$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f671a-d520-39bf-bbc0-7a9f1b087044.roa File: 433f671a-d520-39bf-bbc0-7a9f1b087044.roa (raw, json) Hash identifier: phxNNiOhmN5TkKWKz+9iUpSpUrVnysvyp5IstToqlFw= Subject key identifier: 96:D6:63:06:59:63:66:65:23:26:C7:F9:47:A5:40:7E:D1:51:46:6D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D60E513F4D3C61B30AB91D000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f671a-d520-39bf-bbc0-7a9f1b087044.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:13:f4:d3:c6:1b:30:ab:91:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=fd3a5b4f-f2c0-4df5-9fc6-65946582c7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ad:e6:99:4b:05:a4:01:5a:79:90:20:d8:43: 61:14:0b:da:59:07:6e:ed:dd:0c:b4:6e:eb:54:a5: 18:8f:15:0e:e1:63:44:d1:9f:b6:3f:32:6a:99:e5: 19:30:aa:e3:68:e5:d7:3a:eb:d5:e8:75:05:c3:8e: 3d:e6:2e:e3:af:fb:3f:04:7b:ac:a2:e0:81:cf:89: b8:97:b4:5a:ee:f0:a2:2d:d1:32:9e:b7:0c:27:d9: e7:d8:f5:6a:ea:bd:01:1f:14:9e:b0:a7:fe:4c:6d: 7b:12:ba:2c:d6:fb:d7:37:2c:5e:07:de:c4:dd:9e: 62:cc:0a:de:18:4f:a8:c6:34:01:d8:39:e6:a7:69: c6:85:d9:b7:9f:34:98:2a:c6:3f:46:99:b9:56:f9: a7:0e:ed:eb:cc:bb:72:61:83:1c:e0:44:16:06:38: ee:bd:15:1c:74:7f:96:09:de:7d:4d:81:47:a0:78: 71:d0:3b:a5:e9:4d:84:8c:1e:cc:1f:2b:ee:a7:f7: 25:ca:95:06:0a:82:56:b0:f7:70:ec:dd:bf:2e:25: 8a:39:5a:76:e2:a9:ca:6a:f9:0d:2f:f1:74:17:a0: 53:b6:cd:32:c1:f7:b2:9c:ea:3c:7d:0a:14:65:e9: 48:9b:f3:d8:c0:23:da:37:13:6f:ed:06:75:c4:c8: b3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D6:63:06:59:63:66:65:23:26:C7:F9:47:A5:40:7E:D1:51:46:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f671a-d520-39bf-bbc0-7a9f1b087044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:32:60:f0:7f:e2:41:99:c5:fc:c8:aa:ab:14:a6:e3:5e:3a: 1d:56:11:48:3d:89:76:dd:1b:1a:69:cd:74:36:af:70:46:08: b0:cc:89:a0:b7:81:d7:d8:5f:98:18:89:4a:d7:46:55:53:1e: 0c:97:ef:5c:4a:84:93:ee:f4:59:9b:ee:c7:20:b0:b2:95:8f: 55:46:a4:46:43:97:23:44:f7:31:14:87:a0:38:a4:ac:bd:fa: 80:50:b0:0f:b5:f9:f5:0f:27:61:3a:28:e1:59:41:a1:bd:e8: e1:3a:ba:d8:28:9f:4f:09:8d:27:7b:c0:3a:3b:30:e2:14:23: 0e:77:9d:6d:cb:28:df:5b:c8:8b:5f:28:60:5e:e5:c4:4e:50: 0b:96:32:0d:5f:5a:e3:32:36:d7:77:da:f3:d4:3a:aa:75:39: 43:31:9c:06:4e:24:5a:d4:39:c7:0e:2d:17:82:ee:c2:23:9c: 0a:9c:4e:bc:7e:e4:4b:82:2b:ff:a4:83:6a:47:89:3f:bc:ba: 02:a6:52:73:08:0d:ae:b8:94:4a:c2:5f:57:be:d3:17:fb:7a: 88:b7:d4:43:45:c6:d0:1b:14:83:e0:63:bd:83:71:0d:ed:52: ad:7c:0a:61:78:3f:50:b3:46:ed:5f:3f:b0:3d:3b:8f:72:ab: 2e:c4:6a:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5RP008YbMKuR0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk ZmQzYTViNGYtZjJjMC00ZGY1LTlmYzYtNjU5NDY1ODJjN2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK3mmUsFpAFaeZAg2ENhFAvaWQdu7d0MtG7r VKUYjxUO4WNE0Z+2PzJqmeUZMKrjaOXXOuvV6HUFw4495i7jr/s/BHusouCBz4m4 l7Ra7vCiLdEynrcMJ9nn2PVq6r0BHxSesKf+TG17Eros1vvXNyxeB97E3Z5izAre GE+oxjQB2Dnmp2nGhdm3nzSYKsY/Rpm5VvmnDu3rzLtyYYMc4EQWBjjuvRUcdH+W Cd59TYFHoHhx0Dul6U2EjB7MHyvup/clypUGCoJWsPdw7N2/LiWKOVp24qnKavkN L/F0F6BTts0ywfeynOo8fQoUZelIm/PYwCPaNxNv7QZ1xMizqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbWYwZZY2ZlIybH+UelQH7RUUZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDMzZjY3MWEtZDUyMC0z OWJmLWJiYzAtN2E5ZjFiMDg3MDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsyYPB/4kGZxfzIqqsUpuNeOh1WEUg9iXbdGxppzXQ2r3BGCLDMiaC3 gdfYX5gYiUrXRlVTHgyX71xKhJPu9Fmb7scgsLKVj1VGpEZDlyNE9zEUh6A4pKy9 +oBQsA+1+fUPJ2E6KOFZQaG96OE6utgon08JjSd7wDo7MOIUIw53nW3LKN9byItf KGBe5cROUAuWMg1fWuMyNtd32vPUOqp1OUMxnAZOJFrUOccOLReC7sIjnAqcTrx+ 5EuCK/+kg2pHiT+8ugKmUnMIDa64lErCX1e+0xf7eoi31ENFxtAbFIPgY72DcQ3t Uq18CmF4P1CzRu1fP7A9O49yqy7Eanc= -----END CERTIFICATE-----Generated at Fri Apr 17 21:17:30 2026 by rpki-client