:ec:7e:ee: ed:16:d8:33:0a:8e:66:87:c2:fb:fa:02:c6:ca:ba: a8:2a:55:ae:30:5c:65:2b:f0:00:67:9a:52:5b:1a: ff:4b:c6:b5:49:27:5b:6a:dd:c5:57:34:bd:4a:59: 95:8d:75:79:b4:7a:f6:52:84:af:d2:77:36:e8:75: 08:5c:32:e4:bc:1e:48:6a:8f:90:44:88:92:5c:4b: 52:cb:e7:4b:2b:4f:8c:c7:0f:3a:f3:51:94:cb:da: 45:bb:07:ca:6b:a2:83:aa:35:ca:b3:a0:26:db:86: 56:49:2a:de:fc:b2:0d:1b:b9:18:f6:1d:e0:44:00: 0b:b2:12:26:8d:5d:46:45:41:fc:7c:42:d3:ae:4a: ac:52:0f:bd:73:c4:d7:3a:34:ea:52:f3:26:e6:4e: 59:a1:0c:df:68:f6:5d:63:ab:6c:a5:7c:e0:83:c5: b1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7E:63:C6:45:E7:3E:4A:51:F7:54:C2:E5:51:9C:87:0F:FF:D7:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823f884b-6301-377e-8d28-5834d52ead5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:11:10:b7:1d:7a:d7:7c:a0:53:43:47:f9:7f:fe:ab:84:e5: 11:29:d7:ed:f3:8a:4d:17:47:e0:30:1b:28:cf:1b:00:9e:a6: 9f:21:d2:8d:a4:6a:db:39:c2:6c:4d:85:35:33:12:43:56:1c: 4e:d8:fe:ce:ac:51:92:fc:ae:9a:34:89:45:15:25:1e:65:51: 6d:f8:1b:b1:d6:dd:4e:a9:54:19:21:b3:a2:b1:b9:76:71:03: 68:7b:d4:2a:98:c3:9a:92:1e:a7:7a:6e:2a:ee:80:af:6f:36: b9:9d:23:63:9a:8f:59:9a:dd:a4:fa:7c:f7:de:a3:22:43:42: 1e:70:c3:11:7f:b2:dc:2c:52:7b:4e:c2:20:13:5e:b8:3a:57: c5:48:9c:e4:a0:2c:4a:91:0c:d9:d9:a6:ef:12:43:ab:3b:aa: be:3a:18:a8:06:6b:09:b1:61:65:01:79:86:df:99:5e:7e:c6: c9:c0:47:c4:77:b0:ce:9a:38:92:e0:6f:a7:72:60:43:72:02: 43:28:a2:9e:77:ee:2b:fe:47:d7:c9:32:e1:25:95:20:3e:69: 43:52:3b:7f:23:9a:15:fd:f1:8c:26:46:d8:48:3d:c6:b5:51: c5:88:f6:53:22:c4:61:b1:3a:20:6d:4a:bc:0e:04:5a:fa:16: e5:f2:8e:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3021anGe3hlrtezQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk YWRmZmRiMWYtZGQwMy00NjExLWI4NzItNTE5Yjc3ZWYzN2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFll4Mb2E743M8lNN1SZq0VvqjwaA/3O06KD HabJtUmGuXa4JcRnOP0gf5cRnylv2Y4j2SKbfniXgoXQKJpgiOEGFfzOUnyyl1r8 /acKhE+bFlq0hmrsfu7tFtgzCo5mh8L7+gLGyrqoKlWuMFxlK/AAZ5pSWxr/S8a1 SSdbat3FVzS9SlmVjXV5tHr2UoSv0nc26HUIXDLkvB5Iao+QRIiSXEtSy+dLK0+M xw8681GUy9pFuwfKa6KDqjXKs6Am24ZWSSre/LING7kY9h3gRAALshImjV1GRUH8 fELTrkqsUg+9c8TXOjTqUvMm5k5ZoQzfaPZdY6tspXzgg8WxtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5+Y8ZF5z5KUfdUwuVRnIcP/9f4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODIzZjg4NGItNjMwMS0z NzdlLThkMjgtNTgzNGQ1MmVhZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACERELcdetd8oFNDR/l//quE5REp1+3zik0XR+AwGyjPGwCepp8h0o2k ats5wmxNhTUzEkNWHE7Y/s6sUZL8rpo0iUUVJR5lUW34G7HW3U6pVBkhs6KxuXZx A2h71CqYw5qSHqd6birugK9vNrmdI2Oaj1ma3aT6fPfeoyJDQh5wwxF/stwsUntO wiATXrg6V8VInOSgLEqRDNnZpu8SQ6s7qr46GKgGawmxYWUBeYbfmV5+xsnAR8R3 sM6aOJLgb6dyYENyAkMoop537iv+R9fJMuEllSA+aUNSO38jmhX98YwmRthIPca1 UcWI9lMixGGxOiBtSrwOBFr6FuXyjrw= -----END CERTIFICATE-----Generated at Sat Jun 6 14:47:43 2026 by rpki-client