$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa File: 9682b18d-084f-339c-8a00-ef1f480f78c1.roa (raw, json) Hash identifier: Y6BniUTTQ/e6W3sPjRGE+IP94C0575y3J/46pj/Jr2o= Subject key identifier: FE:FE:11:55:82:9F:8D:C2:E8:47:52:4F:B3:E5:4A:F6:34:66:DF:FA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DDD207C65BFB886A05D485F80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa Signing time: Sun 17 May 2026 13:00:32 +0000 ROA not before: Sun 17 May 2026 13:00:32 +0000 ROA not after: Sat 15 Aug 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.153.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dd:20:7c:65:bf:b8:86:a0:5d:48:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 17 13:00:32 2026 GMT Not After : Aug 15 13:00:32 2026 GMT Subject: CN=888e5502-8e2d-439e-9c4b-5d0fd53b6eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d4:cc:f5:42:94:7b:ff:59:17:40:25:39:74: 6d:56:40:b2:9e:9f:39:95:cb:76:9b:55:fb:f5:5f: d5:c3:e7:c4:8b:be:e2:a5:df:48:64:07:61:49:e6: 27:81:88:0b:7f:63:b8:f9:c8:ef:f7:a5:07:1d:fa: 2c:f6:a8:6d:03:c9:48:5e:b6:28:91:c0:6e:4d:88: 1a:d0:f5:3e:eb:2c:be:7d:8f:6e:95:87:86:7f:af: ef:fb:2a:cf:07:13:70:01:50:a9:f1:53:d2:db:f4: ee:da:e1:87:8e:fd:10:66:0e:df:f2:f6:ee:79:f0: 86:70:77:61:a1:a1:e7:48:41:db:9e:16:f6:c2:80: 32:b0:4c:66:79:2a:f2:4d:05:49:a4:0e:db:5a:e8: 4e:8e:3b:52:63:a3:05:72:73:fe:fe:75:e8:5b:9e: 59:a7:ab:ca:70:26:2c:c9:40:9a:0e:99:35:5f:59: 83:9e:b3:65:31:43:6c:4d:ce:32:d6:34:d0:c8:7a: d6:57:aa:07:e0:82:e2:26:f3:91:49:e1:18:ff:c8: 4a:3e:29:7f:bb:e7:7d:fb:28:9b:92:7a:c3:73:be: 6a:0f:6b:ad:52:09:c9:e8:fb:fd:b8:35:72:06:cb: d9:26:62:e4:cd:b5:cf:19:b4:45:66:89:33:8b:e5: 00:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FE:11:55:82:9F:8D:C2:E8:47:52:4F:B3:E5:4A:F6:34:66:DF:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:2e:32:44:39:cb:4d:0c:7f:db:7f:85:85:9f:df:52:8a:b2: 15:e5:bb:7d:0f:02:44:f3:3c:57:77:19:e7:d8:3e:74:c6:9c: 11:39:26:0d:45:c7:43:48:d5:58:9b:df:9e:79:4e:c8:f5:be: fd:e1:12:bd:4b:f9:ab:3a:10:3f:3d:32:2b:73:c8:f1:82:1e: b7:d7:4e:15:2e:23:cd:d0:61:b0:e6:d8:82:8f:8e:7a:b1:ed: da:d9:d7:7e:18:e1:4e:6f:4f:b2:f2:21:ad:79:9f:4a:db:88: 33:eb:2f:52:08:0e:47:e4:e2:ce:5b:86:f3:29:d3:6e:b5:f6: 59:e8:b9:37:07:d1:15:9e:9a:b7:b7:65:be:27:bc:3c:d6:69: 73:e8:08:3e:01:b3:97:f9:79:b8:07:40:6b:17:c3:a3:0d:5c: d3:0a:1e:bf:2b:0f:28:e4:5f:62:5d:1f:f7:2e:30:ba:8c:4b: f8:72:32:8d:ca:3c:23:9a:b7:9f:c2:24:e7:55:bb:d3:35:8e: 63:16:b3:37:a8:0b:86:06:86:a0:18:32:60:25:53:53:27:49: ca:7d:9f:43:17:fc:81:99:e0:9e:ba:39:42:2d:bd:63:6e:e3: 91:58:6f:b1:96:12:df:df:4e:22:21:ac:9c:3b:49:e0:db:f3: 25:8f:cc:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3dIHxlv7iGoF1IX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUxNzEzMDAzMloXDTI2MDgxNTEzMDAzMlowLzEtMCsGA1UEAxMk ODg4ZTU1MDItOGUyZC00MzllLTljNGItNWQwZmQ1M2I2ZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9TM9UKUe/9ZF0AlOXRtVkCynp85lct2m1X7 9V/Vw+fEi77ipd9IZAdhSeYngYgLf2O4+cjv96UHHfos9qhtA8lIXrYokcBuTYga 0PU+6yy+fY9ulYeGf6/v+yrPBxNwAVCp8VPS2/Tu2uGHjv0QZg7f8vbuefCGcHdh oaHnSEHbnhb2woAysExmeSryTQVJpA7bWuhOjjtSY6MFcnP+/nXoW55Zp6vKcCYs yUCaDpk1X1mDnrNlMUNsTc4y1jTQyHrWV6oH4ILiJvORSeEY/8hKPil/u+d9+yib knrDc75qD2utUgnJ6Pv9uDVyBsvZJmLkzbXPGbRFZokzi+UAkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7+EVWCn43C6EdST7PlSvY0Zt/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTY4MmIxOGQtMDg0Zi0z MzljLThhMDAtZWYxZjQ4MGY3OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwuMkQ5y00Mf9t/hYWf31KKshXlu30PAkTzPFd3GefYPnTGnBE5Jg1F x0NI1Vib3555Tsj1vv3hEr1L+as6ED89MitzyPGCHrfXThUuI83QYbDm2IKPjnqx 7drZ134Y4U5vT7LyIa15n0rbiDPrL1IIDkfk4s5bhvMp02619lnouTcH0RWemre3 Zb4nvDzWaXPoCD4Bs5f5ebgHQGsXw6MNXNMKHr8rDyjkX2JdH/cuMLqMS/hyMo3K PCOat5/CJOdVu9M1jmMWszeoC4YGhqAYMmAlU1MnScp9n0MX/IGZ4J66OUItvWNu 45FYb7GWEt/fTiIhrJw7SeDb8yWPzC0= -----END CERTIFICATE-----Generated at Sat Jun 6 14:46:52 2026 by rpki-client