$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9f81f32d-852d-3901-a97d-2fb16a181926.roa File: 9f81f32d-852d-3901-a97d-2fb16a181926.roa (raw, json) Hash identifier: xyeiIg5ObU9wLMaDtEg45xTRl1suyHUlD8iDdvROwmw= Subject key identifier: AE:A0:DB:D6:C6:F5:DD:C7:6B:7C:6E:9C:92:2E:6E:38:99:62:D2:24 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DF4DB92681719716BFDCB0F60 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9f81f32d-852d-3901-a97d-2fb16a181926.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:92:68:17:19:71:6b:fd:cb:0f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=60eda036-b2e0-45e9-b252-5bee13f92aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ee:a0:c2:df:a8:20:ee:96:20:52:79:35:15: 9b:d8:cb:50:76:dd:9a:f1:59:f2:10:92:7d:00:e2: dc:69:43:08:92:72:ac:bf:8a:78:71:48:95:c5:2e: 87:e1:04:2b:79:8d:ad:72:03:95:dc:0c:08:8a:46: 77:34:e6:30:a8:3b:f3:1a:f7:5e:07:13:d5:ad:27: f0:ed:38:62:96:2d:ef:aa:33:4d:9b:73:de:fd:83: ff:ce:0c:1b:f5:ff:47:1b:02:31:17:99:36:fa:22: 7f:4b:50:da:7c:c1:b1:a1:22:aa:1d:0c:7e:90:96: 90:d0:ba:ae:d3:30:d6:02:ae:ff:62:a3:97:73:3f: ef:82:38:2c:06:a6:e7:91:a9:80:fa:fc:d5:76:ce: dd:90:72:84:3d:d8:cc:dc:8b:0c:75:ee:fb:43:c5: 76:2f:43:b6:a2:3d:1c:18:49:03:67:fc:b0:d1:dc: 18:b3:c6:eb:61:21:cc:66:a3:3e:77:e5:b3:07:29: 83:ff:9a:6a:23:44:61:d4:98:a1:ec:87:f8:5e:b1: 90:3f:2d:ec:25:47:0f:57:9b:d2:0f:2a:6b:8a:60: 3a:00:ac:b3:bb:ed:64:9e:98:c8:e6:0c:4f:17:bf: 22:36:c0:12:69:46:cd:53:0c:fa:03:7a:b7:6a:f5: 84:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A0:DB:D6:C6:F5:DD:C7:6B:7C:6E:9C:92:2E:6E:38:99:62:D2:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9f81f32d-852d-3901-a97d-2fb16a181926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:65:bd:e8:2f:f4:7a:5c:a9:83:f3:27:be:63:75:2b:21:ff: 9e:2c:40:1f:94:4f:60:f5:c0:55:77:2f:d5:22:90:f7:0e:86: 76:af:2c:f1:99:67:f6:75:2f:be:f3:b9:56:41:27:92:19:85: c7:1c:0a:6e:16:8c:63:76:03:3d:23:54:5d:84:cf:d9:93:b5: 29:f3:dc:23:15:dc:39:0c:fd:39:a1:41:92:5b:c9:1d:24:f6: b8:f0:41:f9:87:9a:2e:14:c9:0b:9e:8a:31:dc:ad:e6:e6:2f: 55:0b:81:a3:90:c5:28:8a:50:c1:46:b6:f1:db:36:ec:56:1f: 87:2e:64:a9:cc:cc:f9:4f:e2:3e:8a:ea:74:a6:5b:ab:86:a6: 60:e4:30:65:1f:6c:63:65:6f:b2:87:d9:3d:a1:0f:05:31:44: 57:d8:a5:a3:bf:a1:45:54:9d:e9:bf:f4:00:0d:a6:02:73:d8: b6:65:c2:03:e7:c3:81:35:d4:34:ae:54:89:51:2b:74:a3:4a: c9:32:34:87:e8:40:23:ae:b4:39:4f:81:96:3a:19:33:7c:9a: 90:58:5a:15:74:f5:47:eb:10:d0:59:cb:ab:59:83:d8:e2:b8: 47:14:bd:e5:37:27:23:4e:30:c9:03:23:85:f5:21:21:c8:96: 8f:df:64:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3025JoFxlxa/3LD2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk NjBlZGEwMzYtYjJlMC00NWU5LWIyNTItNWJlZTEzZjkyYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue6gwt+oIO6WIFJ5NRWb2MtQdt2a8VnyEJJ9 AOLcaUMIknKsv4p4cUiVxS6H4QQreY2tcgOV3AwIikZ3NOYwqDvzGvdeBxPVrSfw 7Thili3vqjNNm3Pe/YP/zgwb9f9HGwIxF5k2+iJ/S1DafMGxoSKqHQx+kJaQ0Lqu 0zDWAq7/YqOXcz/vgjgsBqbnkamA+vzVds7dkHKEPdjM3IsMde77Q8V2L0O2oj0c GEkDZ/yw0dwYs8brYSHMZqM+d+WzBymD/5pqI0Rh1Jih7If4XrGQPy3sJUcPV5vS DyprimA6AKyzu+1knpjI5gxPF78iNsASaUbNUwz6A3q3avWEmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6g29bG9d3Ha3xunJIubjiZYtIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWY4MWYzMmQtODUyZC0z OTAxLWE5N2QtMmZiMTZhMTgxOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5lvegv9HpcqYPzJ75jdSsh/54sQB+UT2D1wFV3L9UikPcOhnavLPGZ Z/Z1L77zuVZBJ5IZhcccCm4WjGN2Az0jVF2Ez9mTtSnz3CMV3DkM/TmhQZJbyR0k 9rjwQfmHmi4UyQueijHcrebmL1ULgaOQxSiKUMFGtvHbNuxWH4cuZKnMzPlP4j6K 6nSmW6uGpmDkMGUfbGNlb7KH2T2hDwUxRFfYpaO/oUVUnem/9AANpgJz2LZlwgPn w4E11DSuVIlRK3SjSskyNIfoQCOutDlPgZY6GTN8mpBYWhV09UfrENBZy6tZg9ji uEcUveU3JyNOMMkDI4X1ISHIlo/fZBM= -----END CERTIFICATE-----Generated at Sat Jun 6 14:46:44 2026 by rpki-client