$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e19c29c0-9b90-32c5-8f64-85fb3a59f907.roa File: e19c29c0-9b90-32c5-8f64-85fb3a59f907.roa (raw, json) Hash identifier: 0XYJ55FbvWCSYHT7muHSLh9WrHYLjOmTrLSKk5TPS6w= Subject key identifier: E2:D0:76:E8:93:E6:43:F6:B3:AA:5D:24:B9:5D:40:A7:B4:A5:03:A5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D9755685F0BE0737D84503380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e19c29c0-9b90-32c5-8f64-85fb3a59f907.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.153.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:68:5f:0b:e0:73:7d:84:50:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=e5da3930-6d7f-4e4f-9e63-fd3e11937215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:93:47:50:73:55:f4:3c:57:b6:d2:9e:56:c9: 19:19:5c:a8:b2:40:5e:be:9a:05:45:32:d2:4d:82: 99:c4:2e:86:96:c2:32:87:05:0e:c5:5e:8d:00:91: 1d:eb:de:70:42:5c:60:7e:46:93:d0:87:ba:55:66: a6:f2:47:64:92:09:60:8f:70:03:1d:70:61:f2:07: 79:8e:00:6b:dd:50:83:dd:61:17:8b:70:68:af:d8: 74:1a:b9:2f:da:ba:7f:79:9e:a9:6b:a5:c7:3d:dc: 83:18:c0:25:41:b2:51:40:8c:e1:71:e2:6a:99:e2: 5e:7f:80:ad:f1:5b:4f:2d:16:33:b9:a0:64:6d:9a: 30:c4:f4:bf:23:da:dc:39:dc:b7:f9:18:80:cf:e5: ba:8b:6b:59:15:88:67:ac:2e:81:80:c1:08:ea:f1: 41:5c:c6:0d:12:4c:70:9c:35:90:47:e6:93:03:ad: 25:82:3e:b9:a9:97:a3:e0:7e:2e:17:b6:8b:d8:4c: a8:dc:28:80:79:de:91:12:4b:fe:ef:8d:b8:f2:5f: 6f:1d:51:c7:4c:41:b5:19:ae:7c:98:5c:69:95:25: d0:1f:1f:c3:a6:ee:20:b0:ca:e1:6b:ee:e8:17:c6: d1:24:d9:31:54:2c:1a:03:ec:0e:a8:6c:4b:e5:b9: 7f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D0:76:E8:93:E6:43:F6:B3:AA:5D:24:B9:5D:40:A7:B4:A5:03:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e19c29c0-9b90-32c5-8f64-85fb3a59f907.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d0:14:aa:67:9a:4a:63:e3:04:6e:26:84:75:8d:8c:a9:46: a5:fe:ad:c0:b9:23:90:88:d5:c7:a2:68:cf:d5:dc:7f:ad:7c: cf:e3:58:97:c0:10:2c:52:9a:54:fd:de:18:48:53:ad:8b:c5: 5f:4d:13:e8:5c:4f:97:a4:33:79:e3:45:15:6d:78:5e:d6:e9: fb:ee:eb:d5:33:dd:f2:d9:57:27:b5:e5:6b:6b:31:fd:c3:72: a3:15:f9:24:f6:62:b0:2c:29:c4:fb:20:13:f9:a1:d1:63:a7: 07:f6:31:67:9e:16:6e:a6:46:7e:ec:28:1d:7e:4b:03:3d:ef: c7:03:57:34:4f:1a:67:25:b6:49:d3:2d:6c:4f:b3:1d:4b:92: fa:c6:58:ff:fc:b2:ba:0b:63:e7:43:61:0a:6d:2b:7b:84:95: 6f:6e:bb:c6:70:de:f0:19:0c:52:88:0c:a6:18:c0:6f:87:62: 0c:5c:e8:07:de:f1:bf:14:17:12:78:36:38:ca:a9:41:df:98: 74:36:ed:0a:cb:4d:0a:6a:cb:7c:50:16:86:d2:c5:71:79:66: 2c:79:64:93:dc:46:c6:4d:d0:b6:63:89:96:7c:e5:15:39:31: 95:8c:78:30:81:91:5d:fa:10:60:3d:9a:9f:c9:a4:0b:d6:da: 0a:25:0d:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWhfC+BzfYRQM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk ZTVkYTM5MzAtNmQ3Zi00ZTRmLTllNjMtZmQzZTExOTM3MjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypNHUHNV9DxXttKeVskZGVyoskBevpoFRTLS TYKZxC6GlsIyhwUOxV6NAJEd695wQlxgfkaT0Ie6VWam8kdkkglgj3ADHXBh8gd5 jgBr3VCD3WEXi3Bor9h0Grkv2rp/eZ6pa6XHPdyDGMAlQbJRQIzhceJqmeJef4Ct 8VtPLRYzuaBkbZowxPS/I9rcOdy3+RiAz+W6i2tZFYhnrC6BgMEI6vFBXMYNEkxw nDWQR+aTA60lgj65qZej4H4uF7aL2Eyo3CiAed6REkv+74248l9vHVHHTEG1Ga58 mFxplSXQHx/Dpu4gsMrha+7oF8bRJNkxVCwaA+wOqGxL5bl/WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLQduiT5kP2s6pdJLldQKe0pQOlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTE5YzI5YzAtOWI5MC0z MmM1LThmNjQtODVmYjNhNTlmOTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbQFKpnmkpj4wRuJoR1jYypRqX+rcC5I5CI1ceiaM/V3H+tfM/jWJfA ECxSmlT93hhIU62LxV9NE+hcT5ekM3njRRVteF7W6fvu69Uz3fLZVye15WtrMf3D cqMV+ST2YrAsKcT7IBP5odFjpwf2MWeeFm6mRn7sKB1+SwM978cDVzRPGmcltknT LWxPsx1LkvrGWP/8sroLY+dDYQptK3uElW9uu8Zw3vAZDFKIDKYYwG+HYgxc6Afe 8b8UFxJ4NjjKqUHfmHQ27QrLTQpqy3xQFobSxXF5Zix5ZJPcRsZN0LZjiZZ85RU5 MZWMeDCBkV36EGA9mp/JpAvW2golDf8= -----END CERTIFICATE-----Generated at Wed May 13 11:36:44 2026 by rpki-client