$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0de336de-11a9-3a69-b501-10b69cf8f881.roa File: 0de336de-11a9-3a69-b501-10b69cf8f881.roa (raw, json) Hash identifier: dmJcBH+HqykcaWMBurxzy5BB9lG55mUwoVxzlqIISGM= Subject key identifier: F0:3A:90:0F:D7:57:84:3B:62:34:E4:1E:0D:C9:B8:BA:A7:A7:A4:49 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA6B00D338DCFE19ADCB6E890 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0de336de-11a9-3a69-b501-10b69cf8f881.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:0d:33:8d:cf:e1:9a:dc:b6:e8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=16a98681-3ad4-4d81-8bb1-61f7d8bcc8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8c:28:2e:da:01:e4:ec:fb:81:e7:e1:99:95: e5:67:8b:d1:aa:cf:6c:a3:7a:0b:b0:5e:33:69:d8: 4f:40:cf:da:53:28:d0:d7:e1:0f:04:2d:f4:28:db: 2e:3c:39:5f:72:7b:19:ce:73:2d:17:7a:bc:77:72: 2a:47:7a:30:e3:ee:bc:3f:75:ee:a6:29:30:c9:08: 39:6f:ef:43:9d:c4:9a:ca:83:04:32:c4:65:e9:05: 3a:27:2d:1e:b9:f8:7f:99:8b:c5:e8:3c:9b:24:1e: b5:73:11:50:50:15:2a:b9:87:dd:39:ae:99:c9:ec: 67:de:cd:ef:cf:85:97:f7:c0:0c:61:39:4d:26:a4: d5:e4:16:fa:61:18:fe:b2:4a:00:57:6f:95:51:09: 16:25:df:a9:38:0b:09:16:6a:47:09:11:32:8c:2c: fd:f3:72:0d:09:a9:90:4c:7a:3a:b4:04:7e:08:c4: 04:3f:d4:3e:cb:b0:03:33:aa:18:f8:4a:07:e4:be: 27:fd:ba:e9:56:23:a3:16:6a:e2:5c:c4:7a:51:7a: 18:ef:b1:b7:e5:d0:8c:2d:a5:79:35:60:55:5b:bb: 72:ea:32:46:7f:d5:b7:3e:27:7c:57:4b:13:9a:f1: 6d:58:b0:01:12:87:07:d8:52:9e:d9:23:98:96:39: 3b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3A:90:0F:D7:57:84:3B:62:34:E4:1E:0D:C9:B8:BA:A7:A7:A4:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0de336de-11a9-3a69-b501-10b69cf8f881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:3c:48:75:94:a4:e5:af:7c:2e:a3:7b:b9:47:02:4d:d1:1e: 9e:68:e0:ff:c5:c3:32:c0:ce:c2:04:1c:2d:ab:26:92:95:cc: 8e:9c:ee:41:d3:e5:b9:aa:41:2b:b2:99:ee:fd:83:9f:3f:36: 51:b6:7b:77:49:6a:05:c2:0f:fb:87:6f:b5:8b:ad:e0:c6:30: 73:7b:61:4d:c1:c5:db:23:ce:4b:9e:51:d1:a7:99:27:57:6c: ca:39:c7:d5:fb:38:ae:0c:ae:8a:03:5d:6c:c7:be:e1:53:31: e8:5d:ae:bd:c0:80:82:28:d7:eb:eb:0e:00:3b:fa:e6:77:01: 56:6e:38:d1:bc:ce:d4:5e:bc:b8:f4:90:d4:12:f0:a2:3f:ab: d8:58:7b:b3:9d:d2:a0:21:6f:8e:f9:9d:78:6e:f9:5b:7d:52: 65:e4:f2:94:25:ec:46:bf:93:0d:ab:ac:a3:78:64:77:2e:5a: e1:82:df:58:e2:f8:88:27:8d:9f:72:24:1b:8c:ba:4e:20:4d: 53:ba:12:f7:9f:64:e7:84:0a:ab:a2:e1:19:fb:92:9c:fc:a8: eb:3c:b4:d2:0c:dc:88:50:a8:61:80:94:eb:60:b5:e0:d9:1b: 1d:a0:31:52:73:1b:3c:64:9e:59:53:5c:91:ff:f3:96:94:d2: fe:fd:6e:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msA0zjc/hmty26JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MTZhOTg2ODEtM2FkNC00ZDgxLThiYjEtNjFmN2Q4YmNjOGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIwoLtoB5Oz7gefhmZXlZ4vRqs9so3oLsF4z adhPQM/aUyjQ1+EPBC30KNsuPDlfcnsZznMtF3q8d3IqR3ow4+68P3XupikwyQg5 b+9DncSayoMEMsRl6QU6Jy0eufh/mYvF6DybJB61cxFQUBUquYfdOa6Zyexn3s3v z4WX98AMYTlNJqTV5Bb6YRj+skoAV2+VUQkWJd+pOAsJFmpHCREyjCz983INCamQ THo6tAR+CMQEP9Q+y7ADM6oY+EoH5L4n/brpViOjFmriXMR6UXoY77G35dCMLaV5 NWBVW7ty6jJGf9W3Pid8V0sTmvFtWLABEocH2FKe2SOYljk7AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA6kA/XV4Q7YjTkHg3JuLqnp6RJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMGRlMzM2ZGUtMTFhOS0z YTY5LWI1MDEtMTBiNjljZjhmODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJnpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs8SHWUpOWvfC6je7lHAk3RHp5o4P/FwzLAzsIEHC2rJpKVzI6c7kHT 5bmqQSuyme79g58/NlG2e3dJagXCD/uHb7WLreDGMHN7YU3BxdsjzkueUdGnmSdX bMo5x9X7OK4MrooDXWzHvuFTMehdrr3AgIIo1+vrDgA7+uZ3AVZuONG8ztRevLj0 kNQS8KI/q9hYe7Od0qAhb475nXhu+Vt9UmXk8pQl7Ea/kw2rrKN4ZHcuWuGC31ji +IgnjZ9yJBuMuk4gTVO6EvefZOeECqui4Rn7kpz8qOs8tNIM3IhQqGGAlOtgteDZ Gx2gMVJzGzxknllTXJH/85aU0v79big= -----END CERTIFICATE-----Generated at Wed May 13 14:30:43 2026 by rpki-client