$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ced08657-3eb3-3ad7-a7fc-e9058c5a7521.roa File: ced08657-3eb3-3ad7-a7fc-e9058c5a7521.roa (raw, json) Hash identifier: LoOO/LhCWcUmiCkKJL82He15zd5c6xlu810je6bVn78= Subject key identifier: EF:AF:B1:CF:E4:0B:AB:09:3A:1F:A5:37:4E:71:67:E8:B6:0E:5E:F2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D97556680E3639A596A2A1940 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ced08657-3eb3-3ad7-a7fc-e9058c5a7521.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.153.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:66:80:e3:63:9a:59:6a:2a:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=ef467ffe-504e-42da-b2b7-df73b5bf7d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:48:79:10:52:d3:7d:5c:41:bc:e7:76:99:fd: d1:fd:c6:77:62:27:54:ce:37:16:4b:f0:b1:b2:4e: 0b:2e:58:f2:60:ca:03:81:57:03:cf:c0:62:81:43: 43:ad:da:5a:4f:9f:6a:aa:ce:25:53:f0:bb:46:63: 5e:a3:08:e6:4b:1b:c9:56:e2:74:9b:ef:fc:a3:d5: 26:e5:4f:56:ca:a3:56:3f:8c:e9:82:85:b1:49:db: cc:6b:14:02:b2:a3:03:7b:18:85:f4:99:99:77:15: 86:4c:f4:d6:67:29:f8:9c:e3:0d:82:8f:19:a4:b0: 22:1e:b6:d7:28:ad:68:bf:6b:41:92:85:f5:6b:ea: f9:09:9c:f7:55:4a:cd:61:b0:6d:1b:91:44:be:97: 04:37:e3:54:2c:39:ca:1b:e1:95:f6:1f:86:c8:45: 97:15:bf:73:5c:2f:73:99:dd:43:83:20:73:43:5c: 95:9f:88:54:4e:b5:9a:14:e9:8a:b2:c6:6d:86:1f: 85:7d:ad:be:75:79:78:bc:3b:09:66:05:56:69:cc: 11:1f:79:f9:72:ef:08:31:73:07:04:6b:c9:45:97: d8:9f:1d:10:d4:71:5e:3f:af:0e:e6:6d:a1:d1:bc: f5:02:8c:fe:54:db:c1:43:40:62:e6:c4:2f:38:70: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AF:B1:CF:E4:0B:AB:09:3A:1F:A5:37:4E:71:67:E8:B6:0E:5E:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ced08657-3eb3-3ad7-a7fc-e9058c5a7521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:96:3c:ee:71:20:d7:2c:d1:69:c3:f6:68:6f:99:c2:99:d9: 23:26:27:64:b0:85:04:fc:da:48:e9:77:34:24:b6:2b:a5:07: 4b:0a:54:2f:54:ac:42:a2:53:fb:ea:07:a5:3d:39:6b:38:3e: c9:00:51:52:bc:8d:c4:15:8f:dc:0c:a8:4a:7b:de:51:b8:70: 50:73:13:e6:f2:4b:80:20:c3:cd:98:37:b9:dd:a0:0c:a5:52: fa:3a:bb:aa:fd:46:34:f8:34:cb:0c:9b:6e:54:ef:f5:5c:53: 85:20:49:c4:7c:33:38:3d:c9:ad:9c:ad:f6:6a:79:96:31:15: ca:24:9a:51:5f:d3:92:1c:20:09:04:e0:2a:dd:6e:82:a2:2f: 4c:5a:66:5c:22:ec:30:54:63:61:31:69:59:f7:a1:3d:38:a4: 5f:b7:c1:c7:2f:02:0f:fc:ef:5f:91:c1:e2:0a:5e:70:38:20: 24:56:b1:a9:3b:fd:6c:6e:ba:3e:d7:4b:ac:e6:f0:12:13:54: 04:17:f9:bd:d3:80:5b:14:9a:a0:fa:74:b1:cb:a5:a5:f1:d6: c1:fe:c5:ac:e2:dd:79:be:54:50:ab:69:58:03:1e:9b:5c:64: 27:44:1f:ec:8c:33:5d:af:34:be:0a:de:15:0a:b0:b8:53:b4: ab:6b:2f:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWaA42OaWWoqGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk ZWY0NjdmZmUtNTA0ZS00MmRhLWIyYjctZGY3M2I1YmY3ZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUh5EFLTfVxBvOd2mf3R/cZ3YidUzjcWS/Cx sk4LLljyYMoDgVcDz8BigUNDrdpaT59qqs4lU/C7RmNeowjmSxvJVuJ0m+/8o9Um 5U9WyqNWP4zpgoWxSdvMaxQCsqMDexiF9JmZdxWGTPTWZyn4nOMNgo8ZpLAiHrbX KK1ov2tBkoX1a+r5CZz3VUrNYbBtG5FEvpcEN+NULDnKG+GV9h+GyEWXFb9zXC9z md1DgyBzQ1yVn4hUTrWaFOmKssZthh+Ffa2+dXl4vDsJZgVWacwRH3n5cu8IMXMH BGvJRZfYnx0Q1HFeP68O5m2h0bz1Aoz+VNvBQ0Bi5sQvOHAbYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+vsc/kC6sJOh+lN05xZ+i2Dl7yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2VkMDg2NTctM2ViMy0z YWQ3LWE3ZmMtZTkwNThjNWE3NTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyWPO5xINcs0WnD9mhvmcKZ2SMmJ2SwhQT82kjpdzQktiulB0sKVC9U rEKiU/vqB6U9OWs4PskAUVK8jcQVj9wMqEp73lG4cFBzE+byS4Agw82YN7ndoAyl Uvo6u6r9RjT4NMsMm25U7/VcU4UgScR8Mzg9ya2crfZqeZYxFcokmlFf05IcIAkE 4CrdboKiL0xaZlwi7DBUY2ExaVn3oT04pF+3wccvAg/871+RweIKXnA4ICRWsak7 /Wxuuj7XS6zm8BITVAQX+b3TgFsUmqD6dLHLpaXx1sH+xazi3Xm+VFCraVgDHptc ZCdEH+yMM12vNL4K3hUKsLhTtKtrL+M= -----END CERTIFICATE-----Generated at Wed May 13 07:07:51 2026 by rpki-client