$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1d2d9ee6-5c51-3050-bbc3-8e5faf06bd2a.roa File: 1d2d9ee6-5c51-3050-bbc3-8e5faf06bd2a.roa (raw, json) Hash identifier: cpj10/IXs6Z2/69br2atcz/0AA0e8yiB/rxJiB+cREs= Subject key identifier: 01:7A:99:01:B7:AB:97:B0:7F:58:CA:A4:DF:0F:13:35:40:79:8F:33 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA3E55BDDA006DE0A0BC76000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1d2d9ee6-5c51-3050-bbc3-8e5faf06bd2a.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:5b:dd:a0:06:de:0a:0b:c7:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=8de9d639-f68e-4b1f-8709-ce990089444a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:7c:d4:c5:d8:2b:9e:d7:0a:fc:44:77:ce: f5:7f:dc:c6:43:32:79:ce:b5:14:01:0b:29:91:69: 25:1a:7d:24:76:20:11:91:3f:50:39:46:a8:2e:e3: 17:32:52:e4:87:a1:71:4d:ef:c3:51:e0:cd:b7:6d: 3e:de:60:00:09:7f:7f:2b:ee:1f:08:b5:be:15:a4: 35:01:b4:d4:b9:3e:8c:3a:3f:bb:11:51:f3:90:e5: 39:5c:95:44:ed:83:3a:6a:f8:9d:ac:1e:14:52:98: af:0a:73:30:05:74:61:d9:97:fa:b2:34:12:fb:63: 98:3c:3f:87:d1:76:5c:ca:b4:cc:aa:0b:5b:49:c3: 40:df:cf:6e:e9:2d:89:d6:cf:37:ce:0f:61:63:65: d2:b8:88:0a:c1:10:24:74:cb:d9:b9:33:53:e7:d0: 64:77:49:54:35:9d:17:f6:1f:f5:eb:19:22:94:99: b2:f1:5f:ff:2d:04:66:bb:b0:af:5d:13:d9:0d:11: 7b:d0:a3:84:22:cc:85:4b:cc:c6:f4:9e:b0:2a:d4: 44:d6:ba:06:12:ec:14:9f:05:8d:d1:ab:28:19:57: 22:db:4a:a1:05:71:11:7a:87:63:37:62:eb:cd:af: 38:2c:0d:bf:09:47:a1:b3:13:29:f1:03:2b:a5:a0: 29:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7A:99:01:B7:AB:97:B0:7F:58:CA:A4:DF:0F:13:35:40:79:8F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1d2d9ee6-5c51-3050-bbc3-8e5faf06bd2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:26:16:87:14:07:59:ea:1b:a5:d8:0a:c5:02:96:0d:71:4c: 11:2f:6e:e2:6b:c0:f3:69:4f:81:f1:5d:91:3c:79:f7:05:e6: ef:3e:d3:40:bb:6a:c6:a5:1b:26:4e:0e:91:1b:1f:29:3d:df: bf:3d:bb:2a:15:76:e0:58:fb:a7:14:d7:7b:46:f2:f9:fa:ea: 65:46:85:c7:4b:05:22:fc:56:38:84:e2:6c:65:54:f3:4f:8b: 8b:db:ca:bc:fa:d3:43:4c:d0:5b:51:4c:b9:fc:74:88:97:f8: 6d:90:84:6a:92:c9:b1:02:91:7e:1f:a8:4f:6f:7e:10:71:8a: a5:99:77:ba:fb:cb:cc:df:94:6f:8c:7e:83:f0:e5:c3:62:51: 51:a3:d8:53:8b:ee:3d:5e:7a:e2:a1:b1:be:28:a1:fc:f1:58: e5:61:66:5d:b9:74:65:53:f6:6b:b7:a2:48:bf:e9:34:e9:ad: de:5d:4f:3d:ea:93:ab:18:c5:67:ca:1a:43:d9:3d:71:22:ce: 91:58:29:da:41:8a:65:54:7c:69:48:a2:18:23:bf:c8:2a:1a: 4f:88:ea:8c:0c:ee:82:3e:92:ab:ef:e8:62:a2:ef:bb:ce:86: 3d:4d:4f:21:cd:13:88:4e:a5:d5:c7:f7:5d:d6:c8:8a:6c:30: 58:66:78:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5VvdoAbeCgvHYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk OGRlOWQ2MzktZjY4ZS00YjFmLTg3MDktY2U5OTAwODk0NDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCh81MXYK57XCvxEd871f9zGQzJ5zrUUAQsp kWklGn0kdiARkT9QOUaoLuMXMlLkh6FxTe/DUeDNt20+3mAACX9/K+4fCLW+FaQ1 AbTUuT6MOj+7EVHzkOU5XJVE7YM6avidrB4UUpivCnMwBXRh2Zf6sjQS+2OYPD+H 0XZcyrTMqgtbScNA389u6S2J1s83zg9hY2XSuIgKwRAkdMvZuTNT59Bkd0lUNZ0X 9h/16xkilJmy8V//LQRmu7CvXRPZDRF70KOEIsyFS8zG9J6wKtRE1roGEuwUnwWN 0asoGVci20qhBXEReodjN2Lrza84LA2/CUehsxMp8QMrpaAplQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAF6mQG3q5ewf1jKpN8PEzVAeY8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMWQyZDllZTYtNWM1MS0z MDUwLWJiYzMtOGU1ZmFmMDZiZDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHImFocUB1nqG6XYCsUClg1xTBEvbuJrwPNpT4HxXZE8efcF5u8+00C7 asalGyZODpEbHyk93789uyoVduBY+6cU13tG8vn66mVGhcdLBSL8VjiE4mxlVPNP i4vbyrz600NM0FtRTLn8dIiX+G2QhGqSybECkX4fqE9vfhBxiqWZd7r7y8zflG+M foPw5cNiUVGj2FOL7j1eeuKhsb4oofzxWOVhZl25dGVT9mu3oki/6TTprd5dTz3q k6sYxWfKGkPZPXEizpFYKdpBimVUfGlIohgjv8gqGk+I6owM7oI+kqvv6GKi77vO hj1NTyHNE4hOpdXH913WyIpsMFhmeBM= -----END CERTIFICATE-----Generated at Wed May 13 09:19:14 2026 by rpki-client