$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/572409db-3ef3-37dc-a464-eedbee4a47ed.roa File: 572409db-3ef3-37dc-a464-eedbee4a47ed.roa (raw, json) Hash identifier: uxNUeh9LW6JrSMLieykWNFeexLLZj3stonBP67Yh/Fs= Subject key identifier: 1F:4F:5F:54:6D:78:60:8E:D4:D5:9D:49:EF:9A:32:9C:BF:AD:48:55 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DB7702775ECF465BD805F3B40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/572409db-3ef3-37dc-a464-eedbee4a47ed.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 8069 IP address blocks: 20.153.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:27:75:ec:f4:65:bd:80:5f:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=96e321cd-d2f2-4c97-8de4-32883b18b211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:90:47:d8:fb:2c:75:b6:44:70:47:36:ec: 5f:8d:1b:22:86:33:fd:21:fa:f8:89:38:84:41:8b: 5a:db:c7:d5:5f:df:3b:53:22:dd:6e:34:1b:b8:01: 16:03:48:82:b7:78:01:11:18:12:3c:e6:32:de:a1: f4:fa:9f:25:7f:4c:b5:17:14:d4:c4:95:4e:e8:13: f9:49:9a:f8:6b:7b:48:69:33:ba:b4:68:e2:16:8c: fd:30:b8:11:77:bc:83:82:2e:64:cc:98:cb:b1:5f: 14:da:80:68:09:33:a6:38:75:7b:77:b0:a8:3d:16: 2e:40:e9:d5:f7:48:eb:7a:00:a0:8e:30:38:dd:6f: f7:31:12:44:22:f4:58:59:4a:52:97:ba:e9:52:10: f1:57:60:f4:78:80:c5:f4:d1:86:b4:17:91:15:83: ca:01:b0:64:44:f9:ca:9e:75:57:39:27:30:f7:da: 8e:f0:34:76:fd:fa:dc:b5:5c:a6:49:f2:ad:9e:3c: 24:00:07:fe:bd:28:c9:3f:de:0e:a0:1d:0c:21:a7: 5d:06:84:85:2f:e9:a9:c8:c6:13:35:6c:25:5e:2c: 62:80:b1:44:d8:19:3a:a7:be:06:e5:52:70:00:f2: 00:87:b4:a9:8c:ef:30:e7:2c:8e:b5:6d:24:ad:67: 5c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4F:5F:54:6D:78:60:8E:D4:D5:9D:49:EF:9A:32:9C:BF:AD:48:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/572409db-3ef3-37dc-a464-eedbee4a47ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:82:df:04:28:c3:2c:ee:2c:9a:2c:5b:74:8c:06:67:56:e8: 23:98:71:fe:e0:27:30:b0:f9:02:ef:07:f3:2d:1f:ca:0a:d8: ce:78:bf:2c:79:ec:c7:b2:cb:5d:ce:f3:60:50:1d:dc:74:e2: 50:0f:ea:16:ee:07:f5:36:83:fa:4e:28:54:c0:7d:7b:0a:68: 3f:cd:8b:c4:a8:c5:85:63:37:90:bd:84:68:e5:c5:38:8a:73: ab:09:d2:67:7c:fd:fe:84:a6:27:45:77:c1:46:a1:86:52:c7: ff:2e:4e:bb:0e:34:cf:12:a9:5c:74:46:ce:9c:c4:de:49:f5: 26:ba:3b:93:9d:90:e0:73:d9:4f:f2:10:25:df:75:5d:08:28: 56:81:5c:3f:c6:89:8c:75:3f:52:8d:ad:3e:51:ff:f3:cd:3d: 62:67:cb:ae:db:0e:3e:d9:84:8a:4e:4b:3e:a8:19:e2:48:3f: 3c:e7:99:12:60:82:83:2e:21:bf:69:fe:97:76:ef:51:48:1d: c9:36:25:24:57:80:0c:53:1b:17:11:de:aa:6e:97:a2:46:d2: 8b:ef:bf:cc:8c:c2:37:18:0f:f3:42:a8:d9:9f:8e:d6:70:34: 6f:48:e1:16:39:64:e3:30:e6:8b:58:29:48:93:72:49:c7:e6: b2:2a:b2:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cCd17PRlvYBfO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk OTZlMzIxY2QtZDJmMi00Yzk3LThkZTQtMzI4ODNiMThiMjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqWQR9j7LHW2RHBHNuxfjRsihjP9Ifr4iTiE QYta28fVX987UyLdbjQbuAEWA0iCt3gBERgSPOYy3qH0+p8lf0y1FxTUxJVO6BP5 SZr4a3tIaTO6tGjiFoz9MLgRd7yDgi5kzJjLsV8U2oBoCTOmOHV7d7CoPRYuQOnV 90jregCgjjA43W/3MRJEIvRYWUpSl7rpUhDxV2D0eIDF9NGGtBeRFYPKAbBkRPnK nnVXOScw99qO8DR2/frctVymSfKtnjwkAAf+vSjJP94OoB0MIaddBoSFL+mpyMYT NWwlXixigLFE2Bk6p74G5VJwAPIAh7SpjO8w5yyOtW0krWdcmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9PX1RteGCO1NWdSe+aMpy/rUhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTcyNDA5ZGItM2VmMy0z N2RjLWE0NjQtZWVkYmVlNGE0N2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuC3wQowyzuLJosW3SMBmdW6COYcf7gJzCw+QLvB/MtH8oK2M54vyx5 7Meyy13O82BQHdx04lAP6hbuB/U2g/pOKFTAfXsKaD/Ni8SoxYVjN5C9hGjlxTiK c6sJ0md8/f6EpidFd8FGoYZSx/8uTrsONM8SqVx0Rs6cxN5J9Sa6O5OdkOBz2U/y ECXfdV0IKFaBXD/GiYx1P1KNrT5R//PNPWJny67bDj7ZhIpOSz6oGeJIPzznmRJg goMuIb9p/pd271FIHck2JSRXgAxTGxcR3qpul6JG0ovvv8yMwjcYD/NCqNmfjtZw NG9I4RY5ZOMw5otYKUiTcknH5rIqsiQ= -----END CERTIFICATE-----Generated at Wed May 13 10:58:50 2026 by rpki-client