$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4ca8c3b-9666-353c-ac32-7b4bf191f70e.roa File: a4ca8c3b-9666-353c-ac32-7b4bf191f70e.roa (raw, json) Hash identifier: JdGz8pUugG2KijgFFv1HOExMGsMhZXU7M+gGSVgyuyk= Subject key identifier: 35:57:4A:50:FE:5E:E4:88:2E:20:C6:E7:C2:25:29:CE:2E:B0:13:05 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DB7702B2302F7B15D84BF84C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4ca8c3b-9666-353c-ac32-7b4bf191f70e.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 8069 IP address blocks: 20.153.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:2b:23:02:f7:b1:5d:84:bf:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=5b1f3ac7-5c79-4af0-80ff-c5f6af80bb94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ca:b3:53:c6:9c:61:69:24:ce:c7:15:2f:c1: 2f:a5:12:6e:ad:08:be:0b:38:fe:cb:d5:35:69:4b: 29:9e:79:34:ee:23:68:f6:f1:3f:1e:1f:f0:41:d4: 56:19:5b:bd:29:14:c5:c1:a5:0b:98:cb:2e:49:a3: d5:a8:be:aa:60:b2:4f:fe:fb:08:b3:54:db:4e:03: ca:11:d7:04:a5:02:ab:da:85:f7:ed:a2:25:58:5a: 49:cf:ce:c0:71:71:f0:64:44:4c:b5:30:6c:05:4d: 40:31:bf:37:13:f7:c6:42:bc:9d:f0:c6:29:6e:4d: 65:f2:bd:c8:63:d0:e8:d8:22:2e:cd:00:6e:01:2d: 9d:4c:97:7b:55:9d:f5:81:cf:92:ff:35:8c:85:24: 6a:42:02:fc:e0:3d:02:63:bf:0b:a7:cb:1e:f5:d7: 2a:55:da:c3:97:06:63:b0:2d:f0:71:00:05:32:3a: 58:64:c2:47:e5:4e:40:71:e3:22:32:78:92:c4:ac: bb:ba:c2:db:cc:be:2f:d4:3f:32:cd:21:f1:da:5c: f0:c0:e2:11:68:27:7b:41:33:d3:b3:0d:ba:c1:51: 98:70:a3:77:04:97:fe:aa:d0:3c:26:ee:a2:c3:4d: 12:d3:53:92:17:5e:42:74:6c:30:c8:c4:ac:7f:20: 87:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:57:4A:50:FE:5E:E4:88:2E:20:C6:E7:C2:25:29:CE:2E:B0:13:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4ca8c3b-9666-353c-ac32-7b4bf191f70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:99:ce:09:4d:ce:d8:d5:64:82:6a:6b:4c:ae:8e:1e:79:ea: 18:9e:23:0c:72:d3:d8:8f:72:00:f2:55:79:4f:e6:13:3b:ff: 3a:90:52:96:b6:80:1e:f2:0c:92:f3:69:84:f9:56:2c:df:c2: 7b:d6:e5:f4:83:bc:a4:29:a6:ea:d7:aa:90:7e:4f:c0:fb:9f: 3f:93:d1:50:40:bf:73:8f:7f:8f:1d:73:68:a9:e5:85:ce:a5: dd:a7:8b:fa:e5:eb:69:4e:3e:8d:fb:b5:af:0e:cd:00:55:70: ee:e1:90:e5:2f:6b:23:a1:ff:d8:be:18:29:2b:b5:4e:75:71: 8b:a8:15:ed:b6:4f:e8:9d:5a:72:da:3e:da:53:34:a1:61:d5: ab:e1:31:9c:c0:c7:68:9e:0e:78:63:f7:f7:f4:79:d6:59:41: ce:25:6b:e0:bf:ac:25:8b:b6:73:6e:12:bf:fd:86:45:f2:a5: 0b:8c:fb:58:68:df:fc:a0:e6:4e:cb:f5:57:bc:88:db:ed:ea: e2:18:87:41:71:ea:b6:b6:df:74:5a:45:79:02:8a:ad:6d:c4: 29:47:8d:23:32:2e:70:43:4b:ea:10:23:fc:21:fa:32:ab:84: 75:e9:7b:bf:ff:1f:f0:74:f1:ca:6b:29:a0:d7:31:a1:3c:61: 52:08:92:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cCsjAvexXYS/hMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk NWIxZjNhYzctNWM3OS00YWYwLTgwZmYtYzVmNmFmODBiYjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMqzU8acYWkkzscVL8EvpRJurQi+Czj+y9U1 aUspnnk07iNo9vE/Hh/wQdRWGVu9KRTFwaULmMsuSaPVqL6qYLJP/vsIs1TbTgPK EdcEpQKr2oX37aIlWFpJz87AcXHwZERMtTBsBU1AMb83E/fGQryd8MYpbk1l8r3I Y9Do2CIuzQBuAS2dTJd7VZ31gc+S/zWMhSRqQgL84D0CY78Lp8se9dcqVdrDlwZj sC3wcQAFMjpYZMJH5U5AceMiMniSxKy7usLbzL4v1D8yzSHx2lzwwOIRaCd7QTPT sw26wVGYcKN3BJf+qtA8Ju6iw00S01OSF15CdGwwyMSsfyCHpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVXSlD+XuSILiDG58IlKc4usBMFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTRjYThjM2ItOTY2Ni0z NTNjLWFjMzItN2I0YmYxOTFmNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqZzglNztjVZIJqa0yujh556hieIwxy09iPcgDyVXlP5hM7/zqQUpa2 gB7yDJLzaYT5VizfwnvW5fSDvKQppurXqpB+T8D7nz+T0VBAv3OPf48dc2ip5YXO pd2ni/rl62lOPo37ta8OzQBVcO7hkOUvayOh/9i+GCkrtU51cYuoFe22T+idWnLa PtpTNKFh1avhMZzAx2ieDnhj9/f0edZZQc4la+C/rCWLtnNuEr/9hkXypQuM+1ho 3/yg5k7L9Ve8iNvt6uIYh0Fx6ra233RaRXkCiq1txClHjSMyLnBDS+oQI/wh+jKr hHXpe7//H/B08cprKaDXMaE8YVIIkns= -----END CERTIFICATE-----Generated at Wed May 13 10:41:50 2026 by rpki-client