$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9787ae2-b78b-316e-910a-4dea629b14f6.roa File: d9787ae2-b78b-316e-910a-4dea629b14f6.roa (raw, json) Hash identifier: Wd4f+rhzqbaIglXKKwFxUgwl3V9EEfvTSE8Mq/wQduk= Subject key identifier: F7:E5:29:4C:82:44:59:9D:BD:53:98:54:77:66:54:31:DF:77:C5:73 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DE2B5D9C43F2218C91A03E080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9787ae2-b78b-316e-910a-4dea629b14f6.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.153.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:d9:c4:3f:22:18:c9:1a:03:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=5b568737-45dd-486d-be0c-70369bfc5474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:0d:d6:5e:88:58:05:2c:82:7e:02:ad:4c: 98:06:4a:be:84:54:43:2c:53:90:e4:dc:62:4e:b2: b9:cf:49:1a:a1:1c:fd:0d:b9:24:b9:05:43:83:9e: 68:ca:1e:35:0d:2e:54:97:9b:95:50:7c:47:35:59: dd:bc:e1:ee:bc:bd:f3:38:1b:77:68:3c:89:94:7e: 0a:96:b1:f2:39:af:3f:8e:23:eb:e3:e2:46:49:71: a7:85:2d:3b:11:b1:06:56:90:88:4e:7d:95:ec:7d: de:a5:03:06:c7:8c:7c:05:28:eb:35:16:68:bc:c9: b6:76:79:c3:ea:4a:99:d5:4a:e3:be:83:6f:1f:a2: 6a:8b:65:0b:f5:8a:fb:91:87:d5:dc:83:37:04:e2: 74:50:ff:1c:63:07:bb:52:15:ae:1b:83:92:64:6c: 43:1d:83:47:83:c2:15:0c:3f:12:59:f0:ee:2d:68: d7:0c:1a:b6:86:47:e0:49:95:75:7d:9c:43:09:cc: 18:4a:33:55:a2:58:83:89:e1:75:4a:f7:61:9b:15: 95:b2:5f:f1:64:ec:45:99:ea:56:02:b1:c9:0c:33: 66:8b:fe:04:84:b4:47:25:b8:ea:85:e5:75:ed:23: 5c:d4:59:ff:b7:61:35:6f:14:79:df:71:7d:bb:92: 56:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E5:29:4C:82:44:59:9D:BD:53:98:54:77:66:54:31:DF:77:C5:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9787ae2-b78b-316e-910a-4dea629b14f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:75:c4:92:60:8b:f1:4c:a2:e5:94:63:1d:ac:ef:50:16:d3: 61:38:fd:7c:61:77:46:5c:7c:3d:7a:54:52:47:3f:e8:5b:9e: 5c:ad:17:fd:da:4f:4f:b5:ad:54:2c:3b:f4:bb:55:ea:fb:7f: 3c:e5:61:92:66:27:10:0e:b6:ac:f6:40:ba:6e:80:21:5c:42: 36:19:41:23:22:cd:fa:f8:0b:15:7a:44:98:cf:62:3d:42:d1: 6d:4f:27:37:e6:10:27:ed:eb:29:4e:6c:24:50:22:d8:58:7a: cc:e2:f2:2f:0f:04:ce:4e:e5:bc:27:5c:75:41:ab:e1:16:ff: 0b:34:2c:dd:11:da:ee:98:b5:e4:30:c1:72:4b:eb:00:34:4a: 82:f8:09:20:3a:01:8f:fc:dc:aa:37:55:9e:58:8d:ed:55:9e: c7:da:90:bb:c2:ff:81:7d:d2:62:31:a1:d5:24:3e:7b:7b:fb: 00:f2:0d:80:79:a0:53:9f:38:7e:e6:be:ba:44:cf:db:b7:1c: f6:e6:3e:7b:3d:b2:4b:0f:6a:e9:29:4f:01:bb:eb:f8:e9:a7: f5:17:81:82:ee:5b:55:25:bd:0c:92:d9:ba:95:8a:71:24:27: 67:c3:e3:a4:ac:3f:26:dc:b7:f7:f1:2c:d0:92:a2:d0:a8:15: 6d:1b:81:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3itdnEPyIYyRoD4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk NWI1Njg3MzctNDVkZC00ODZkLWJlMGMtNzAzNjliZmM1NDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPsN1l6IWAUsgn4CrUyYBkq+hFRDLFOQ5Nxi TrK5z0kaoRz9DbkkuQVDg55oyh41DS5Ul5uVUHxHNVndvOHuvL3zOBt3aDyJlH4K lrHyOa8/jiPr4+JGSXGnhS07EbEGVpCITn2V7H3epQMGx4x8BSjrNRZovMm2dnnD 6kqZ1UrjvoNvH6Jqi2UL9Yr7kYfV3IM3BOJ0UP8cYwe7UhWuG4OSZGxDHYNHg8IV DD8SWfDuLWjXDBq2hkfgSZV1fZxDCcwYSjNVoliDieF1SvdhmxWVsl/xZOxFmepW ArHJDDNmi/4EhLRHJbjqheV17SNc1Fn/t2E1bxR533F9u5JWEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPflKUyCRFmdvVOYVHdmVDHfd8VzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDk3ODdhZTItYjc4Yi0z MTZlLTkxMGEtNGRlYTYyOWIxNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACl1xJJgi/FMouWUYx2s71AW02E4/Xxhd0ZcfD16VFJHP+hbnlytF/3a T0+1rVQsO/S7Ver7fzzlYZJmJxAOtqz2QLpugCFcQjYZQSMizfr4CxV6RJjPYj1C 0W1PJzfmECft6ylObCRQIthYeszi8i8PBM5O5bwnXHVBq+EW/ws0LN0R2u6YteQw wXJL6wA0SoL4CSA6AY/83Ko3VZ5Yje1VnsfakLvC/4F90mIxodUkPnt7+wDyDYB5 oFOfOH7mvrpEz9u3HPbmPns9sksPaukpTwG76/jpp/UXgYLuW1UlvQyS2bqVinEk J2fD46SsPybct/fxLNCSotCoFW0bgQk= -----END CERTIFICATE-----Generated at Sat Jun 6 14:46:37 2026 by rpki-client