$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72ff52f3-580d-3460-ac7f-36794a6e52fa.roa File: 72ff52f3-580d-3460-ac7f-36794a6e52fa.roa (raw, json) Hash identifier: DaxPFMb0t4sPvYV99VW4iZRcOto3fFMC6kfAfJOGVeQ= Subject key identifier: DD:2A:7A:41:C1:47:19:67:A3:E2:E5:12:5D:7D:9A:BA:15:53:0A:8D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D6AAA64EF94A085E10D005840 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72ff52f3-580d-3460-ac7f-36794a6e52fa.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 8069 IP address blocks: 20.153.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:64:ef:94:a0:85:e1:0d:00:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=3d548fb3-4616-4b94-8b42-bd79ba3827a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:51:b6:c4:93:29:59:ef:e7:cc:bc:c9:74:b0: 6f:85:bb:79:e0:35:4d:ec:31:ca:29:42:fd:ad:50: 00:a0:15:52:cb:f2:71:55:20:86:cd:03:12:a7:bc: 8d:63:6a:d8:da:12:06:4a:49:0b:48:d1:89:4a:0c: 13:0a:07:51:11:c7:22:20:45:4f:14:a8:7a:91:a3: 2c:3c:81:0c:e0:4c:5e:47:d0:cb:b2:4d:9e:82:d6: 51:ab:9d:75:52:e3:26:d5:ac:39:8a:da:bf:23:b2: 87:2e:7d:ca:73:c6:65:05:b1:c7:42:10:78:29:ba: 14:10:26:50:02:2d:17:0c:3c:6c:a3:f1:89:1a:58: 05:95:fc:4e:67:fc:df:fe:15:5e:82:cd:95:c1:c7: a4:d3:15:db:c2:4d:a6:52:27:1b:0e:bb:4e:93:12: d5:05:74:c7:80:a9:17:d0:e8:e4:c9:00:6a:c9:7d: ac:42:48:e6:06:72:f7:03:06:c6:98:2d:79:66:e8: 8b:8c:a5:6f:77:62:c3:88:22:51:9f:43:de:30:3f: 09:d1:11:73:d8:cb:1a:ff:80:b2:b5:0e:46:e1:6f: db:01:bc:69:76:1e:35:df:05:56:67:e7:5a:aa:67: 82:30:26:4c:3d:03:08:48:a2:28:fc:6c:61:90:cb: 6d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2A:7A:41:C1:47:19:67:A3:E2:E5:12:5D:7D:9A:BA:15:53:0A:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72ff52f3-580d-3460-ac7f-36794a6e52fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:83:ac:c2:31:1d:7a:a9:03:1e:1f:a9:ee:bf:a6:cb:21:db: dd:b1:83:04:84:1b:69:f5:a4:cc:42:12:0f:76:8c:d2:aa:57: f5:55:83:a0:78:a2:c3:7d:76:6d:36:be:aa:c0:8b:fd:e2:fc: b4:6f:9a:68:03:de:ed:13:a3:fa:14:fb:36:eb:04:40:cb:10: d2:b1:da:bd:71:e0:90:c6:1c:22:16:8e:15:1f:9b:8f:63:56: f7:89:56:81:18:f6:14:ec:de:a2:1d:bd:52:d5:ad:3c:94:3e: e3:86:d2:54:d1:84:b4:46:9f:3e:2b:2d:66:04:8e:51:29:39: 84:f2:91:26:ab:bc:ab:e4:2c:9c:a3:33:75:44:14:16:f0:8c: a9:8a:3f:65:dd:09:a6:34:da:80:3b:93:e8:8d:5e:5c:99:cd: c1:54:c2:d4:c0:f2:85:dc:da:c6:85:a9:44:50:f6:ac:a2:85: 36:ab:71:ab:0d:3b:c9:f8:12:06:a7:8e:25:54:53:96:a1:b3: 63:09:b8:a8:09:c0:ae:64:c1:ca:98:53:cd:a2:32:90:02:6f: 34:ae:ff:1f:18:f0:71:75:1e:31:16:4f:73:94:ff:0b:3d:ab: 7e:c8:00:8d:dc:f9:ec:56:ab:ea:96:ea:f1:df:c2:a1:b8:51: 15:b9:ce:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqmTvlKCF4Q0AWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk M2Q1NDhmYjMtNDYxNi00Yjk0LThiNDItYmQ3OWJhMzgyN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglG2xJMpWe/nzLzJdLBvhbt54DVN7DHKKUL9 rVAAoBVSy/JxVSCGzQMSp7yNY2rY2hIGSkkLSNGJSgwTCgdREcciIEVPFKh6kaMs PIEM4ExeR9DLsk2egtZRq511UuMm1aw5itq/I7KHLn3Kc8ZlBbHHQhB4KboUECZQ Ai0XDDxso/GJGlgFlfxOZ/zf/hVegs2Vwcek0xXbwk2mUicbDrtOkxLVBXTHgKkX 0OjkyQBqyX2sQkjmBnL3AwbGmC15ZuiLjKVvd2LDiCJRn0PeMD8J0RFz2Msa/4Cy tQ5G4W/bAbxpdh413wVWZ+daqmeCMCZMPQMISKIo/GxhkMttFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0qekHBRxlno+LlEl19mroVUwqNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzJmZjUyZjMtNTgwZC0z NDYwLWFjN2YtMzY3OTRhNmU1MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaDrMIxHXqpAx4fqe6/pssh292xgwSEG2n1pMxCEg92jNKqV/VVg6B4 osN9dm02vqrAi/3i/LRvmmgD3u0To/oU+zbrBEDLENKx2r1x4JDGHCIWjhUfm49j VveJVoEY9hTs3qIdvVLVrTyUPuOG0lTRhLRGnz4rLWYEjlEpOYTykSarvKvkLJyj M3VEFBbwjKmKP2XdCaY02oA7k+iNXlyZzcFUwtTA8oXc2saFqURQ9qyihTarcasN O8n4EganjiVUU5ahs2MJuKgJwK5kwcqYU82iMpACbzSu/x8Y8HF1HjEWT3OU/ws9 q37IAI3c+exWq+qW6vHfwqG4URW5zrw= -----END CERTIFICATE-----Generated at Fri Apr 17 22:18:19 2026 by rpki-client