$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d0c868c-622f-3528-9fd1-29db14f7e967.roa File: 7d0c868c-622f-3528-9fd1-29db14f7e967.roa (raw, json) Hash identifier: p1Z0tn4kQcpHispgX9qsPWO4vjvopveFGsGJ2Q5VD2s= Subject key identifier: 86:75:F4:CC:11:4F:57:E3:CA:A3:65:EB:37:6F:BC:93:BA:5E:BF:5E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D65150592F54FDD085C542D80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d0c868c-622f-3528-9fd1-29db14f7e967.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 8069 IP address blocks: 20.153.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:05:92:f5:4f:dd:08:5c:54:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=3ffb7227-db30-4465-a51d-15b32e58e361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0b:9c:00:32:d1:89:a0:4a:95:2c:df:0d:7a: 13:b6:24:40:10:80:a6:55:30:2a:45:54:b2:9f:ad: 84:38:8e:de:f0:07:6b:a4:c1:31:84:47:0c:d9:5a: fe:03:6c:4b:da:4c:70:02:20:45:ea:f4:a1:ba:19: 02:b7:45:bf:9b:58:d5:62:04:4f:a8:14:3c:d9:44: d9:7e:6a:20:64:7f:dd:4d:98:e0:96:67:97:9f:c4: 7a:e5:26:6a:08:ca:db:46:86:d8:24:ba:68:3b:45: fd:6c:af:94:9c:a2:55:4b:15:b4:0c:c6:54:07:05: d2:0d:30:d7:0b:d8:46:13:00:8d:2c:fa:72:58:86: 15:f3:2f:18:27:61:63:03:dd:bc:c5:ee:dc:cf:d1: 53:fd:6e:75:e6:2f:5e:ab:ba:f2:e3:e4:05:73:f7: ac:ae:65:4d:5c:3e:8b:e2:97:fc:29:53:2b:a9:0d: 09:9e:68:89:8e:c7:92:51:f2:3b:32:84:7f:f5:57: 51:dc:1f:fd:71:65:50:55:16:b0:aa:63:2a:8a:86: a1:2f:eb:4d:aa:a5:13:ae:79:11:ac:65:41:05:67: e3:3c:41:f8:d0:aa:10:2d:6a:53:fd:61:45:9e:1a: 43:56:80:e7:91:c5:bd:aa:9b:82:c1:b7:f3:2c:af: b5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:75:F4:CC:11:4F:57:E3:CA:A3:65:EB:37:6F:BC:93:BA:5E:BF:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d0c868c-622f-3528-9fd1-29db14f7e967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:29:b5:f7:0e:d5:00:c3:85:0c:58:e3:9e:e9:51:2c:72:e8: 95:4a:aa:3d:df:da:d0:58:1b:7e:c2:88:6e:c0:24:cf:b8:4e: e3:9c:10:bd:15:9c:e3:c1:90:38:36:66:41:7d:4e:a0:22:bc: bb:93:c0:0f:08:77:fc:2a:f6:8a:21:52:65:e3:f1:4b:9d:c3: dc:a4:f4:23:3a:a1:df:29:96:0e:5d:16:4e:bd:f6:28:6e:8f: 2b:61:17:9b:13:d6:5a:50:6c:dd:64:d3:c9:b2:f0:bd:ed:df: 78:f1:70:d2:92:f6:7f:bf:24:18:f0:1a:14:73:85:b2:d6:fb: 80:3b:9b:e0:16:3b:a7:00:c6:44:9c:50:52:b8:e5:4a:5e:7a: 8e:2c:d2:2e:47:67:39:e1:62:00:88:3c:43:9a:56:b5:72:ad: dc:1f:25:f5:d8:fc:67:fd:f9:1f:f2:b3:28:92:5d:30:7e:c1: 50:c4:29:70:92:0d:be:e0:2a:61:be:32:4a:ac:2a:77:73:0e: 82:b2:98:73:c2:20:4b:bc:a6:50:bd:35:e8:0e:3e:87:e4:e3: 0d:2d:0e:7e:de:19:17:21:54:b6:80:3d:e7:f3:db:a7:16:d2: a9:68:b6:25:37:84:cc:91:11:5c:90:53:59:65:0f:2f:08:f3: 92:31:a4:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFQWS9U/dCFxULYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk M2ZmYjcyMjctZGIzMC00NDY1LWE1MWQtMTViMzJlNThlMzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwucADLRiaBKlSzfDXoTtiRAEICmVTAqRVSy n62EOI7e8AdrpMExhEcM2Vr+A2xL2kxwAiBF6vShuhkCt0W/m1jVYgRPqBQ82UTZ fmogZH/dTZjglmeXn8R65SZqCMrbRobYJLpoO0X9bK+UnKJVSxW0DMZUBwXSDTDX C9hGEwCNLPpyWIYV8y8YJ2FjA928xe7cz9FT/W515i9eq7ry4+QFc/esrmVNXD6L 4pf8KVMrqQ0JnmiJjseSUfI7MoR/9VdR3B/9cWVQVRawqmMqioahL+tNqqUTrnkR rGVBBWfjPEH40KoQLWpT/WFFnhpDVoDnkcW9qpuCwbfzLK+1+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZ19MwRT1fjyqNl6zdvvJO6Xr9eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2QwYzg2OGMtNjIyZi0z NTI4LTlmZDEtMjlkYjE0ZjdlOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJniMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgptfcO1QDDhQxY457pUSxy6JVKqj3f2tBYG37CiG7AJM+4TuOcEL0V nOPBkDg2ZkF9TqAivLuTwA8Id/wq9oohUmXj8Uudw9yk9CM6od8plg5dFk699ihu jythF5sT1lpQbN1k08my8L3t33jxcNKS9n+/JBjwGhRzhbLW+4A7m+AWO6cAxkSc UFK45Upeeo4s0i5HZznhYgCIPEOaVrVyrdwfJfXY/Gf9+R/ysyiSXTB+wVDEKXCS Db7gKmG+MkqsKndzDoKymHPCIEu8plC9NegOPofk4w0tDn7eGRchVLaAPefz26cW 0qlotiU3hMyREVyQU1llDy8I85IxpJ8= -----END CERTIFICATE-----Generated at Fri Apr 17 21:16:43 2026 by rpki-client