$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16593986-f3e0-304f-86f1-14b7a09e9c5c.roa File: 16593986-f3e0-304f-86f1-14b7a09e9c5c.roa (raw, json) Hash identifier: UkRI68Li8ZdEs421b954c9woYKR+hiY9sZNGQwdpVXI= Subject key identifier: 26:28:0B:86:55:39:02:1E:05:36:6F:ED:98:98:77:37:37:59:DB:BE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D975566D9C85B269D2DB23880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16593986-f3e0-304f-86f1-14b7a09e9c5c.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.153.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:66:d9:c8:5b:26:9d:2d:b2:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=4b32083d-76bd-4476-852a-a5a092cbabaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ca:65:70:8e:65:14:cd:a6:fc:6b:29:51:c9: 02:5e:5d:7f:76:2a:69:1d:23:67:34:2a:7b:7e:07: 2e:e2:dd:ce:cb:06:5f:1a:a9:19:f0:00:11:59:74: 7d:37:dc:68:13:fd:f2:41:27:27:f5:15:27:1d:44: c9:00:56:8a:5a:f2:c4:5f:1e:c3:41:be:b3:c4:c7: 4f:4d:04:05:ac:c2:01:bd:b4:a6:6d:83:11:9f:14: 7f:35:13:2a:f7:15:b1:89:b9:5f:5b:fd:71:0f:7d: f0:d5:ea:16:47:81:ca:1d:85:18:cf:bf:87:a8:f9: 85:c7:7f:70:de:a0:6a:f8:7d:d0:f2:d5:14:f7:f4: 11:d8:8b:d8:55:7b:6c:65:e3:7e:16:ef:41:f2:76: 14:6a:9a:70:20:b1:d5:65:f6:2b:59:e3:7d:96:94: 93:2d:7b:f3:9d:71:f4:28:25:0f:52:f7:cf:b3:0a: a4:db:46:ec:9f:44:50:bc:13:4b:6f:f4:79:7c:9e: 2b:0a:79:a9:c2:20:a3:a3:cd:44:a4:1b:f2:2d:a0: 60:b9:a6:46:da:21:0d:b5:ed:e0:16:74:01:51:20: 2f:73:89:f5:7c:f0:67:ce:ff:93:61:cc:bf:26:6a: 8c:7e:6c:6c:86:47:0c:a0:51:e6:43:fa:36:51:c6: 87:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:28:0B:86:55:39:02:1E:05:36:6F:ED:98:98:77:37:37:59:DB:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16593986-f3e0-304f-86f1-14b7a09e9c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:06:7f:82:ee:cc:55:b0:49:21:a8:7d:22:df:6e:a2:9d:bf: 6c:7a:be:17:6b:e9:1d:0f:55:0f:49:23:7d:53:ed:2e:c8:db: dc:0d:a1:00:d4:7c:06:dd:31:fa:69:3f:41:1f:f8:86:1f:2a: 4f:f6:34:1e:88:22:2f:8e:ec:d2:11:40:53:1a:ac:f1:f8:b9: 5c:10:58:a9:a8:32:c8:ff:cf:32:09:2f:c1:e2:1f:6a:13:44: 32:0d:cd:02:cd:3b:02:fe:86:b5:2c:a3:38:63:5a:be:10:42: f5:03:96:40:a1:8a:77:5d:20:3e:c8:d3:17:14:fc:40:48:f0: 25:c2:a9:6b:64:8c:5c:b6:18:0f:e1:78:6f:e6:b9:a0:ba:35: b8:1d:3a:2a:60:71:ac:17:3d:1b:a7:ea:08:79:ca:ee:5f:e6: 69:4c:bd:65:65:38:8c:42:fe:5a:8f:27:43:23:4b:20:56:d3: d9:e6:da:4e:5e:2b:a1:28:4b:6a:b9:63:e8:8f:84:64:23:3a: 4a:ae:12:80:37:85:5d:7b:b7:11:7d:f3:69:c1:ed:74:11:69: ec:f3:ca:80:73:44:9b:0e:ef:ec:94:97:0a:cf:fe:f5:2f:82: 6d:97:a7:df:da:ee:a4:5e:e2:f2:b9:f7:3b:81:4b:3b:55:1c: a2:9c:1c:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWbZyFsmnS2yOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk NGIzMjA4M2QtNzZiZC00NDc2LTg1MmEtYTVhMDkyY2JhYmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8plcI5lFM2m/GspUckCXl1/dippHSNnNCp7 fgcu4t3OywZfGqkZ8AARWXR9N9xoE/3yQScn9RUnHUTJAFaKWvLEXx7DQb6zxMdP TQQFrMIBvbSmbYMRnxR/NRMq9xWxiblfW/1xD33w1eoWR4HKHYUYz7+HqPmFx39w 3qBq+H3Q8tUU9/QR2IvYVXtsZeN+Fu9B8nYUappwILHVZfYrWeN9lpSTLXvznXH0 KCUPUvfPswqk20bsn0RQvBNLb/R5fJ4rCnmpwiCjo81EpBvyLaBguaZG2iENte3g FnQBUSAvc4n1fPBnzv+TYcy/JmqMfmxshkcMoFHmQ/o2UcaHVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYoC4ZVOQIeBTZv7ZiYdzc3Wdu+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTY1OTM5ODYtZjNlMC0z MDRmLTg2ZjEtMTRiN2EwOWU5YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQGf4LuzFWwSSGofSLfbqKdv2x6vhdr6R0PVQ9JI31T7S7I29wNoQDU fAbdMfppP0Ef+IYfKk/2NB6IIi+O7NIRQFMarPH4uVwQWKmoMsj/zzIJL8HiH2oT RDINzQLNOwL+hrUsozhjWr4QQvUDlkChinddID7I0xcU/EBI8CXCqWtkjFy2GA/h eG/muaC6NbgdOipgcawXPRun6gh5yu5f5mlMvWVlOIxC/lqPJ0MjSyBW09nm2k5e K6EoS2q5Y+iPhGQjOkquEoA3hV17txF982nB7XQRaezzyoBzRJsO7+yUlwrP/vUv gm2Xp9/a7qRe4vK59zuBSztVHKKcHJw= -----END CERTIFICATE-----Generated at Wed May 13 15:54:30 2026 by rpki-client