$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ae21d155-9407-3def-b665-6cf578e3230e.roa File: ae21d155-9407-3def-b665-6cf578e3230e.roa (raw, json) Hash identifier: WUeWmqT/L0MbQiGE1cbLiRz6v9J381j0WBbOOY5AvEA= Subject key identifier: F0:E7:4C:BB:F6:25:A0:8E:EA:F7:BA:09:F5:9F:67:A8:B9:3C:EB:02 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA6B0177DA50287DF69024B40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ae21d155-9407-3def-b665-6cf578e3230e.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:17:7d:a5:02:87:df:69:02:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=5d092921-d14c-41f7-8acb-3263bb5b702e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bc:bb:5e:c7:cc:ee:b6:15:ea:b1:13:b2:2d: a6:06:cb:28:2c:cc:de:ac:1f:45:e6:5e:a8:13:3b: 02:e8:29:e0:d9:e2:89:9a:96:46:74:c5:b1:04:9d: 71:a6:ef:1e:7e:19:af:be:9a:b1:ef:f6:7b:18:a4: 43:c5:e4:e2:d9:9b:8c:77:1e:6b:66:c0:ee:2f:f8: 58:1c:31:2b:d0:f0:36:e3:b5:fa:c9:84:cd:0a:4b: e7:a2:75:d0:a9:54:96:63:f4:f8:fa:45:d9:48:3d: 60:96:01:01:e1:32:89:22:90:1f:49:b8:ee:04:26: 01:9c:d0:d3:b2:ee:bc:02:78:db:f4:4c:59:2c:4a: 2e:81:f7:c1:e3:09:9c:14:fb:14:71:a6:f4:38:04: cf:ed:4f:54:73:e4:e1:9b:de:94:24:a9:30:0e:63: aa:8a:f7:40:d2:b3:4d:c2:d1:d0:a9:25:84:b6:59: b5:1b:d3:25:c0:b9:6a:67:ac:cb:78:c2:dd:a2:d4: fd:5b:7f:2d:cc:4e:ab:24:f2:91:13:a5:99:b7:b2: 22:1c:89:08:2f:a7:31:5d:5b:92:74:0e:89:4f:dd: 35:d9:66:d3:8f:ca:64:67:0f:c3:00:bc:74:73:57: 9a:f2:f1:7d:b8:73:8d:40:55:97:fc:2c:55:7a:a4: 21:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E7:4C:BB:F6:25:A0:8E:EA:F7:BA:09:F5:9F:67:A8:B9:3C:EB:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ae21d155-9407-3def-b665-6cf578e3230e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:24:08:30:50:96:49:5d:f2:d8:8b:89:e5:f4:7d:c8:2f:3a: c1:8a:e4:25:86:3f:cf:5e:e2:74:c7:cb:d3:f0:e7:b5:03:b4: 4b:8c:4e:8e:e0:a9:40:1c:e3:84:ef:21:ac:6d:0a:4e:48:3f: e1:0a:f5:cc:ab:9d:21:83:5b:dd:fe:3b:b0:f1:0c:ef:1b:05: 38:4e:02:83:bc:e2:d7:04:a0:97:1e:be:a4:f1:c8:62:0e:9c: dc:f2:48:b5:c1:64:7e:97:0b:dc:e8:1e:2e:bc:0e:04:7c:a0: 9c:4a:7b:15:8c:32:13:8b:ae:4a:33:00:d5:00:20:ff:29:cb: c0:9c:64:fc:61:0b:be:7d:03:65:93:ad:31:65:3a:31:47:8e: fa:ca:97:35:5e:73:7e:3b:e3:b8:d6:c1:de:5c:83:36:76:f0: 75:1a:40:6a:7f:87:86:dc:18:70:6a:8d:f6:43:09:dc:9c:0e: b8:64:eb:92:3f:2c:85:89:40:9f:97:a9:dc:58:7a:6f:5c:76: 0f:5a:70:96:9a:dc:6a:64:53:ef:9a:7a:5c:f4:00:3d:ad:6d: f5:8d:fe:ac:f7:ea:54:fb:53:50:2b:02:ac:1c:99:f3:3e:25: 6d:b5:fb:aa:5d:51:81:05:93:00:0f:27:d7:79:dd:b3:d3:f4: bc:49:d8:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBd9pQKH32kCS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NWQwOTI5MjEtZDE0Yy00MWY3LThhY2ItMzI2M2JiNWI3MDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhry7XsfM7rYV6rETsi2mBssoLMzerB9F5l6o EzsC6Cng2eKJmpZGdMWxBJ1xpu8efhmvvpqx7/Z7GKRDxeTi2ZuMdx5rZsDuL/hY HDEr0PA247X6yYTNCkvnonXQqVSWY/T4+kXZSD1glgEB4TKJIpAfSbjuBCYBnNDT su68Anjb9ExZLEougffB4wmcFPsUcab0OATP7U9Uc+Thm96UJKkwDmOqivdA0rNN wtHQqSWEtlm1G9MlwLlqZ6zLeMLdotT9W38tzE6rJPKRE6WZt7IiHIkIL6cxXVuS dA6JT9012WbTj8pkZw/DALx0c1ea8vF9uHONQFWX/CxVeqQhhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDnTLv2JaCO6ve6CfWfZ6i5POsCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWUyMWQxNTUtOTQwNy0z ZGVmLWI2NjUtNmNmNTc4ZTMyMzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJnsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgkCDBQlkld8tiLieX0fcgvOsGK5CWGP89e4nTHy9Pw57UDtEuMTo7g qUAc44TvIaxtCk5IP+EK9cyrnSGDW93+O7DxDO8bBThOAoO84tcEoJcevqTxyGIO nNzySLXBZH6XC9zoHi68DgR8oJxKexWMMhOLrkozANUAIP8py8CcZPxhC759A2WT rTFlOjFHjvrKlzVec34747jWwd5cgzZ28HUaQGp/h4bcGHBqjfZDCdycDrhk65I/ LIWJQJ+XqdxYem9cdg9acJaa3GpkU++aelz0AD2tbfWN/qz36lT7U1ArAqwcmfM+ JW21+6pdUYEFkwAPJ9d53bPT9LxJ2Bs= -----END CERTIFICATE-----Generated at Wed May 13 11:44:58 2026 by rpki-client