$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4452ae3f-c6de-3901-a313-2e6347fdf60d.roa File: 4452ae3f-c6de-3901-a313-2e6347fdf60d.roa (raw, json) Hash identifier: ARUCUFVA1Z28RyvROUgm+nc2QS9cB5bcuzEReuy5DFw= Subject key identifier: 6C:BE:4E:85:5D:72:75:94:F4:A9:41:AB:C7:9A:92:F0:59:0C:C6:D1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D6515394DEC84A2C880D2E0C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4452ae3f-c6de-3901-a313-2e6347fdf60d.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 8069 IP address blocks: 20.153.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:39:4d:ec:84:a2:c8:80:d2:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=88e33018-8ee0-4964-85eb-dcc2944bb47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:4d:45:9e:39:a7:b6:8e:67:25:6e:02:07: 3a:f4:c5:2a:d0:37:9c:c8:07:07:41:61:0e:e7:22: ff:d9:ae:82:cf:db:03:20:be:6e:26:c1:cc:2d:7e: 92:9d:82:63:14:a8:e1:21:7e:c6:44:09:74:8d:6e: 79:1b:6c:2e:ab:51:f7:0d:ce:b9:b3:45:56:0d:b2: 6a:b8:05:04:25:92:8f:2f:c6:71:a2:49:0b:7b:ee: 6f:f2:d0:fb:da:c0:9a:29:a6:bf:7c:db:84:db:e4: b9:7b:5b:ee:df:40:af:de:92:c1:2d:08:92:3e:87: 8e:26:7c:5e:27:b8:93:b0:c0:a7:44:06:5f:af:ab: c0:98:c9:cd:50:f9:4e:9e:d4:a9:6c:35:ac:ed:e0: c7:eb:0c:d4:ab:87:cd:5d:b1:ac:1c:10:e4:fc:7d: 62:02:25:c0:fc:05:fc:b7:b0:96:b8:57:8f:eb:a2: ba:ce:2b:2e:a7:1a:47:92:ab:1d:73:69:19:90:f9: b7:6d:e6:aa:1f:1b:30:b4:44:90:dc:ed:b2:7d:e2: 93:8b:f5:da:36:6d:ad:91:ba:ba:6b:88:36:48:9a: 45:3f:a5:e0:37:bf:55:ca:0c:a6:b9:a5:e1:a8:36: 65:de:13:b3:92:2d:4c:78:97:f4:63:e4:5f:5d:f1: 1e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BE:4E:85:5D:72:75:94:F4:A9:41:AB:C7:9A:92:F0:59:0C:C6:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4452ae3f-c6de-3901-a313-2e6347fdf60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a7:80:e4:c1:9d:f3:77:3b:be:47:b4:15:37:1c:df:10:e1: 8e:cb:68:52:a8:d7:7e:50:e9:ea:28:0a:ee:72:05:c5:25:f9: 6f:56:1e:da:09:73:ea:ae:23:17:5c:5f:7c:c3:18:e3:41:1f: d8:62:4d:66:2e:67:26:dd:f6:6a:09:3c:b0:6a:a2:76:92:b8: 75:dd:84:74:bb:fe:16:b1:9a:31:36:21:94:e3:51:3c:08:af: 33:c0:09:79:fc:e6:cb:05:c0:56:13:4d:20:70:ac:4c:e4:56: ee:94:14:2a:07:75:37:c2:6b:7a:80:e1:5b:88:bc:17:56:70: 1e:5e:f2:f0:75:a0:f6:84:5a:37:8b:66:5b:cc:54:e4:49:89: 2a:9d:a0:55:eb:74:87:16:dd:f4:a2:1a:bf:44:17:28:6f:e3: 17:b8:9c:aa:78:bd:42:58:0c:3e:7b:a4:37:2f:1a:8e:d0:2a: de:ad:41:98:36:46:cb:4b:75:92:3f:13:06:7f:da:02:90:74: ff:42:5c:63:f3:10:8a:39:29:82:cf:b3:b6:91:e3:b5:26:7d: 9b:22:b6:80:92:c8:17:f2:bd:30:29:44:29:bf:72:b4:d3:bc: b9:53:25:37:9b:74:93:c5:32:fa:44:21:d5:b8:df:9f:ad:7f: db:5d:e7:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTlN7ISiyIDS4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ODhlMzMwMTgtOGVlMC00OTY0LTg1ZWItZGNjMjk0NGJiNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJdNRZ45p7aOZyVuAgc69MUq0DecyAcHQWEO 5yL/2a6Cz9sDIL5uJsHMLX6SnYJjFKjhIX7GRAl0jW55G2wuq1H3Dc65s0VWDbJq uAUEJZKPL8ZxokkLe+5v8tD72sCaKaa/fNuE2+S5e1vu30Cv3pLBLQiSPoeOJnxe J7iTsMCnRAZfr6vAmMnNUPlOntSpbDWs7eDH6wzUq4fNXbGsHBDk/H1iAiXA/AX8 t7CWuFeP66K6zisupxpHkqsdc2kZkPm3beaqHxswtESQ3O2yfeKTi/XaNm2tkbq6 a4g2SJpFP6XgN79VygymuaXhqDZl3hOzki1MeJf0Y+RfXfEeIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGy+ToVdcnWU9KlBq8eakvBZDMbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDQ1MmFlM2YtYzZkZS0z OTAxLWEzMTMtMmU2MzQ3ZmRmNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSngOTBnfN3O75HtBU3HN8Q4Y7LaFKo135Q6eooCu5yBcUl+W9WHtoJ c+quIxdcX3zDGONBH9hiTWYuZybd9moJPLBqonaSuHXdhHS7/haxmjE2IZTjUTwI rzPACXn85ssFwFYTTSBwrEzkVu6UFCoHdTfCa3qA4VuIvBdWcB5e8vB1oPaEWjeL ZlvMVORJiSqdoFXrdIcW3fSiGr9EFyhv4xe4nKp4vUJYDD57pDcvGo7QKt6tQZg2 RstLdZI/EwZ/2gKQdP9CXGPzEIo5KYLPs7aR47UmfZsitoCSyBfyvTApRCm/crTT vLlTJTebdJPFMvpEIdW435+tf9td550= -----END CERTIFICATE-----Generated at Fri Apr 17 21:16:13 2026 by rpki-client