$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ac33e084-14c8-3912-b024-0e8df49402d3.roa File: ac33e084-14c8-3912-b024-0e8df49402d3.roa (raw, json) Hash identifier: tDSqbQ3RfOT2uVIPlCnBkLBu/9+NbiIdeazmnhq7cIs= Subject key identifier: 61:1A:C4:27:E7:0E:9F:58:2F:D5:57:1C:6B:EE:6A:89:DB:6B:2D:FA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DE2B5D3FF8B8E952DA9B5F0C8 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ac33e084-14c8-3912-b024-0e8df49402d3.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.153.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:d3:ff:8b:8e:95:2d:a9:b5:f0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=4b16ce2f-f9e0-4b1c-8496-0aa55a7b5ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e2:04:f9:b3:97:84:f4:26:f4:aa:94:bc:26: 29:a6:30:c9:18:f7:d3:b7:e0:38:3e:02:ef:2d:0d: 3e:43:8a:22:d9:8a:b7:0e:60:9a:41:e1:2e:3a:11: f8:6a:ed:c1:63:57:22:ac:ab:1e:d0:dc:f3:0e:54: 89:f6:c8:33:a1:d0:2b:10:3b:d2:ba:8e:a9:82:d3: 0e:58:86:64:96:05:8d:1c:e1:9c:51:f0:95:82:2a: 84:a6:58:0d:33:b5:7c:55:c4:c7:d1:b1:d4:fa:38: 29:b6:8e:76:c7:7f:ec:3b:c5:da:5d:76:b7:8f:aa: 07:7c:66:b8:36:8e:d7:4a:ac:a5:d8:08:29:7f:d0: a0:54:17:58:ad:19:0d:a5:5c:17:7c:9f:55:bd:32: 1d:4d:78:2f:ff:87:d1:0a:60:95:f6:ce:24:72:e5: 09:28:4d:c5:a6:4a:83:b6:94:22:da:a4:80:ae:6e: 88:59:db:83:34:07:5a:35:11:5c:eb:a2:d1:57:54: 23:9f:27:47:cd:cb:14:dc:98:72:0d:4d:d0:88:29: ca:08:b6:9a:a8:7a:02:a2:9a:ed:70:1c:9c:f2:b5: a1:1d:4e:55:fc:64:e3:6b:4c:c9:81:fb:c9:97:8d: 64:b8:96:b8:67:0f:ef:c7:4c:8d:3f:51:a9:00:69: c5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1A:C4:27:E7:0E:9F:58:2F:D5:57:1C:6B:EE:6A:89:DB:6B:2D:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ac33e084-14c8-3912-b024-0e8df49402d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:69:2f:36:64:b7:23:b3:8e:fb:dc:31:50:a6:f5:37:50:41: 28:81:2f:17:09:28:7f:b1:e6:12:65:f7:34:31:81:48:83:5b: e8:53:5b:e1:e9:f3:d2:26:e7:8c:66:c2:be:93:2f:ff:0a:63: 8f:05:a3:8c:eb:36:80:3e:13:4c:3e:6e:5d:63:4a:ff:c4:c8: a4:fe:35:6b:12:ba:17:7d:65:07:22:6a:9b:bd:ca:25:6f:26: 4d:ca:8b:04:7f:c5:c0:7f:9a:e4:dd:d2:fa:89:19:87:9a:8e: 78:53:fd:c9:40:e0:ed:e9:a4:e5:ae:5a:76:5d:a7:e9:89:02: 00:22:1a:dd:89:e9:1d:78:e2:88:5e:96:23:ee:80:8c:4f:7a: 6d:ba:fe:ff:aa:fc:42:4f:aa:33:b2:55:57:5c:e3:2d:d1:68: 58:80:6c:3d:14:e0:ac:7d:c2:ac:73:09:62:19:fe:fb:6b:f0: de:c4:26:09:14:47:aa:f6:60:99:51:20:cc:0f:16:4a:76:01: 27:0b:43:fd:a2:12:b5:17:21:cb:10:4f:32:11:30:b9:ca:ff: f1:1d:f8:32:af:70:18:da:3b:2e:f8:22:a7:a3:9a:a1:bf:40: 6c:2b:86:f6:27:1b:c7:cb:6c:60:a0:b2:67:22:21:6d:d1:f8: 83:00:74:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3itdP/i46VLam18MgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk NGIxNmNlMmYtZjllMC00YjFjLTg0OTYtMGFhNTVhN2I1YWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuIE+bOXhPQm9KqUvCYppjDJGPfTt+A4PgLv LQ0+Q4oi2Yq3DmCaQeEuOhH4au3BY1cirKse0NzzDlSJ9sgzodArEDvSuo6pgtMO WIZklgWNHOGcUfCVgiqEplgNM7V8VcTH0bHU+jgpto52x3/sO8XaXXa3j6oHfGa4 No7XSqyl2Agpf9CgVBdYrRkNpVwXfJ9VvTIdTXgv/4fRCmCV9s4kcuUJKE3FpkqD tpQi2qSArm6IWduDNAdaNRFc66LRV1QjnydHzcsU3JhyDU3QiCnKCLaaqHoCoprt cByc8rWhHU5V/GTja0zJgfvJl41kuJa4Zw/vx0yNP1GpAGnFHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEaxCfnDp9YL9VXHGvuaonbay36MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWMzM2UwODQtMTRjOC0z OTEyLWIwMjQtMGU4ZGY0OTQwMmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRpLzZktyOzjvvcMVCm9TdQQSiBLxcJKH+x5hJl9zQxgUiDW+hTW+Hp 89Im54xmwr6TL/8KY48Fo4zrNoA+E0w+bl1jSv/EyKT+NWsSuhd9ZQciapu9yiVv Jk3KiwR/xcB/muTd0vqJGYeajnhT/clA4O3ppOWuWnZdp+mJAgAiGt2J6R144ohe liPugIxPem26/v+q/EJPqjOyVVdc4y3RaFiAbD0U4Kx9wqxzCWIZ/vtr8N7EJgkU R6r2YJlRIMwPFkp2AScLQ/2iErUXIcsQTzIRMLnK//Ed+DKvcBjaOy74IqejmqG/ QGwrhvYnG8fLbGCgsmciIW3R+IMAdI0= -----END CERTIFICATE-----Generated at Sat Jun 6 14:46:31 2026 by rpki-client