$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/046a6638-e5a2-3b13-900c-64cf065df5bb.roa File: 046a6638-e5a2-3b13-900c-64cf065df5bb.roa (raw, json) Hash identifier: eL6AuDWMbHnRF4stV59qjiZktcR+MDLFfOdOTDwD/jk= Subject key identifier: 1D:2A:E8:DA:4C:BD:C5:98:D5:F2:49:F0:3B:63:0B:5C:19:A3:14:1D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA6B02DD80E1C2F95F5D507C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/046a6638-e5a2-3b13-900c-64cf065df5bb.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:2d:d8:0e:1c:2f:95:f5:d5:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=6546d8ab-2fcf-4b1f-bab3-0845afa83e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c7:93:a6:17:b3:2f:76:5d:da:7e:09:8f:5b: 18:49:d8:8f:e6:63:2a:6f:a0:21:1f:d7:eb:94:d8: 77:4a:db:9c:4d:72:42:91:bd:7a:3a:b0:79:d7:10: d5:11:bd:a0:38:e3:85:ec:3a:d4:90:6c:b1:9f:5c: 79:78:aa:22:3c:6a:10:51:d5:c4:14:c0:d2:c9:fe: 20:e3:f6:2b:e1:c3:6d:97:19:9b:58:bf:c2:da:12: 39:57:5f:0a:39:17:a5:5e:b6:0e:34:af:a2:2f:80: 87:e2:cf:5b:ff:0a:ba:ff:6d:3d:01:52:2e:16:d6: 27:a6:2d:86:1e:0e:c4:1e:ba:33:88:bd:d7:bb:ce: 92:3d:6f:d5:df:7a:b1:0a:07:98:6b:dc:13:0f:1f: 8e:99:fb:4d:1b:53:8d:45:76:96:5a:f0:c8:80:02: ed:d1:9c:6e:5b:cf:45:1c:dc:1f:22:d8:77:3c:14: 5c:98:f5:f5:d1:31:5c:d9:8c:02:45:ff:91:ce:1f: 4d:4a:0f:ac:5b:c9:20:0f:18:fd:c6:cd:5f:8c:ad: 67:b0:b0:33:72:a7:9c:da:06:2d:f7:2b:3c:96:02: fd:c5:d1:4c:a3:d5:75:03:8e:29:af:42:ac:40:1d: c1:76:cb:44:ae:cc:bc:f6:af:31:08:18:fa:58:fe: cf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2A:E8:DA:4C:BD:C5:98:D5:F2:49:F0:3B:63:0B:5C:19:A3:14:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/046a6638-e5a2-3b13-900c-64cf065df5bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:37:f4:db:a1:e8:e4:b7:c2:60:ac:a8:58:99:eb:18:9d:2b: 46:98:71:60:d6:30:bc:ce:10:65:0a:84:3e:ab:07:21:1d:51: 84:3c:f9:10:7c:c0:b2:4e:64:34:63:27:1f:4b:c9:b7:5b:01: d9:15:d3:c8:db:ed:43:2c:44:91:f1:70:9e:95:59:e5:2d:af: ef:2b:01:99:2a:4e:dc:dc:8c:8f:88:ba:73:af:31:70:15:bd: 66:75:eb:14:7f:ca:41:58:af:7f:f5:64:50:85:73:07:0d:20: e8:52:27:ee:6e:a1:95:e4:45:1d:13:d9:52:39:f0:66:95:12: 99:86:33:a0:64:ba:11:b0:7c:73:53:51:13:66:2c:26:09:0a: 3a:b8:ad:24:5f:93:3e:7b:31:df:48:c6:3b:73:46:3b:3c:be: 86:0e:69:4f:5e:cb:83:a0:57:2e:1d:3e:03:e9:be:d0:b8:46: 7f:be:06:d8:6f:fe:c9:10:66:24:b6:28:3d:00:51:01:51:7c: 50:13:14:aa:03:db:c6:c2:a2:e0:e1:b2:8a:cb:9f:ce:9d:3f: 80:e9:38:78:5b:fa:8d:29:37:3f:8a:74:85:30:fc:50:fa:5f: ec:d6:5b:1d:eb:14:47:1e:6f:58:d9:61:84:f9:06:05:25:41: f5:b8:b5:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msC3YDhwvlfXVB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NjU0NmQ4YWItMmZjZi00YjFmLWJhYjMtMDg0NWFmYTgzZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtceTphezL3Zd2n4Jj1sYSdiP5mMqb6AhH9fr lNh3StucTXJCkb16OrB51xDVEb2gOOOF7DrUkGyxn1x5eKoiPGoQUdXEFMDSyf4g 4/Yr4cNtlxmbWL/C2hI5V18KORelXrYONK+iL4CH4s9b/wq6/209AVIuFtYnpi2G Hg7EHroziL3Xu86SPW/V33qxCgeYa9wTDx+OmftNG1ONRXaWWvDIgALt0ZxuW89F HNwfIth3PBRcmPX10TFc2YwCRf+Rzh9NSg+sW8kgDxj9xs1fjK1nsLAzcqec2gYt 9ys8lgL9xdFMo9V1A44pr0KsQB3BdstErsy89q8xCBj6WP7PGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0q6NpMvcWY1fJJ8DtjC1wZoxQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDQ2YTY2MzgtZTVhMi0z YjEzLTkwMGMtNjRjZjA2NWRmNWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs39Nuh6OS3wmCsqFiZ6xidK0aYcWDWMLzOEGUKhD6rByEdUYQ8+RB8 wLJOZDRjJx9LybdbAdkV08jb7UMsRJHxcJ6VWeUtr+8rAZkqTtzcjI+IunOvMXAV vWZ16xR/ykFYr3/1ZFCFcwcNIOhSJ+5uoZXkRR0T2VI58GaVEpmGM6BkuhGwfHNT URNmLCYJCjq4rSRfkz57Md9IxjtzRjs8voYOaU9ey4OgVy4dPgPpvtC4Rn++Bthv /skQZiS2KD0AUQFRfFATFKoD28bCouDhsorLn86dP4DpOHhb+o0pNz+KdIUw/FD6 X+zWWx3rFEceb1jZYYT5BgUlQfW4tVg= -----END CERTIFICATE-----Generated at Wed May 13 08:27:00 2026 by rpki-client