$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f13ee75d-592a-304a-95df-f636e06e0abc.roa File: f13ee75d-592a-304a-95df-f636e06e0abc.roa (raw, json) Hash identifier: gB3GxXp0tX4T1u7FsIq0V1wYugsP0QrckUHi7T5gaZQ= Subject key identifier: DB:15:A9:8F:D7:C0:B6:46:52:DF:BC:C7:30:75:73:A5:8A:DF:34:F9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DF4DB53FC95CA0A8A0A951800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f13ee75d-592a-304a-95df-f636e06e0abc.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:53:fc:95:ca:0a:8a:0a:95:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=1f7515a2-a92a-4c05-8421-92dfdf7b49ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:f5:32:a8:c1:65:ac:6a:6c:56:f3:b0:db: cf:22:10:90:7e:5e:33:f0:03:05:84:69:c7:93:15: 42:ff:0d:71:53:1b:b8:26:ce:c1:99:72:c2:79:10: 46:c4:d7:d9:df:37:33:8b:56:94:88:bd:5b:b5:6d: 9d:1f:d7:66:f5:f2:48:08:49:f8:86:9c:70:30:11: a6:9a:e2:3c:e0:2d:1a:c9:76:05:9d:a0:80:a3:64: 8f:28:12:7e:c6:eb:f9:a0:6f:58:ea:69:a0:53:33: e4:96:22:d3:15:fc:cb:d2:78:20:3c:61:b6:36:32: 40:27:fa:fd:47:aa:f5:79:53:49:35:ad:ec:e7:e6: 93:d8:75:78:ec:8e:3d:57:09:8b:40:c3:5d:6f:58: 20:87:79:be:68:e7:76:b6:52:24:d9:5d:06:4c:72: d7:e9:bc:f6:bd:22:e1:86:13:9e:b1:0d:3c:f2:ec: c1:d7:08:82:d5:ab:b7:74:8f:40:7d:63:ee:fd:c6: a3:9e:bc:1a:a6:cc:b6:1d:12:df:c0:08:07:3b:13: 4a:23:85:87:24:57:7e:60:2d:bc:22:41:a7:c7:e1: d0:3c:bf:5e:18:36:24:94:da:9a:0b:37:82:f6:8b: 0a:33:d4:e5:d8:32:4f:23:19:e4:be:b4:d6:71:26: a7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:15:A9:8F:D7:C0:B6:46:52:DF:BC:C7:30:75:73:A5:8A:DF:34:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f13ee75d-592a-304a-95df-f636e06e0abc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c6:3f:69:72:d1:a2:5a:ad:a9:33:9a:6d:c7:5e:30:35:7f: 28:ce:69:56:ab:63:0b:21:bf:61:d1:7e:c6:0e:c9:35:d6:24: 96:92:f8:2c:48:86:21:84:18:0f:40:95:d2:71:ea:fc:5e:5a: 98:06:4c:d9:e7:5a:5b:3f:94:fe:fa:26:a9:ea:35:4d:c9:30: 6b:d3:dc:49:de:ec:32:80:7c:9a:15:bc:28:09:65:aa:63:8b: 93:6c:b4:8d:e7:f4:6d:30:38:aa:10:b7:07:24:82:a2:b1:e5: 56:f8:2b:f2:09:22:06:ec:71:8d:0c:31:01:b0:09:cf:54:95: 04:ab:b7:55:5b:a9:03:63:67:96:e7:85:f4:02:c7:89:2b:72: d0:c3:a5:ff:83:d0:89:6d:a3:70:ed:23:92:de:e5:68:3c:10: d4:68:57:fc:02:3c:2e:6f:bd:48:49:a6:37:84:0d:e3:1e:56: de:3b:80:48:e5:d1:9a:a1:3d:f8:72:69:95:e7:95:59:cf:d8: c2:cc:2e:92:ee:a9:f2:63:c2:5d:66:75:9b:96:b3:78:e0:84: 6a:1d:ef:cd:a0:38:06:96:2d:0e:1e:aa:65:b9:4c:20:ff:aa: 64:e1:3b:86:31:1d:16:16:8c:d9:bf:5b:bd:69:2b:94:12:0d: b6:89:c1:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3021P8lcoKigqVGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk MWY3NTE1YTItYTkyYS00YzA1LTg0MjEtOTJkZmRmN2I0OWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsv1MqjBZaxqbFbzsNvPIhCQfl4z8AMFhGnH kxVC/w1xUxu4Js7BmXLCeRBGxNfZ3zczi1aUiL1btW2dH9dm9fJICEn4hpxwMBGm muI84C0ayXYFnaCAo2SPKBJ+xuv5oG9Y6mmgUzPkliLTFfzL0nggPGG2NjJAJ/r9 R6r1eVNJNa3s5+aT2HV47I49VwmLQMNdb1ggh3m+aOd2tlIk2V0GTHLX6bz2vSLh hhOesQ088uzB1wiC1au3dI9AfWPu/cajnrwapsy2HRLfwAgHOxNKI4WHJFd+YC28 IkGnx+HQPL9eGDYklNqaCzeC9osKM9Tl2DJPIxnkvrTWcSantQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsVqY/XwLZGUt+8xzB1c6WK3zT5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjEzZWU3NWQtNTkyYS0z MDRhLTk1ZGYtZjYzNmUwNmUwYWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJljMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzGP2ly0aJarakzmm3HXjA1fyjOaVarYwshv2HRfsYOyTXWJJaS+CxI hiGEGA9AldJx6vxeWpgGTNnnWls/lP76JqnqNU3JMGvT3Ene7DKAfJoVvCgJZapj i5NstI3n9G0wOKoQtwckgqKx5Vb4K/IJIgbscY0MMQGwCc9UlQSrt1VbqQNjZ5bn hfQCx4krctDDpf+D0Ilto3DtI5Le5Wg8ENRoV/wCPC5vvUhJpjeEDeMeVt47gEjl 0ZqhPfhyaZXnlVnP2MLMLpLuqfJjwl1mdZuWs3jghGod782gOAaWLQ4eqmW5TCD/ qmThO4YxHRYWjNm/W71pK5QSDbaJwRs= -----END CERTIFICATE-----Generated at Sat Jun 6 14:47:48 2026 by rpki-client