$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3eef707b-8fc4-3ee2-b4b2-5ce43ae2d1c0.roa File: 3eef707b-8fc4-3ee2-b4b2-5ce43ae2d1c0.roa (raw, json) Hash identifier: 0KjCJo/Z0DS97opBXU/fSypcNtpZn8fX0tKPCeVwC2k= Subject key identifier: F5:F4:9B:D9:68:05:98:C6:AA:B4:06:5D:9A:60:FA:F1:A1:C2:B2:EF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D65152241B671CA2D4F155C40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3eef707b-8fc4-3ee2-b4b2-5ce43ae2d1c0.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 8069 IP address blocks: 20.153.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:22:41:b6:71:ca:2d:4f:15:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=7a13de1b-caf7-4f16-aaad-5c232860020a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ad:d9:c7:da:be:6d:eb:0c:79:48:e5:c3:ec: 22:ca:b0:d2:7a:10:80:f0:a8:0a:23:93:d1:06:f4: 80:34:05:92:ef:df:fa:c3:e2:41:2d:ef:dc:39:88: 37:fe:0c:c0:0e:d4:02:59:76:f3:b3:27:e8:46:6f: f9:01:af:b2:d6:20:c0:51:4c:c0:86:00:fc:c8:c7: ee:73:94:5b:9a:25:73:89:7a:5f:97:5a:a9:b9:d6: a9:c7:41:3a:8d:ad:bc:0d:03:f6:5e:fe:69:5f:d8: be:55:b0:93:a2:05:9b:ca:40:4c:13:d3:44:01:3e: d2:c4:f0:1e:f5:b9:e7:32:56:91:36:0d:1b:76:99: ed:0f:85:96:13:fa:b0:5b:b6:15:34:0e:c2:ad:84: f9:5c:01:a3:90:30:98:2c:61:f6:2a:68:0f:35:e7: b3:5a:87:f1:2e:b9:b7:73:37:80:8b:ab:b6:3f:8c: 7d:42:b6:f1:1c:d1:d1:71:16:c1:22:18:fa:36:d6: 59:d7:72:45:d4:db:57:a3:f5:1b:d9:23:33:22:b0: 97:c2:22:07:71:1a:6e:00:9e:f0:ac:f6:f2:25:4e: a1:4a:28:66:9e:92:f9:4d:01:29:9a:bc:26:d9:e2: 7e:06:e2:74:bc:cd:74:bf:d9:69:9e:db:1d:f5:2d: 7f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F4:9B:D9:68:05:98:C6:AA:B4:06:5D:9A:60:FA:F1:A1:C2:B2:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3eef707b-8fc4-3ee2-b4b2-5ce43ae2d1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:1c:20:5b:cf:c1:98:0b:f0:e9:44:3a:5f:04:68:b6:08:1b: 68:c1:69:80:f0:80:a7:1f:7d:89:73:cc:6b:52:fb:39:4d:28: 0e:22:d9:dc:53:91:32:12:d8:7c:79:58:fa:7e:fc:7b:29:29: aa:c9:db:2c:d8:e1:a4:51:a6:e6:5f:96:88:6c:cc:99:da:7c: cb:35:40:97:73:97:96:b5:4e:0d:56:04:47:55:d4:ad:ca:7a: 4e:85:ef:8a:71:b2:a1:e4:5b:9a:be:1e:3a:4e:f0:74:93:09: f6:c4:64:4d:18:67:40:a2:b7:f8:3d:ba:2b:3b:5e:21:03:60: b2:b2:f9:26:0e:ab:96:e7:e7:50:43:b6:79:92:bf:eb:04:f2: b0:61:1f:86:33:12:17:25:b0:40:c5:e4:a5:5e:a1:1a:bf:6d: 2d:cf:dc:28:d6:0f:fd:03:7d:be:d7:fb:c9:ee:be:a6:d8:80: 1b:21:38:38:28:4c:98:40:00:60:35:c9:28:75:8a:ff:2f:3f: 5d:dc:e2:78:d1:a1:87:c4:da:59:61:c9:91:7a:ce:06:75:77: ec:a4:c9:de:a3:33:ec:01:b6:35:ec:79:e4:5a:4d:13:41:69: fc:ec:a3:3c:1d:47:e4:dd:b9:e7:c0:a8:61:1e:5c:86:bd:50: 03:fb:db:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFSJBtnHKLU8VXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk N2ExM2RlMWItY2FmNy00ZjE2LWFhYWQtNWMyMzI4NjAwMjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA463Zx9q+besMeUjlw+wiyrDSehCA8KgKI5PR BvSANAWS79/6w+JBLe/cOYg3/gzADtQCWXbzsyfoRm/5Aa+y1iDAUUzAhgD8yMfu c5RbmiVziXpfl1qpudapx0E6ja28DQP2Xv5pX9i+VbCTogWbykBME9NEAT7SxPAe 9bnnMlaRNg0bdpntD4WWE/qwW7YVNA7CrYT5XAGjkDCYLGH2KmgPNeezWofxLrm3 czeAi6u2P4x9QrbxHNHRcRbBIhj6NtZZ13JF1NtXo/Ub2SMzIrCXwiIHcRpuAJ7w rPbyJU6hSihmnpL5TQEpmrwm2eJ+BuJ0vM10v9lpntsd9S1/6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPX0m9loBZjGqrQGXZpg+vGhwrLvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2VlZjcwN2ItOGZjNC0z ZWUyLWI0YjItNWNlNDNhZTJkMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADccIFvPwZgL8OlEOl8EaLYIG2jBaYDwgKcffYlzzGtS+zlNKA4i2dxT kTIS2Hx5WPp+/HspKarJ2yzY4aRRpuZflohszJnafMs1QJdzl5a1Tg1WBEdV1K3K ek6F74pxsqHkW5q+HjpO8HSTCfbEZE0YZ0Cit/g9uis7XiEDYLKy+SYOq5bn51BD tnmSv+sE8rBhH4YzEhclsEDF5KVeoRq/bS3P3CjWD/0Dfb7X+8nuvqbYgBshODgo TJhAAGA1ySh1iv8vP13c4njRoYfE2llhyZF6zgZ1d+ykyd6jM+wBtjXseeRaTRNB afzsozwdR+TduefAqGEeXIa9UAP72/o= -----END CERTIFICATE-----Generated at Sat Apr 18 01:05:07 2026 by rpki-client