$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa File: 34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa (raw, json) Hash identifier: wRgWeubbSBDc9smHDdBRta5yFhv5ayH6wBCngPuKAo4= Subject key identifier: 74:48:7B:83:FA:4E:E5:57:8C:4E:F3:ED:A6:76:AC:76:89:01:AC:7A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E1E4491EBC609FD58785AF180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.153.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:91:eb:c6:09:fd:58:78:5a:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=a69e404a-8a28-4708-b296-49ec9a1cc1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1c:35:8d:68:bc:90:e5:0a:cb:3a:fd:71:2f: 07:78:6d:a6:88:11:5a:3b:6b:8c:fa:b8:17:eb:da: a8:1d:4b:68:fb:69:d8:65:87:5a:cc:2a:80:29:5d: b1:dd:57:26:07:98:8a:da:db:a0:ff:37:cd:eb:ac: 31:0d:fd:b1:60:a1:95:89:55:fe:59:21:fb:b6:f6: 91:08:12:1d:57:d7:31:20:62:94:c9:19:ca:b4:fb: 8e:3d:a4:35:95:8c:89:c9:32:83:7a:5b:4c:e3:8f: 4c:ca:1a:04:da:ca:18:d8:f1:fd:71:62:10:04:ab: 27:42:8a:9d:11:c6:0f:83:9b:87:17:55:0e:b3:a2: 1d:63:3d:58:bf:0d:b0:b1:0a:05:7c:a9:e2:9b:10: a4:5a:ad:0c:7a:ab:98:20:c9:e9:b3:ef:fb:a5:79: a0:d7:ba:55:88:d2:bc:1d:01:f3:f7:eb:aa:c8:1d: 2c:b4:24:7e:89:94:e7:17:ae:5e:87:19:cb:4b:05: 92:45:f0:03:cc:2f:11:85:d1:bb:f5:fd:6f:d5:bd: 4f:2b:68:bd:b6:9c:79:0b:42:0b:93:2d:4f:02:3d: be:c1:bc:37:aa:2d:71:11:72:2f:68:7c:a5:a9:ce: 9a:1d:18:d3:a0:c2:cf:12:6b:25:aa:6c:05:56:57: ec:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:48:7B:83:FA:4E:E5:57:8C:4E:F3:ED:A6:76:AC:76:89:01:AC:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:f2:13:f5:ad:b1:53:31:4d:a5:29:d9:6e:28:4c:d1:7e:d5: 28:56:53:b0:84:8f:e3:0b:1e:6e:b6:74:c6:c7:a1:8b:d2:c0: 7d:56:86:6b:df:76:b0:4b:35:d9:7b:47:6c:84:7d:99:bf:44: b5:31:56:d6:ec:6c:09:0f:fe:b0:a0:73:55:35:16:95:3a:47: 5b:d1:57:65:c1:f7:c3:df:54:5c:ca:9e:04:be:e8:8d:10:c9: 3a:30:4d:fc:a2:92:18:74:50:c8:36:88:8c:15:6d:cc:e3:4f: 8c:93:45:4b:0c:36:8e:a4:d3:5e:84:7e:e3:44:6c:73:41:49: a9:86:ac:79:ff:5a:84:8d:c2:6e:46:42:6b:e7:b0:4c:12:b7: 60:f3:01:9c:30:2d:b5:f9:5e:91:4f:14:e2:80:6c:b3:2d:bf: 43:bb:1a:38:86:97:6d:3e:cd:bb:d7:ce:eb:7c:f0:bd:30:58: 01:f7:26:fd:9a:c6:3d:28:de:4e:d8:24:bb:37:22:22:53:b0: cf:ec:63:5c:63:36:fb:56:eb:bd:86:0c:2f:30:67:98:3e:3a: 20:be:5e:70:25:eb:0f:79:fe:db:cd:d8:6a:77:6f:8d:2b:b8: 9b:62:aa:ba:d6:2a:17:51:d1:96:58:13:3c:8d:b3:f7:93:1a: 93:32:20:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRJHrxgn9WHha8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk YTY5ZTQwNGEtOGEyOC00NzA4LWIyOTYtNDllYzlhMWNjMWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhw1jWi8kOUKyzr9cS8HeG2miBFaO2uM+rgX 69qoHUto+2nYZYdazCqAKV2x3VcmB5iK2tug/zfN66wxDf2xYKGViVX+WSH7tvaR CBIdV9cxIGKUyRnKtPuOPaQ1lYyJyTKDeltM449MyhoE2soY2PH9cWIQBKsnQoqd EcYPg5uHF1UOs6IdYz1Yvw2wsQoFfKnimxCkWq0MequYIMnps+/7pXmg17pViNK8 HQHz9+uqyB0stCR+iZTnF65ehxnLSwWSRfADzC8RhdG79f1v1b1PK2i9tpx5C0IL ky1PAj2+wbw3qi1xEXIvaHylqc6aHRjToMLPEmslqmwFVlfsgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRIe4P6TuVXjE7z7aZ2rHaJAax6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzRlYTY4YmMtYzZjZC0z MmUzLTgyMjItYTNlYTlkNjU4MzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7yE/WtsVMxTaUp2W4oTNF+1ShWU7CEj+MLHm62dMbHoYvSwH1Whmvf drBLNdl7R2yEfZm/RLUxVtbsbAkP/rCgc1U1FpU6R1vRV2XB98PfVFzKngS+6I0Q yTowTfyikhh0UMg2iIwVbczjT4yTRUsMNo6k016EfuNEbHNBSamGrHn/WoSNwm5G QmvnsEwSt2DzAZwwLbX5XpFPFOKAbLMtv0O7GjiGl20+zbvXzut88L0wWAH3Jv2a xj0o3k7YJLs3IiJTsM/sY1xjNvtW672GDC8wZ5g+OiC+XnAl6w95/tvN2Gp3b40r uJtiqrrWKhdR0ZZYEzyNs/eTGpMyICM= -----END CERTIFICATE-----Generated at Sat Jun 13 18:44:45 2026 by rpki-client