$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b42a036-18bc-3943-a55e-20be9e9bf9dc.roa File: 3b42a036-18bc-3943-a55e-20be9e9bf9dc.roa (raw, json) Hash identifier: 7M55KMDmZ/XxPXRZIX7jSDPwigwn8hKODfRftoUhjzk= Subject key identifier: 3C:EF:40:3C:63:A1:35:7F:7C:26:B3:09:5F:4A:EB:45:CD:53:BC:4A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA6B004DE6B627D1744849580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b42a036-18bc-3943-a55e-20be9e9bf9dc.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:04:de:6b:62:7d:17:44:84:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=ec151ee0-6727-42d5-83ae-f029a3660c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a2:73:47:e9:25:b6:53:b5:95:c0:2c:f9:3c: 17:b1:e2:d4:37:54:cd:05:2a:f3:8a:f7:cd:9a:76: 19:27:c5:4b:f0:5d:d6:98:04:96:bd:a2:d0:21:5d: 08:51:a9:3e:39:95:7c:cb:4d:91:bc:1c:a4:59:51: 8b:69:22:e5:2a:f5:15:aa:0c:3b:98:82:61:b9:74: 67:3f:a2:7a:d9:43:4b:73:a4:17:8e:e3:6d:12:8e: f9:71:54:33:4c:b2:95:d3:ee:c0:32:cc:b9:31:e4: 34:14:6d:a1:47:e3:e6:7f:a8:bf:b3:61:c6:c9:96: 2f:8c:39:00:0c:23:df:85:36:09:df:94:4e:56:85: 23:7b:19:52:21:4e:40:8d:04:5e:aa:4e:20:a7:36: b8:74:27:d6:eb:11:b1:76:30:9c:a1:9a:ed:ba:a9: 79:bc:ad:b5:6a:56:eb:28:b8:fc:1b:cf:32:a0:8e: 47:ec:f9:04:cb:30:c9:d1:ed:6c:ef:76:9a:23:d4: df:16:69:07:d4:1b:2e:22:61:04:7e:10:f9:3c:49: 1c:ae:1a:bf:b8:b5:2c:cf:f7:d4:b6:49:5d:ab:3d: 2d:a6:39:3c:b1:f8:a1:90:2f:62:cb:b0:bf:ef:12: 06:5e:f4:f9:94:3f:55:9d:59:1f:18:1d:e6:c7:d1: 0f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EF:40:3C:63:A1:35:7F:7C:26:B3:09:5F:4A:EB:45:CD:53:BC:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b42a036-18bc-3943-a55e-20be9e9bf9dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:11:e6:a3:be:0e:01:28:98:ee:43:4d:4b:91:d7:fb:33:5f: 00:c7:5f:61:f1:43:13:79:f6:10:dd:db:d6:39:f3:e3:44:61: 00:3a:41:2d:b6:65:0a:bd:9d:82:83:56:73:cb:f7:1a:24:e3: 2a:d7:4c:d7:2e:50:e7:df:b3:f1:c3:5e:92:7a:55:7c:7b:1b: 98:d9:e4:90:8a:1b:f5:ed:5d:65:78:a9:35:9b:48:f2:cf:89: 0d:18:9c:91:ed:91:96:c6:d5:3a:33:75:99:1d:1c:8f:1a:17: 8c:12:a1:b9:c3:e8:a1:42:fa:f6:ed:94:7e:b6:ad:4a:cc:2d: 61:39:f3:e4:e9:9a:7a:b4:6d:34:6f:76:4d:31:27:ca:04:9d: 51:52:eb:4e:c7:cd:09:11:9b:b5:3c:87:09:9e:11:af:c6:cb: 9c:07:12:11:b3:2f:16:82:2f:36:3a:d2:ef:c2:ac:ec:39:1d: b8:38:79:8e:4a:4f:c7:db:db:b5:33:c0:7b:9a:85:c1:28:a9: a2:96:f1:1c:89:10:f1:57:cc:4c:44:cb:90:de:2a:81:6f:69: 82:2d:27:9e:c8:f0:ed:dd:43:e3:96:d2:b0:b9:3a:4a:e3:71: a4:cc:9f:db:fa:ac:ff:f3:a7:f1:01:45:e4:83:1d:e7:db:ff: 9a:84:39:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msATea2J9F0SElYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ZWMxNTFlZTAtNjcyNy00MmQ1LTgzYWUtZjAyOWEzNjYwYzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaJzR+kltlO1lcAs+TwXseLUN1TNBSrzivfN mnYZJ8VL8F3WmASWvaLQIV0IUak+OZV8y02RvBykWVGLaSLlKvUVqgw7mIJhuXRn P6J62UNLc6QXjuNtEo75cVQzTLKV0+7AMsy5MeQ0FG2hR+Pmf6i/s2HGyZYvjDkA DCPfhTYJ35ROVoUjexlSIU5AjQReqk4gpza4dCfW6xGxdjCcoZrtuql5vK21albr KLj8G88yoI5H7PkEyzDJ0e1s73aaI9TfFmkH1BsuImEEfhD5PEkcrhq/uLUsz/fU tkldqz0tpjk8sfihkC9iy7C/7xIGXvT5lD9VnVkfGB3mx9EPMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzvQDxjoTV/fCazCV9K60XNU7xKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2I0MmEwMzYtMThiYy0z OTQzLWE1NWUtMjBiZTllOWJmOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAR5qO+DgEomO5DTUuR1/szXwDHX2HxQxN59hDd29Y58+NEYQA6QS22 ZQq9nYKDVnPL9xok4yrXTNcuUOffs/HDXpJ6VXx7G5jZ5JCKG/XtXWV4qTWbSPLP iQ0YnJHtkZbG1TozdZkdHI8aF4wSobnD6KFC+vbtlH62rUrMLWE58+Tpmnq0bTRv dk0xJ8oEnVFS607HzQkRm7U8hwmeEa/Gy5wHEhGzLxaCLzY60u/CrOw5Hbg4eY5K T8fb27UzwHuahcEoqaKW8RyJEPFXzExEy5DeKoFvaYItJ57I8O3dQ+OW0rC5Okrj caTMn9v6rP/zp/EBReSDHefb/5qEOX8= -----END CERTIFICATE-----Generated at Wed May 13 11:38:23 2026 by rpki-client