$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/38a58a65-321e-342b-8bb7-459ad7421de5.roa File: 38a58a65-321e-342b-8bb7-459ad7421de5.roa (raw, json) Hash identifier: RNdF48zhG6lI8iwnst42LwT9sTKFuZVB44RZvFkJGL0= Subject key identifier: 77:4C:39:87:FE:9C:83:F4:7D:47:CB:D5:73:B8:4A:6A:11:C5:04:84 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DB77027E7BEC1F217D6D757E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/38a58a65-321e-342b-8bb7-459ad7421de5.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 8069 IP address blocks: 20.153.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:27:e7:be:c1:f2:17:d6:d7:57:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=8798f956-3d4b-4792-98b5-1bb3eef9d3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:c7:7b:47:ad:bc:03:0b:97:6a:e0:27:b2: 4f:93:84:77:5d:09:f2:18:79:5b:85:3a:a5:ee:39: a8:f7:7f:31:17:6d:5f:61:18:b7:3f:24:3d:a6:a9: fb:23:cf:3a:23:e7:d6:5a:45:49:e7:c5:07:22:07: 3d:fe:31:6f:b5:3c:b0:a9:31:a3:35:63:3d:e6:45: 1a:43:59:24:04:d0:3d:bc:df:c2:92:56:19:6b:f7: c4:14:e7:44:50:ef:0f:32:60:ac:36:60:bd:78:fa: 58:72:29:84:62:cb:89:35:3e:0d:28:b3:05:ce:b8: 25:fd:b2:33:66:98:7d:d2:da:b6:4d:7b:5a:ef:4b: 13:ac:d8:f0:71:92:71:b5:9f:a5:96:b1:41:d8:95: c5:8c:66:5b:a4:a6:06:96:12:65:38:df:f6:89:6c: 5d:2c:35:e8:c1:7e:00:c7:b5:e8:57:6d:b9:e3:2f: 71:c0:ae:e4:8a:0d:2c:27:c9:68:92:b0:c6:a6:bc: aa:6d:af:83:f6:9f:9f:1b:91:c4:6c:df:82:a7:ed: 29:30:69:1b:74:e5:ee:a7:8e:88:4a:92:8f:a9:d2: 84:3f:ee:25:42:c3:40:84:40:a7:11:6f:34:48:7e: 28:45:d9:f0:91:0e:99:d5:77:65:56:bc:8b:b9:9a: f7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4C:39:87:FE:9C:83:F4:7D:47:CB:D5:73:B8:4A:6A:11:C5:04:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/38a58a65-321e-342b-8bb7-459ad7421de5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:8a:50:d6:56:57:f8:f5:63:a7:51:8d:79:98:2d:1a:db:2e: 9b:df:c2:01:dd:f5:44:04:fb:1b:eb:d8:f1:f4:dc:b6:fd:9e: d5:dd:64:ac:9f:29:98:a1:64:59:b4:fd:8a:ea:d7:f9:3b:0b: b3:d0:de:ae:27:6b:77:e6:a2:96:5e:a2:f2:14:a1:af:66:07: 69:f3:74:98:7d:8f:ce:ee:b8:f2:f0:9d:69:e8:9d:2e:b3:00: 87:b2:ca:59:0b:69:2b:b5:e6:d6:68:8a:fd:d0:95:ef:23:69: ce:75:1e:43:59:bf:33:27:07:e4:6d:84:1c:95:d2:ea:d8:b9: 78:29:91:6c:b5:55:64:4e:30:74:0d:41:d3:91:36:e4:19:47: 60:dc:94:1b:bc:45:5f:b8:42:9a:62:df:f5:bf:77:2a:bc:fc: 10:c7:6d:0c:82:8e:98:8a:2c:89:83:06:92:cc:3d:2c:24:83: b6:a6:e9:fe:42:ed:0b:a3:41:f9:4b:ee:72:49:5a:17:c1:23: 1e:01:5e:5f:75:15:1e:6b:cf:d1:a1:f4:d5:93:5c:7d:d5:8b: c0:1a:15:7e:f8:d8:a6:de:16:14:08:68:f1:57:b8:7f:18:39: 7e:32:62:03:d1:b8:9f:3f:58:c6:b7:df:85:be:4b:55:3d:46: af:fa:aa:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cCfnvsHyF9bXV+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk ODc5OGY5NTYtM2Q0Yi00NzkyLTk4YjUtMWJiM2VlZjlkM2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorfHe0etvAMLl2rgJ7JPk4R3XQnyGHlbhTql 7jmo938xF21fYRi3PyQ9pqn7I886I+fWWkVJ58UHIgc9/jFvtTywqTGjNWM95kUa Q1kkBNA9vN/CklYZa/fEFOdEUO8PMmCsNmC9ePpYcimEYsuJNT4NKLMFzrgl/bIz Zph90tq2TXta70sTrNjwcZJxtZ+llrFB2JXFjGZbpKYGlhJlON/2iWxdLDXowX4A x7XoV2254y9xwK7kig0sJ8lokrDGpryqba+D9p+fG5HEbN+Cp+0pMGkbdOXup46I SpKPqdKEP+4lQsNAhECnEW80SH4oRdnwkQ6Z1XdlVryLuZr3LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdMOYf+nIP0fUfL1XO4SmoRxQSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzhhNThhNjUtMzIxZS0z NDJiLThiYjctNDU5YWQ3NDIxZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOKUNZWV/j1Y6dRjXmYLRrbLpvfwgHd9UQE+xvr2PH03Lb9ntXdZKyf KZihZFm0/Yrq1/k7C7PQ3q4na3fmopZeovIUoa9mB2nzdJh9j87uuPLwnWnonS6z AIeyylkLaSu15tZoiv3Qle8jac51HkNZvzMnB+RthByV0urYuXgpkWy1VWROMHQN QdORNuQZR2DclBu8RV+4Qppi3/W/dyq8/BDHbQyCjpiKLImDBpLMPSwkg7am6f5C 7QujQflL7nJJWhfBIx4BXl91FR5rz9Gh9NWTXH3Vi8AaFX742KbeFhQIaPFXuH8Y OX4yYgPRuJ8/WMa334W+S1U9Rq/6qsw= -----END CERTIFICATE-----Generated at Wed May 13 14:23:00 2026 by rpki-client