$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa File: d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa (raw, json) Hash identifier: q9fUpjCToizCbJCKUbOzPJmYTcSuiOV6yD/LClXES68= Subject key identifier: DD:7A:D2:29:D7:94:B6:EB:7D:69:23:5D:C9:22:B8:B4:92:D2:AB:01 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DF4DB4F63251072A35716E840 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:4f:63:25:10:72:a3:57:16:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=b2a7d97c-5350-4086-bb65-995c6b68f610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:55:39:eb:44:3f:f4:67:32:aa:12:dc:0d:60: 68:23:fd:a2:b8:d8:86:3c:9e:fe:9e:7d:01:cc:e5: c3:70:a9:5f:ef:46:a1:d7:5e:ac:02:25:cd:07:ac: 70:87:fc:33:00:60:09:ed:4b:1d:92:64:0f:14:3f: 62:d4:24:f2:e0:53:7a:f8:93:7a:8a:54:92:de:f3: 28:b3:11:40:98:fd:02:10:54:f7:33:48:59:49:5d: a9:40:51:bf:01:ce:3c:2d:41:97:55:99:cb:66:ac: 22:96:44:61:bd:68:6b:17:a1:bf:f4:c0:c9:30:20: 51:e9:c0:ca:67:07:a1:80:9d:fa:2f:74:89:14:e1: e3:b2:85:13:c4:bf:fc:a0:af:3b:0b:01:4e:09:56: 6f:34:49:a5:03:2e:83:c0:f7:a0:f0:df:ef:13:a6: 53:68:f0:82:5c:40:7f:a4:54:67:a0:58:66:58:3b: 77:c8:4a:bc:c2:f3:52:19:be:89:a7:3c:b6:f1:21: d7:8a:e6:89:6b:6d:2e:5f:b1:a2:b0:d7:70:27:bc: 51:85:1a:7d:06:f9:94:54:1c:81:ce:88:51:4a:18: 03:6d:68:67:3b:6b:06:9c:76:de:fe:e9:7a:0d:f3: 6e:69:13:26:ab:b2:f0:91:bb:01:6f:ce:e4:16:bd: 34:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7A:D2:29:D7:94:B6:EB:7D:69:23:5D:C9:22:B8:B4:92:D2:AB:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:01:30:c2:2f:97:31:3f:15:a3:90:b5:10:ed:49:3a:3a:52: 77:cc:b1:77:12:a2:cd:40:d1:ca:a6:c1:f0:0e:7e:8a:0f:c8: a5:5d:e9:c8:d4:0b:dd:69:d1:59:06:c6:34:5f:13:57:ee:5c: b4:52:e5:ee:fc:bf:2c:a9:5d:1e:74:e3:88:98:2e:b7:55:6d: d4:69:97:cb:6d:7b:4d:41:e6:ac:9c:17:bd:ad:0e:78:e8:9b: 1d:98:df:24:28:84:51:ad:9c:4c:72:56:7f:25:08:96:a3:11: 2e:17:1e:d9:38:c2:b6:62:c8:6f:d8:05:ab:ab:0d:db:e7:0e: 32:d6:63:5d:66:54:61:4d:fa:81:14:d2:9f:bd:ba:75:6b:38: 9b:5a:be:1d:ad:98:72:82:2a:61:4c:8c:8f:58:9a:f5:78:95: 85:da:54:bf:16:0b:ec:5a:a2:1e:3a:b7:b1:67:4a:bf:f1:41: c2:86:b6:8b:33:38:a1:a2:4f:d8:cb:60:b5:82:b3:21:66:7a: cd:f3:33:f8:dd:4a:42:23:a1:de:0e:63:f6:43:c2:df:96:8b: 98:90:63:83:08:4a:12:2f:96:92:77:a8:16:48:fc:b8:21:dc: 8c:92:e4:3b:59:10:b8:5e:0c:50:46:ab:50:b7:60:e7:94:1a: 47:70:47:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE30209jJRByo1cW6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk YjJhN2Q5N2MtNTM1MC00MDg2LWJiNjUtOTk1YzZiNjhmNjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1U560Q/9GcyqhLcDWBoI/2iuNiGPJ7+nn0B zOXDcKlf70ah116sAiXNB6xwh/wzAGAJ7UsdkmQPFD9i1CTy4FN6+JN6ilSS3vMo sxFAmP0CEFT3M0hZSV2pQFG/Ac48LUGXVZnLZqwilkRhvWhrF6G/9MDJMCBR6cDK ZwehgJ36L3SJFOHjsoUTxL/8oK87CwFOCVZvNEmlAy6DwPeg8N/vE6ZTaPCCXEB/ pFRnoFhmWDt3yEq8wvNSGb6Jpzy28SHXiuaJa20uX7GisNdwJ7xRhRp9BvmUVByB zohRShgDbWhnO2sGnHbe/ul6DfNuaRMmq7LwkbsBb87kFr00OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN160inXlLbrfWkjXckiuLSS0qsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDNiMzk5NmQtZWU4Ny0z MDc1LThiZWYtZjA5ZDFmN2IyMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4BMMIvlzE/FaOQtRDtSTo6UnfMsXcSos1A0cqmwfAOfooPyKVd6cjU C91p0VkGxjRfE1fuXLRS5e78vyypXR5044iYLrdVbdRpl8tte01B5qycF72tDnjo mx2Y3yQohFGtnExyVn8lCJajES4XHtk4wrZiyG/YBaurDdvnDjLWY11mVGFN+oEU 0p+9unVrOJtavh2tmHKCKmFMjI9YmvV4lYXaVL8WC+xaoh46t7FnSr/xQcKGtosz OKGiT9jLYLWCsyFmes3zM/jdSkIjod4OY/ZDwt+Wi5iQY4MIShIvlpJ3qBZI/Lgh 3IyS5DtZELheDFBGq1C3YOeUGkdwR88= -----END CERTIFICATE-----Generated at Sat Jun 6 14:46:45 2026 by rpki-client