$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6952396b-a10f-3821-b98d-b381344b9d00.roa File: 6952396b-a10f-3821-b98d-b381344b9d00.roa (raw, json) Hash identifier: cLJgb/q8TExi8D9AvTdVzzirmtbyxhIPT9gEO9xjckA= Subject key identifier: E1:D9:60:73:4F:B1:59:1B:16:82:A2:71:AA:47:6D:FB:16:2E:34:1E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA6B02CC4244E97D24AC85D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6952396b-a10f-3821-b98d-b381344b9d00.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:2c:c4:24:4e:97:d2:4a:c8:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=631b442d-2b8c-45ab-9ca0-72b341f640e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:94:ba:e8:26:26:ed:01:8d:aa:37:17:4b: 96:70:d1:e5:91:38:19:cb:30:37:fa:8d:27:00:b5: 81:c3:ca:4a:5f:0d:95:10:4d:c1:f1:6e:15:18:ed: 83:71:f4:ea:fe:67:9a:93:15:7e:4e:69:a9:54:49: dd:b5:c9:76:e0:ff:ea:a6:28:13:f0:ba:cb:32:73: 71:bb:7e:3f:07:01:39:79:6e:53:cc:13:4b:92:f0: f9:3b:2e:06:84:e1:38:96:6d:ed:c3:c8:85:c5:bb: 3c:dd:1a:86:70:dd:f1:10:7e:1b:d0:07:42:85:b4: 00:9f:4b:a9:40:30:31:7d:cf:ad:31:97:f1:3c:d9: aa:44:41:15:33:78:92:25:75:fc:0c:d0:fe:5e:9f: bf:86:01:2b:91:38:1f:aa:0d:50:37:35:51:cf:68: 86:1f:4c:f4:7f:85:6d:0c:9e:eb:76:7e:c1:f0:e0: 49:e4:69:49:ca:1e:5c:c3:20:26:88:01:96:c1:19: a9:f2:2c:ab:61:6a:8e:e9:2f:21:d2:59:5e:25:63: 04:58:9a:84:10:f4:34:87:6e:91:00:b8:a1:22:52: 62:d9:06:43:9d:78:e7:73:23:96:1f:1b:5c:2f:3b: 22:24:a0:7c:31:8d:6a:5d:fc:af:8a:3b:81:56:88: b7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D9:60:73:4F:B1:59:1B:16:82:A2:71:AA:47:6D:FB:16:2E:34:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6952396b-a10f-3821-b98d-b381344b9d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:da:ec:25:9c:30:20:73:6f:b9:df:76:85:c0:e1:04:11:d3: d1:3c:45:f0:72:75:64:3e:11:3a:f8:b0:15:30:cb:c1:62:e7: d4:80:35:b6:d8:aa:bf:2d:2c:0e:7c:5b:10:29:28:d6:f2:dc: 09:99:0d:34:22:82:a4:c6:68:23:a2:32:dc:50:5f:55:52:14: f6:44:05:ef:6f:e9:ae:2f:5d:38:32:6d:8e:80:0f:f7:cc:79: 2a:eb:e9:ec:0e:d3:63:0f:cd:3f:f6:25:be:b6:54:9c:c1:68: b7:05:39:fb:7b:bc:8b:74:63:d9:ac:d0:78:4e:77:98:1e:7b: 59:05:85:1b:e5:d7:a8:71:e3:e7:d6:3a:d5:c6:19:12:68:c5: de:df:2b:c4:b7:bc:31:d7:98:51:c5:b9:ea:0e:29:9c:a4:46: 38:8d:f4:95:9e:cc:9c:f7:93:f4:08:7b:82:d6:9c:af:15:10: 7b:7e:08:60:2e:09:af:53:40:92:8e:44:4e:e2:63:36:4a:d4: 37:c2:4e:f5:71:58:04:76:90:fc:4d:c1:46:37:9c:50:b6:00: 8f:0d:51:7c:0c:9d:4d:d8:7c:12:d8:b4:a8:e5:fc:be:18:5a: 1b:6d:2c:9a:e2:8c:21:11:f8:18:1d:e0:82:3c:1b:d4:ef:b0: 48:ce:ad:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCzEJE6X0krIXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NjMxYjQ0MmQtMmI4Yy00NWFiLTljYTAtNzJiMzQxZjY0MGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfeUuugmJu0Bjao3F0uWcNHlkTgZyzA3+o0n ALWBw8pKXw2VEE3B8W4VGO2DcfTq/meakxV+TmmpVEndtcl24P/qpigT8LrLMnNx u34/BwE5eW5TzBNLkvD5Oy4GhOE4lm3tw8iFxbs83RqGcN3xEH4b0AdChbQAn0up QDAxfc+tMZfxPNmqREEVM3iSJXX8DND+Xp+/hgErkTgfqg1QNzVRz2iGH0z0f4Vt DJ7rdn7B8OBJ5GlJyh5cwyAmiAGWwRmp8iyrYWqO6S8h0lleJWMEWJqEEPQ0h26R ALihIlJi2QZDnXjncyOWHxtcLzsiJKB8MY1qXfyvijuBVoi3xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHZYHNPsVkbFoKicapHbfsWLjQeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjk1MjM5NmItYTEwZi0z ODIxLWI5OGQtYjM4MTM0NGI5ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7a7CWcMCBzb7nfdoXA4QQR09E8RfBydWQ+ETr4sBUwy8Fi59SANbbY qr8tLA58WxApKNby3AmZDTQigqTGaCOiMtxQX1VSFPZEBe9v6a4vXTgybY6AD/fM eSrr6ewO02MPzT/2Jb62VJzBaLcFOft7vIt0Y9ms0HhOd5gee1kFhRvl16hx4+fW OtXGGRJoxd7fK8S3vDHXmFHFueoOKZykRjiN9JWezJz3k/QIe4LWnK8VEHt+CGAu Ca9TQJKORE7iYzZK1DfCTvVxWAR2kPxNwUY3nFC2AI8NUXwMnU3YfBLYtKjl/L4Y WhttLJrijCER+Bgd4II8G9TvsEjOraA= -----END CERTIFICATE-----Generated at Wed May 13 15:16:45 2026 by rpki-client