$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c330b76c-c296-304a-84c3-e600b3a83a94.roa File: c330b76c-c296-304a-84c3-e600b3a83a94.roa (raw, json) Hash identifier: bl6Qj2hL4cesecRW2bCL1LsNczzbac27VHfMiuIO30g= Subject key identifier: 28:F4:7D:3C:24:16:6F:E7:1B:8C:08:71:91:05:55:FC:67:0F:58:9D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DB7703E0715BB63D0EC4D64C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c330b76c-c296-304a-84c3-e600b3a83a94.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 8069 IP address blocks: 20.153.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:3e:07:15:bb:63:d0:ec:4d:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=d6c457d7-3656-4ae3-b5ad-e752deba92f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7d:76:23:e6:43:ea:cb:25:fa:e1:ee:2f:b9: 04:4f:88:4d:96:fc:36:31:7f:25:67:c7:f1:2f:6f: 3b:6a:ad:93:33:ea:14:97:20:1e:17:bc:af:16:c1: fc:e4:6e:2b:5a:cf:63:ee:91:be:60:f9:bf:17:45: 60:4e:13:f4:5a:41:ac:25:34:b6:1a:86:3c:7d:a7: d9:eb:56:b8:6e:7e:82:20:3b:2a:e4:cd:d4:5b:f1: b4:e5:e0:db:d4:59:f9:66:56:6f:de:af:a2:b1:e5: 33:0d:fa:a7:d1:27:d2:93:3c:9a:c5:ef:92:91:b5: 25:c8:a5:0b:06:47:3a:62:17:3f:cf:19:dd:61:63: bf:28:c8:da:de:66:31:af:92:38:1e:1e:1c:f8:50: 9b:fc:53:e0:5d:6e:ba:30:d9:07:98:59:36:5a:f1: 43:a4:d0:22:d9:89:91:b8:11:e6:da:d1:62:7c:41: 0f:a4:c3:08:b0:db:7e:9a:54:c4:69:30:ed:18:00: 4c:13:db:3a:f0:8e:9f:5b:c9:8c:ae:e2:bb:71:53: 71:10:cb:18:b8:33:4d:6f:58:62:48:19:5d:5a:0c: d3:12:b7:d5:23:8c:a8:58:ce:dc:27:54:13:b8:fd: 51:4d:1e:d6:c2:c5:5b:83:5f:93:25:6c:ad:cf:c9: 0e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F4:7D:3C:24:16:6F:E7:1B:8C:08:71:91:05:55:FC:67:0F:58:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c330b76c-c296-304a-84c3-e600b3a83a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:8c:fc:a1:dc:e5:6a:81:40:f7:6e:82:33:67:30:96:8a:ae: cf:c4:3e:02:f7:19:35:49:cc:e7:35:78:40:c5:0e:30:4f:75: c9:69:9d:dd:11:1b:a4:5b:f0:af:31:cc:ba:e8:12:65:0a:35: 2c:08:55:c1:dd:3c:20:aa:38:42:a1:1f:78:b7:0b:89:77:9e: 0c:9e:25:64:b9:bf:8e:e2:86:69:3f:9d:1a:86:e5:f8:b5:53: 3b:d7:b7:d1:ef:2f:aa:83:e0:22:77:53:eb:a1:90:98:50:c2: a7:21:a5:9f:e7:73:27:33:b3:82:fb:73:e9:9f:c6:a7:6f:c3: b5:ed:91:25:9e:b1:a7:4f:f0:a7:3d:fa:9e:d2:b5:b6:97:c6: 73:f4:3d:7c:f9:ea:0b:16:b5:e3:de:6b:d0:52:a5:a6:20:d1: df:33:2a:4b:de:71:99:cd:c6:10:77:1a:a2:a2:48:be:26:5b: 09:43:26:8f:b4:30:86:9b:82:2e:86:53:ff:55:10:a5:c7:bd: 8c:45:67:5f:6d:b7:2e:c1:a2:bf:57:ad:dc:2c:98:b3:40:02: f3:fe:4c:d2:7d:e8:3a:b5:1d:f6:d6:99:28:4e:cb:b0:b1:07: 63:3b:d3:bf:ff:15:16:d0:d2:6c:8d:97:8f:71:a9:f8:f6:a8: 2f:b8:c6:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cD4HFbtj0OxNZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk ZDZjNDU3ZDctMzY1Ni00YWUzLWI1YWQtZTc1MmRlYmE5MmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn12I+ZD6ssl+uHuL7kET4hNlvw2MX8lZ8fx L287aq2TM+oUlyAeF7yvFsH85G4rWs9j7pG+YPm/F0VgThP0WkGsJTS2GoY8fafZ 61a4bn6CIDsq5M3UW/G05eDb1Fn5ZlZv3q+iseUzDfqn0SfSkzyaxe+SkbUlyKUL Bkc6Yhc/zxndYWO/KMja3mYxr5I4Hh4c+FCb/FPgXW66MNkHmFk2WvFDpNAi2YmR uBHm2tFifEEPpMMIsNt+mlTEaTDtGABME9s68I6fW8mMruK7cVNxEMsYuDNNb1hi SBldWgzTErfVI4yoWM7cJ1QTuP1RTR7WwsVbg1+TJWytz8kO/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCj0fTwkFm/nG4wIcZEFVfxnD1idMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzMzMGI3NmMtYzI5Ni0z MDRhLTg0YzMtZTYwMGIzYTgzYTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJknMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGM/KHc5WqBQPdugjNnMJaKrs/EPgL3GTVJzOc1eEDFDjBPdclpnd0R G6Rb8K8xzLroEmUKNSwIVcHdPCCqOEKhH3i3C4l3ngyeJWS5v47ihmk/nRqG5fi1 UzvXt9HvL6qD4CJ3U+uhkJhQwqchpZ/ncyczs4L7c+mfxqdvw7XtkSWesadP8Kc9 +p7StbaXxnP0PXz56gsWtePea9BSpaYg0d8zKkvecZnNxhB3GqKiSL4mWwlDJo+0 MIabgi6GU/9VEKXHvYxFZ19tty7Bor9XrdwsmLNAAvP+TNJ96Dq1HfbWmShOy7Cx B2M707//FRbQ0myNl49xqfj2qC+4xrE= -----END CERTIFICATE-----Generated at Wed May 13 11:30:31 2026 by rpki-client