$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2769b3a2-36fe-373a-8f7c-d074a06dd960.roa File: 2769b3a2-36fe-373a-8f7c-d074a06dd960.roa (raw, json) Hash identifier: tGlC/i7RolDxQM6cuD6z+r4C8jls1t3G4FBm9m8gP/g= Subject key identifier: E6:8E:5F:F8:6E:90:CE:B3:AE:5B:3D:FC:A3:62:51:7F:C0:3E:50:01 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D65153A99AE1A049E8BA5FB18 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2769b3a2-36fe-373a-8f7c-d074a06dd960.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 8069 IP address blocks: 20.153.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:3a:99:ae:1a:04:9e:8b:a5:fb:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=7a19ebb2-6c6d-4eba-96ec-8387b91894bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:44:90:c7:12:d3:2f:f9:80:cf:77:4f:99: 1a:70:00:c1:4c:8d:7e:16:d7:c9:3b:69:e1:35:41: 21:f1:46:d4:56:f4:11:db:8e:b4:ef:69:13:06:8a: de:a1:6a:b9:7f:1c:e4:70:bb:3b:bd:94:99:00:4b: 6d:cc:05:ec:ad:5e:f6:bc:86:0e:5a:f5:52:f0:1a: a6:93:d1:0d:7b:55:72:b3:13:ee:57:d1:ca:70:27: 0c:14:36:f3:57:2b:b8:84:2c:d0:c4:79:a3:2f:67: aa:c9:b2:b2:1c:12:38:c4:cd:d9:93:32:9d:b3:3b: 66:a2:41:c1:65:e0:b8:cf:88:db:1a:27:2b:9a:27: 30:8e:41:6c:a3:f5:e7:3b:16:71:c4:fa:b3:4e:76: 4e:a4:9d:99:e0:b3:9e:04:77:79:e3:a1:e2:eb:ca: 9c:9b:5d:99:2a:76:79:ff:46:e9:01:a5:8f:1f:eb: 41:97:ba:e7:60:32:77:d1:a7:fc:23:40:30:cb:3a: 6d:40:ac:87:1e:f4:84:05:27:80:01:22:7f:08:9c: 8c:25:90:f8:2e:de:bf:47:3d:8a:dd:5f:a8:0e:97: b0:ab:8d:0d:bb:fa:14:3d:1c:5b:65:58:27:8f:78: 8f:d1:9f:79:33:d7:f8:db:30:ea:dd:4b:f8:63:43: 2b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8E:5F:F8:6E:90:CE:B3:AE:5B:3D:FC:A3:62:51:7F:C0:3E:50:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2769b3a2-36fe-373a-8f7c-d074a06dd960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:be:d4:ba:9a:6d:78:d0:7e:6d:8c:1d:a2:a4:d4:e0:5a:61: 60:da:1a:57:5e:d0:4a:a8:84:a0:58:01:7e:21:d6:d2:49:68: 53:25:69:dd:ec:ac:72:b1:d2:14:e5:32:f1:c2:f9:08:9f:4d: 96:26:6e:2e:58:62:e8:ec:d7:6a:41:0a:a0:0e:21:1c:a3:79: e7:78:61:e9:a1:08:ec:2f:00:47:06:df:60:f4:00:ef:da:c8: 61:8b:0b:d1:9d:8b:62:f5:ec:34:9a:fb:ef:4d:a6:1c:45:d9: 5e:45:df:de:72:d8:56:f7:e4:b1:fe:27:ad:5b:9f:41:64:98: e9:87:c6:e6:b4:de:2c:dc:c5:bc:63:b9:2e:52:1a:cd:42:32: 90:c0:2f:c2:d3:ad:0a:e8:69:9e:99:7a:d9:59:82:32:bc:d8: ad:09:24:66:43:81:60:f5:bc:85:1f:84:cc:b3:94:16:26:6e: a2:ae:b5:b1:da:45:73:9e:76:46:3e:e9:43:1f:ca:7c:f7:02: 38:33:90:b1:a6:95:56:e2:78:1c:18:51:18:0a:d0:03:f7:17: fa:43:67:3f:9d:eb:e4:6f:b8:e8:07:fb:ab:1a:2e:f8:7b:32: 3f:e6:8c:01:03:08:7b:69:6d:46:a2:67:25:8e:61:65:58:3a: fd:9b:d8:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTqZrhoEnoul+xgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk N2ExOWViYjItNmM2ZC00ZWJhLTk2ZWMtODM4N2I5MTg5NGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOpEkMcS0y/5gM93T5kacADBTI1+FtfJO2nh NUEh8UbUVvQR246072kTBoreoWq5fxzkcLs7vZSZAEttzAXsrV72vIYOWvVS8Bqm k9ENe1VysxPuV9HKcCcMFDbzVyu4hCzQxHmjL2eqybKyHBI4xM3ZkzKdsztmokHB ZeC4z4jbGicrmicwjkFso/XnOxZxxPqzTnZOpJ2Z4LOeBHd546Hi68qcm12ZKnZ5 /0bpAaWPH+tBl7rnYDJ30af8I0AwyzptQKyHHvSEBSeAASJ/CJyMJZD4Lt6/Rz2K 3V+oDpewq40Nu/oUPRxbZVgnj3iP0Z95M9f42zDq3Uv4Y0MrLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaOX/hukM6zrls9/KNiUX/APlABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjc2OWIzYTItMzZmZS0z NzNhLThmN2MtZDA3NGEwNmRkOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi+1LqabXjQfm2MHaKk1OBaYWDaGlde0EqohKBYAX4h1tJJaFMlad3s rHKx0hTlMvHC+QifTZYmbi5YYujs12pBCqAOIRyjeed4YemhCOwvAEcG32D0AO/a yGGLC9Gdi2L17DSa++9NphxF2V5F395y2Fb35LH+J61bn0FkmOmHxua03izcxbxj uS5SGs1CMpDAL8LTrQroaZ6ZetlZgjK82K0JJGZDgWD1vIUfhMyzlBYmbqKutbHa RXOedkY+6UMfynz3AjgzkLGmlVbieBwYURgK0AP3F/pDZz+d6+RvuOgH+6saLvh7 Mj/mjAEDCHtpbUaiZyWOYWVYOv2b2Iw= -----END CERTIFICATE-----Generated at Fri Apr 17 21:17:38 2026 by rpki-client