$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c94cb722-73e6-3d84-8ff9-c329ac78b958.roa File: c94cb722-73e6-3d84-8ff9-c329ac78b958.roa (raw, json) Hash identifier: xhlm3uJHqXQfS1vNgVgIUruVbUngf1ImOl8tPs7rmAM= Subject key identifier: EC:1D:90:C9:83:D2:8A:20:86:91:03:B3:75:0F:BF:64:F3:68:AC:EF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D975567E6ABCDA01267D77040 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c94cb722-73e6-3d84-8ff9-c329ac78b958.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.153.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:67:e6:ab:cd:a0:12:67:d7:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=b8f39d8a-7695-4395-abba-cf1a03c77aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:06:eb:a2:00:54:d0:60:a3:5d:bf:22:f1:e2: bf:a0:e4:89:b2:7c:8c:96:3e:ea:2d:25:a3:f8:30: bf:b7:91:55:36:bb:bd:b8:80:e9:e5:5f:7c:99:9d: 3d:1b:e7:f0:e5:98:82:18:2c:db:80:67:31:6e:04: 2c:3d:4c:5b:bd:f0:54:c7:43:11:fd:9f:f2:bb:5c: ee:3b:76:b0:c6:7e:3b:9b:4e:3c:d3:1d:90:95:14: 61:e7:7b:05:41:fb:9e:93:a6:f5:18:9c:d8:30:a3: e9:d0:ab:4d:d6:08:71:95:97:ca:b8:62:18:c5:f4: fe:93:0c:57:02:bb:48:f4:51:c0:02:99:66:c1:04: b5:1d:ff:cd:04:22:02:90:45:94:8d:0c:ad:36:51: ba:15:b7:5f:dc:6e:b7:78:24:8d:27:6a:45:d3:62: 83:d1:c4:29:31:4a:83:9e:6f:c4:50:6a:7d:22:59: 9d:ba:cd:ec:3b:a9:0a:eb:3f:7a:7c:c6:92:74:48: 02:67:20:fa:c3:94:47:08:63:fc:7e:96:fb:ac:f1: 07:4a:6b:50:24:5c:99:85:40:69:a3:76:80:ae:d0: 90:f7:61:68:cb:25:27:b9:02:94:78:ca:14:02:30: 5a:6b:9a:e8:06:d7:d5:fc:10:84:60:14:1d:b0:84: da:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1D:90:C9:83:D2:8A:20:86:91:03:B3:75:0F:BF:64:F3:68:AC:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c94cb722-73e6-3d84-8ff9-c329ac78b958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:ad:0e:20:70:70:83:3c:60:e4:01:ba:ce:d5:b3:21:4c:96: 43:3f:71:ac:94:09:03:26:99:71:5d:08:93:c8:f2:42:f9:eb: 09:45:b5:21:dc:bf:9f:04:01:a7:6d:83:1a:15:b6:96:80:60: 89:d7:33:49:03:4a:87:b6:fa:5d:20:5c:4d:bb:47:07:67:fe: 48:c2:47:d5:50:09:d6:a5:aa:28:bb:02:4c:0f:08:48:da:82: a4:74:6c:69:8b:61:fd:d2:66:7a:1d:3b:7d:48:22:0e:48:10: 7c:6d:0f:8e:35:10:ca:fa:0e:e6:fa:8a:92:dc:31:8c:fa:80: 29:44:65:05:25:5f:c8:9c:23:1e:9b:7c:47:f8:a5:56:89:54: 0a:a8:c8:7b:8f:64:b8:ce:4e:5e:c4:43:4b:5e:08:42:a5:26: 13:00:e4:44:da:f2:6c:9e:b4:fb:39:ba:c2:76:9c:3f:e9:f6: db:ba:55:9b:03:24:6d:8c:38:f3:d8:62:4c:2e:47:f2:91:49: 3e:14:0a:f9:76:f3:bd:a5:d5:73:81:2b:1d:2a:92:f2:82:bb: cc:53:03:c9:50:54:fb:cc:e5:1c:6b:16:e4:e2:ad:99:c9:b9: 2c:8b:be:92:c6:5c:02:93:3c:c3:ff:33:7a:67:95:5d:33:f6: 8f:ba:0e:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWfmq82gEmfXcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk YjhmMzlkOGEtNzY5NS00Mzk1LWFiYmEtY2YxYTAzYzc3YWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AbrogBU0GCjXb8i8eK/oOSJsnyMlj7qLSWj +DC/t5FVNru9uIDp5V98mZ09G+fw5ZiCGCzbgGcxbgQsPUxbvfBUx0MR/Z/yu1zu O3awxn47m0480x2QlRRh53sFQfuek6b1GJzYMKPp0KtN1ghxlZfKuGIYxfT+kwxX ArtI9FHAAplmwQS1Hf/NBCICkEWUjQytNlG6Fbdf3G63eCSNJ2pF02KD0cQpMUqD nm/EUGp9Ilmdus3sO6kK6z96fMaSdEgCZyD6w5RHCGP8fpb7rPEHSmtQJFyZhUBp o3aArtCQ92FoyyUnuQKUeMoUAjBaa5roBtfV/BCEYBQdsITaSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwdkMmD0ooghpEDs3UPv2TzaKzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzk0Y2I3MjItNzNlNi0z ZDg0LThmZjktYzMyOWFjNzhiOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJytDiBwcIM8YOQBus7VsyFMlkM/cayUCQMmmXFdCJPI8kL56wlFtSHc v58EAadtgxoVtpaAYInXM0kDSoe2+l0gXE27Rwdn/kjCR9VQCdalqii7AkwPCEja gqR0bGmLYf3SZnodO31IIg5IEHxtD441EMr6Dub6ipLcMYz6gClEZQUlX8icIx6b fEf4pVaJVAqoyHuPZLjOTl7EQ0teCEKlJhMA5ETa8myetPs5usJ2nD/p9tu6VZsD JG2MOPPYYkwuR/KRST4UCvl2872l1XOBKx0qkvKCu8xTA8lQVPvM5RxrFuTirZnJ uSyLvpLGXAKTPMP/M3pnlV0z9o+6Dpg= -----END CERTIFICATE-----Generated at Wed May 13 19:07:18 2026 by rpki-client