$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3444dcb8-9be9-3d37-83c5-59555ab240d6.roa File: 3444dcb8-9be9-3d37-83c5-59555ab240d6.roa (raw, json) Hash identifier: TUFZpyELzINZYKuCIWi7bvdpRwC2l5IfmZ4X9r+dzfY= Subject key identifier: 19:97:12:B5:13:B1:1B:BC:7B:6B:48:34:EA:91:45:6F:2C:93:93:78 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DB7703BB34F96D3BF64E183C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3444dcb8-9be9-3d37-83c5-59555ab240d6.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 8069 IP address blocks: 20.153.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:3b:b3:4f:96:d3:bf:64:e1:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=370bcf6a-c47e-4192-a77b-bf51b5dae42e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:71:60:9d:94:bc:de:ef:b0:58:c0:50:9e: 92:d1:97:e3:94:69:5c:8d:1f:05:d3:43:e7:02:cc: f9:82:7d:16:a0:cd:69:11:52:df:ee:71:aa:9c:28: b2:c9:da:1c:9e:b5:2d:09:b6:ac:66:f2:99:ff:94: 27:b4:b1:e6:fc:c9:42:d2:ee:96:d5:71:1e:b4:0d: df:e5:cb:7b:7d:24:cc:7d:17:d2:25:78:77:91:0d: 01:8c:5d:b5:50:38:54:b4:da:fa:da:18:63:47:da: b6:05:7c:36:5b:56:2c:a5:a2:9a:fb:38:d9:14:2d: 89:65:09:32:56:94:3c:89:04:37:40:f2:e6:16:90: cd:a4:92:f9:1b:a9:60:81:e4:a5:2a:8d:8b:77:aa: d4:6f:32:d4:03:7e:c8:e2:16:50:44:f7:50:d6:70: 00:50:72:b3:8b:49:f6:65:60:95:69:45:73:2e:25: 4a:b0:3f:a4:e2:11:ab:78:be:50:96:d5:4d:e5:e0: d4:00:76:15:51:63:28:91:cc:cb:db:a5:f7:04:4e: f5:37:9c:43:17:59:a5:ac:fd:70:9d:b4:90:b9:86: ea:04:91:60:7d:37:ea:84:b1:9c:d5:68:b2:8f:6f: df:32:47:cd:66:45:28:f0:b9:84:89:ce:26:a0:3c: ad:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:97:12:B5:13:B1:1B:BC:7B:6B:48:34:EA:91:45:6F:2C:93:93:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3444dcb8-9be9-3d37-83c5-59555ab240d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:97:12:8a:1b:53:2f:86:3d:35:57:30:be:f6:bd:33:8a:7d: 2f:74:7c:68:10:6b:ed:e0:e7:82:27:8b:94:f9:62:61:8c:46: 1e:b4:92:c7:02:4d:29:5d:89:2c:4f:fb:fe:da:31:15:f8:bc: c6:7f:7c:4b:10:48:66:3f:63:b9:5f:bb:65:59:08:d9:4a:82: 78:fd:8e:4a:8f:b5:29:9f:16:59:2c:a9:25:72:26:28:93:e8: 74:a1:1b:78:eb:bc:5c:97:c8:a2:e3:74:15:5e:19:02:43:f3: 98:ba:37:f0:2a:85:d2:70:07:e2:4b:5b:0e:a5:37:cc:27:7a: 0c:ba:5d:36:3e:9d:db:c2:c5:bc:77:df:1e:79:ce:bd:e6:4a: 17:ed:77:91:8e:64:7d:80:0f:59:cc:85:23:4f:a8:cb:f3:42: 1f:ca:82:41:7a:24:08:23:3a:6e:01:c6:43:1d:ed:c5:1b:45: d4:c1:14:e2:fa:09:dd:22:10:f5:8f:79:d6:51:aa:7a:90:a7: 4c:ca:49:f5:62:40:34:f4:b6:0d:bb:58:93:20:b3:51:64:67: 12:e9:2b:0e:57:a9:dd:9e:84:cd:ae:76:af:0d:aa:97:43:8a: 71:05:24:e5:8c:ab:15:33:b9:d7:ca:36:b1:58:7c:d8:43:48: e1:59:e7:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cDuzT5bTv2Thg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk MzcwYmNmNmEtYzQ3ZS00MTkyLWE3N2ItYmY1MWI1ZGFlNDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcZxYJ2UvN7vsFjAUJ6S0ZfjlGlcjR8F00Pn Asz5gn0WoM1pEVLf7nGqnCiyydocnrUtCbasZvKZ/5QntLHm/MlC0u6W1XEetA3f 5ct7fSTMfRfSJXh3kQ0BjF21UDhUtNr62hhjR9q2BXw2W1YspaKa+zjZFC2JZQky VpQ8iQQ3QPLmFpDNpJL5G6lggeSlKo2Ld6rUbzLUA37I4hZQRPdQ1nAAUHKzi0n2 ZWCVaUVzLiVKsD+k4hGreL5QltVN5eDUAHYVUWMokczL26X3BE71N5xDF1mlrP1w nbSQuYbqBJFgfTfqhLGc1Wiyj2/fMkfNZkUo8LmEic4moDytQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmXErUTsRu8e2tINOqRRW8sk5N4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzQ0NGRjYjgtOWJlOS0z ZDM3LTgzYzUtNTk1NTVhYjI0MGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6XEoobUy+GPTVXML72vTOKfS90fGgQa+3g54Ini5T5YmGMRh60kscC TSldiSxP+/7aMRX4vMZ/fEsQSGY/Y7lfu2VZCNlKgnj9jkqPtSmfFlksqSVyJiiT 6HShG3jrvFyXyKLjdBVeGQJD85i6N/AqhdJwB+JLWw6lN8wnegy6XTY+ndvCxbx3 3x55zr3mShftd5GOZH2AD1nMhSNPqMvzQh/KgkF6JAgjOm4BxkMd7cUbRdTBFOL6 Cd0iEPWPedZRqnqQp0zKSfViQDT0tg27WJMgs1FkZxLpKw5Xqd2ehM2udq8NqpdD inEFJOWMqxUzudfKNrFYfNhDSOFZ52Q= -----END CERTIFICATE-----Generated at Wed May 13 14:21:31 2026 by rpki-client