$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b1dab997-ab15-36cc-b970-6890bf9c1e8e.roa File: b1dab997-ab15-36cc-b970-6890bf9c1e8e.roa (raw, json) Hash identifier: 6glmzIo7q0m4QGODQU07VnMrLjqcYlGqJvV/+BQ4aI4= Subject key identifier: C0:BF:4B:07:22:78:3D:93:E8:CF:99:76:32:64:79:FD:ED:67:D0:3F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA6B0334718744F1038481C00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b1dab997-ab15-36cc-b970-6890bf9c1e8e.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:33:47:18:74:4f:10:38:48:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=1ca2d9e1-1bfd-4c6a-986d-8e8e83fa112c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:32:64:8e:2c:19:ff:1b:35:15:da:c6:75:07: f6:58:88:cd:fb:17:08:34:f7:ee:ff:49:19:f0:48: 67:bd:ea:45:3e:76:7f:c6:c2:e2:b7:44:71:61:3a: 9e:a9:66:c1:42:eb:b9:36:ff:3f:0f:9e:2c:e3:d7: f3:02:9e:7d:35:e8:07:6e:a8:91:ff:44:47:c0:de: b7:cc:6f:13:73:f3:71:f7:07:98:7f:73:b1:80:be: 3e:ba:fd:61:d6:6c:69:95:72:d7:39:9a:96:84:31: 6d:7e:63:0e:98:d9:9d:54:54:45:62:3d:b6:76:51: cf:9a:7a:34:81:0b:c7:81:ef:a0:fc:db:4d:da:28: 32:43:69:e3:59:c9:9b:84:04:73:e1:b8:1b:9c:af: ef:bd:3e:29:98:67:57:f1:69:e2:75:76:1e:32:fb: 8c:9b:8d:52:5e:90:f6:f3:76:5d:47:af:1a:8c:61: 25:47:e8:f9:b0:ef:7b:7f:6d:92:73:bc:87:e8:53: d1:c8:1e:8e:10:77:0d:69:40:ab:de:47:78:50:14: 17:54:dd:5f:2f:83:68:e2:2f:e9:b3:cb:e0:e8:59: 2d:cf:93:7f:84:84:f1:5c:bb:92:ae:9b:2e:14:82: 81:42:cd:fa:a6:d9:48:24:c9:b9:27:58:f6:0b:50: 1b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BF:4B:07:22:78:3D:93:E8:CF:99:76:32:64:79:FD:ED:67:D0:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b1dab997-ab15-36cc-b970-6890bf9c1e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:a9:66:4c:3c:0c:d7:5b:98:f2:42:8d:9e:2b:07:94:6e:22: dc:9f:04:d8:e5:0b:e5:44:79:4b:c4:5b:85:b9:85:ca:b7:1f: 63:73:db:ac:c9:00:5f:ba:79:18:a9:be:f6:9b:be:53:a8:65: 37:60:21:51:ec:7b:8b:47:53:63:e4:a9:61:68:fe:12:5a:1d: bd:fd:8f:78:81:82:6f:08:72:ff:84:32:45:6a:27:2b:a9:63: 47:44:f9:85:90:be:28:ef:ae:1b:6b:1e:62:09:ee:99:8a:e4: 7b:2a:6a:b3:d3:7c:c7:8c:5e:05:98:07:52:68:ba:81:d8:71: 13:e6:1e:30:91:78:59:bd:9f:04:85:97:9e:29:ed:19:8a:bf: de:cb:24:1a:b4:6e:38:20:76:f1:e3:fd:b2:f5:e6:8e:01:5a: fd:73:8f:0f:57:88:bf:d5:31:f9:f2:48:d2:b2:4d:a2:60:e1: a0:2f:c3:8a:c8:dd:ec:76:e2:b7:dd:5a:89:be:1d:4a:da:88: 6a:df:09:6c:06:1b:0d:b6:41:35:60:b7:47:f1:6e:1b:29:dc: 7b:de:01:2a:f6:48:20:9f:79:3d:18:01:ec:3a:50:20:6f:ad: 7d:11:d7:1d:c3:57:cd:d8:4d:5a:4d:79:cd:94:a9:94:69:fb: ba:b5:34:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msDNHGHRPEDhIHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MWNhMmQ5ZTEtMWJmZC00YzZhLTk4NmQtOGU4ZTgzZmExMTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujJkjiwZ/xs1FdrGdQf2WIjN+xcINPfu/0kZ 8EhnvepFPnZ/xsLit0RxYTqeqWbBQuu5Nv8/D54s49fzAp59NegHbqiR/0RHwN63 zG8Tc/Nx9weYf3OxgL4+uv1h1mxplXLXOZqWhDFtfmMOmNmdVFRFYj22dlHPmno0 gQvHge+g/NtN2igyQ2njWcmbhARz4bgbnK/vvT4pmGdX8WnidXYeMvuMm41SXpD2 83ZdR68ajGElR+j5sO97f22Sc7yH6FPRyB6OEHcNaUCr3kd4UBQXVN1fL4No4i/p s8vg6Fktz5N/hITxXLuSrpsuFIKBQs36ptlIJMm5J1j2C1AbswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMC/SwcieD2T6M+ZdjJkef3tZ9A/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjFkYWI5OTctYWIxNS0z NmNjLWI5NzAtNjg5MGJmOWMxZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqpZkw8DNdbmPJCjZ4rB5RuItyfBNjlC+VEeUvEW4W5hcq3H2Nz26zJ AF+6eRipvvabvlOoZTdgIVHse4tHU2PkqWFo/hJaHb39j3iBgm8Icv+EMkVqJyup Y0dE+YWQvijvrhtrHmIJ7pmK5HsqarPTfMeMXgWYB1JouoHYcRPmHjCReFm9nwSF l54p7RmKv97LJBq0bjggdvHj/bL15o4BWv1zjw9XiL/VMfnySNKyTaJg4aAvw4rI 3ex24rfdWom+HUraiGrfCWwGGw22QTVgt0fxbhsp3HveASr2SCCfeT0YAew6UCBv rX0R1x3DV83YTVpNec2UqZRp+7q1NKI= -----END CERTIFICATE-----Generated at Wed May 13 11:32:03 2026 by rpki-client