$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72697b93-e646-3a7c-af08-bda99f4f1b1f.roa File: 72697b93-e646-3a7c-af08-bda99f4f1b1f.roa (raw, json) Hash identifier: 1gKypySXd7vpVl08icUb8hK8QH7resVPdNVD/u3EdPs= Subject key identifier: BB:5B:61:AF:C6:C9:3C:B5:86:5B:B3:D4:A2:38:2A:C8:B8:C0:39:0D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DB77027D91D37D4ABB293D680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72697b93-e646-3a7c-af08-bda99f4f1b1f.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 8069 IP address blocks: 20.153.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:27:d9:1d:37:d4:ab:b2:93:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=46dee9db-20af-4f8d-bc98-ebc9990dbb92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:85:cc:cf:31:33:c9:b7:f2:40:c6:8c:8f:0d: 46:fa:02:37:d4:69:1f:c7:f4:72:f3:b2:18:51:a6: dc:96:c7:71:34:e3:bf:72:10:13:ad:f8:3c:e4:26: 60:1a:b0:35:d8:bd:ac:7f:50:1c:23:ad:cc:c5:f5: bd:42:1e:1b:85:3b:d4:ca:bd:e3:ef:b4:2f:33:a6: 1f:49:bb:bd:70:c8:e0:bf:c7:8e:76:ff:17:47:d8: a4:aa:a8:f9:74:a6:23:d7:7d:d6:04:46:65:b9:55: f9:67:3e:0b:f1:8d:92:b5:a1:96:5a:9b:fd:7e:31: 44:a7:65:9c:d7:b8:ee:b6:ad:ee:13:17:6d:91:40: 0b:92:91:2a:55:99:d2:aa:c1:21:4a:21:ac:99:c9: b3:80:81:6d:6c:26:13:bf:af:9e:cf:42:4f:f9:cb: 53:30:c0:37:7d:2f:e3:25:55:d9:6e:42:7c:c5:e0: 73:5e:96:ae:b6:67:93:85:b0:f8:aa:fa:5e:2f:8f: 9a:fe:21:f3:65:1f:bd:02:aa:70:0d:6f:09:95:0f: 7c:d4:61:a9:9f:e0:68:81:dd:c2:e4:56:5a:ae:bf: 99:b9:be:19:b4:68:99:28:81:f5:4e:26:a7:e0:59: 47:5a:96:51:a1:4e:7a:55:e6:8e:03:73:7e:17:4a: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5B:61:AF:C6:C9:3C:B5:86:5B:B3:D4:A2:38:2A:C8:B8:C0:39:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72697b93-e646-3a7c-af08-bda99f4f1b1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:f7:7c:c1:ef:94:49:11:82:fc:66:d2:27:6e:8a:9c:06:69: 80:e8:5b:1d:2a:89:60:15:67:70:09:59:18:20:61:cc:b7:71: 07:7f:4a:3d:cc:28:52:75:c6:a5:8c:f9:66:80:5f:53:ee:c5: 0f:84:e4:01:5f:5a:bc:23:2b:3c:b3:13:13:ff:c7:25:62:6c: df:f6:66:26:68:3b:0c:74:89:7b:ee:6e:73:9e:6c:44:29:1d: 5d:55:93:c9:9c:06:03:62:7a:8d:70:ac:37:82:93:6e:6b:29: 0d:dd:b6:e1:86:36:d1:b3:60:23:5d:cd:4b:56:5d:0c:3e:49: e3:bc:75:7c:ad:ad:cb:01:a4:20:94:d3:39:50:16:48:b6:8e: 69:a9:54:e2:93:4d:68:fa:f9:6d:d1:64:34:19:74:a1:8a:97: dd:cf:c5:4e:1f:1a:41:98:5f:a1:c8:d6:41:6c:b5:fb:2b:1b: 49:ca:5c:2c:18:78:02:0e:f0:44:70:c6:10:31:ee:d6:27:4a: b6:3d:3a:a5:b3:58:b5:80:5e:3d:82:df:54:28:dc:92:b9:8e: d3:87:18:7b:b0:c4:cf:d7:80:92:c5:03:21:ab:98:d7:11:00: ee:02:d1:0c:ec:56:fa:0f:0a:4b:c3:93:8e:a6:c6:07:54:77: 7e:a8:d8:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cCfZHTfUq7KT1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk NDZkZWU5ZGItMjBhZi00ZjhkLWJjOTgtZWJjOTk5MGRiYjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IXMzzEzybfyQMaMjw1G+gI31Gkfx/Ry87IY UabclsdxNOO/chATrfg85CZgGrA12L2sf1AcI63MxfW9Qh4bhTvUyr3j77QvM6Yf Sbu9cMjgv8eOdv8XR9ikqqj5dKYj133WBEZluVX5Zz4L8Y2StaGWWpv9fjFEp2Wc 17jutq3uExdtkUALkpEqVZnSqsEhSiGsmcmzgIFtbCYTv6+ez0JP+ctTMMA3fS/j JVXZbkJ8xeBzXpautmeThbD4qvpeL4+a/iHzZR+9AqpwDW8JlQ981GGpn+Bogd3C 5FZarr+Zub4ZtGiZKIH1Tian4FlHWpZRoU56VeaOA3N+F0pLFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtbYa/GyTy1hluz1KI4Ksi4wDkNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzI2OTdiOTMtZTY0Ni0z YTdjLWFmMDgtYmRhOTlmNGYxYjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJv3fMHvlEkRgvxm0iduipwGaYDoWx0qiWAVZ3AJWRggYcy3cQd/Sj3M KFJ1xqWM+WaAX1PuxQ+E5AFfWrwjKzyzExP/xyVibN/2ZiZoOwx0iXvubnOebEQp HV1Vk8mcBgNieo1wrDeCk25rKQ3dtuGGNtGzYCNdzUtWXQw+SeO8dXytrcsBpCCU 0zlQFki2jmmpVOKTTWj6+W3RZDQZdKGKl93PxU4fGkGYX6HI1kFstfsrG0nKXCwY eAIO8ERwxhAx7tYnSrY9OqWzWLWAXj2C31Qo3JK5jtOHGHuwxM/XgJLFAyGrmNcR AO4C0QzsVvoPCkvDk46mxgdUd36o2ME= -----END CERTIFICATE-----Generated at Wed May 13 07:58:31 2026 by rpki-client