$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8c384cf8-f47e-36b8-ad6e-dad7669a56ad.roa File: 8c384cf8-f47e-36b8-ad6e-dad7669a56ad.roa (raw, json) Hash identifier: qS9XZvpSOU8YoC3ManQFoumC8VCZTtqadmeU1OwlGmg= Subject key identifier: 80:BE:48:13:F8:DB:90:61:26:D8:80:C3:BB:63:1F:50:CF:98:6A:22 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DE2B5EF431AF4C4DFA97BE2A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8c384cf8-f47e-36b8-ad6e-dad7669a56ad.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.153.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:ef:43:1a:f4:c4:df:a9:7b:e2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=9f0d4669-e39e-4f3d-873e-b42264c79219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1d:be:36:82:76:94:55:61:40:15:3e:5d:12: e5:2d:17:e7:6c:60:38:26:93:9b:fe:1b:b3:fc:96: 69:5c:99:dc:e5:5d:ec:30:0e:02:ff:ed:16:f2:fb: 51:5f:3b:24:a6:c1:67:c4:1c:4c:6d:be:bd:1e:68: 0f:e7:bf:02:5f:08:ec:60:9b:38:76:98:41:12:c9: f5:92:7a:a3:f7:e5:fa:25:33:31:32:c1:25:1a:01: fc:77:43:2b:71:81:70:52:fa:2d:89:30:2e:11:a8: b9:ba:c1:b4:d2:45:86:e2:0d:c3:18:6b:35:b9:e2: 35:7e:ad:00:d6:8b:2c:2a:ee:47:95:ec:50:24:31: ce:95:b3:f1:3c:58:37:6c:eb:ce:f2:44:8f:1b:f0: 22:4f:9e:d7:04:d6:ab:c1:49:9a:98:8c:70:fe:0a: 0f:79:c3:36:2e:52:93:be:71:37:ef:56:55:af:8a: 27:db:ed:6e:e7:78:ed:c7:5f:0e:7f:58:01:9f:f4: 89:35:39:7c:af:cb:35:85:cd:97:05:a0:58:bf:91: 5c:21:05:aa:44:1b:c5:75:ee:80:21:4c:ae:6e:2b: 60:31:a2:ce:a5:3b:ae:7f:f1:8f:67:d9:6c:d5:e8: 82:1e:58:ee:ae:eb:57:a6:f5:71:b6:3f:e6:4f:ef: 1a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BE:48:13:F8:DB:90:61:26:D8:80:C3:BB:63:1F:50:CF:98:6A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8c384cf8-f47e-36b8-ad6e-dad7669a56ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:28:f0:03:31:a5:b6:f5:37:21:42:39:68:a5:6d:22:0a:2a: e5:72:72:1f:08:30:34:7b:6a:7d:cd:aa:5a:c3:23:a9:0f:43: 11:83:6e:fd:7a:2c:ff:9b:13:6e:c8:f6:4a:0d:86:77:c2:36: ce:46:87:3f:31:83:96:d6:20:01:75:4f:62:8a:67:f9:99:d8: 30:a5:9a:dd:4c:75:06:c5:06:14:29:a3:06:f5:ad:37:02:c1: 98:9a:a9:a8:6e:39:46:63:93:1c:22:94:96:1d:97:46:57:27: 89:c7:74:3a:96:a2:f7:48:a8:65:8c:59:94:0d:dc:b5:74:8b: 3a:04:82:b7:dd:04:ef:f2:cc:c8:13:4b:61:9e:94:88:ad:f3: 50:f4:23:6a:48:05:c3:b2:c1:30:4a:10:ab:29:c3:be:4e:4d: 7d:ba:07:f6:4f:63:5b:6e:43:d1:c9:ed:93:ef:64:45:6a:af: d9:09:50:2e:ae:f4:ea:1a:00:65:45:3e:6d:9f:d4:07:39:76: 35:f8:f3:35:91:c0:27:61:90:9a:c8:0a:ee:41:85:29:7c:e9: 89:25:21:06:f5:c3:51:3c:99:1f:1a:81:7c:d7:72:7e:13:e0: be:f2:f6:38:13:cb:b5:17:32:88:6d:ce:5f:dc:9c:f6:9b:f8: bd:b3:b2:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ite9DGvTE36l74qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk OWYwZDQ2NjktZTM5ZS00ZjNkLTg3M2UtYjQyMjY0Yzc5MjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR2+NoJ2lFVhQBU+XRLlLRfnbGA4JpOb/huz /JZpXJnc5V3sMA4C/+0W8vtRXzskpsFnxBxMbb69HmgP578CXwjsYJs4dphBEsn1 knqj9+X6JTMxMsElGgH8d0MrcYFwUvotiTAuEai5usG00kWG4g3DGGs1ueI1fq0A 1ossKu5HlexQJDHOlbPxPFg3bOvO8kSPG/AiT57XBNarwUmamIxw/goPecM2LlKT vnE371ZVr4on2+1u53jtx18Of1gBn/SJNTl8r8s1hc2XBaBYv5FcIQWqRBvFde6A IUyubitgMaLOpTuuf/GPZ9ls1eiCHljurutXpvVxtj/mT+8aYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIC+SBP425BhJtiAw7tjH1DPmGoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGMzODRjZjgtZjQ3ZS0z NmI4LWFkNmUtZGFkNzY2OWE1NmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwo8AMxpbb1NyFCOWilbSIKKuVych8IMDR7an3NqlrDI6kPQxGDbv16 LP+bE27I9koNhnfCNs5Ghz8xg5bWIAF1T2KKZ/mZ2DClmt1MdQbFBhQpowb1rTcC wZiaqahuOUZjkxwilJYdl0ZXJ4nHdDqWovdIqGWMWZQN3LV0izoEgrfdBO/yzMgT S2GelIit81D0I2pIBcOywTBKEKspw75OTX26B/ZPY1tuQ9HJ7ZPvZEVqr9kJUC6u 9OoaAGVFPm2f1Ac5djX48zWRwCdhkJrICu5BhSl86YklIQb1w1E8mR8agXzXcn4T 4L7y9jgTy7UXMohtzl/cnPab+L2zssk= -----END CERTIFICATE-----Generated at Sat Jun 6 14:47:58 2026 by rpki-client