$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8e769351-a4a9-3cc3-90c8-6121d56822f5.roa File: 8e769351-a4a9-3cc3-90c8-6121d56822f5.roa (raw, json) Hash identifier: /cT/nHfxoHICPAM7y8ydC03NoOnYLqY7bextzYui9/8= Subject key identifier: C8:4A:87:CD:6D:C6:49:C4:DA:56:F7:2D:6A:D4:4B:5C:7E:67:F7:2E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D60E5100DC247AB4DF0B33A80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8e769351-a4a9-3cc3-90c8-6121d56822f5.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:10:0d:c2:47:ab:4d:f0:b3:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=343c828d-0fb8-4c7e-b1d2-04501d5758f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fb:85:7f:13:db:24:7c:95:56:41:85:3a:52: 1c:61:fa:6a:42:ec:3d:e0:f6:ef:d2:8e:35:4a:fc: b9:26:3a:da:af:9a:a3:ae:d7:ef:c0:38:9e:79:38: 17:10:99:c4:62:2a:3a:b0:ec:b2:cb:62:5b:78:97: 78:17:a6:33:61:82:63:85:0d:11:aa:1e:23:d8:b0: 22:d3:ae:cf:10:76:8f:98:9f:eb:71:e0:ce:5c:58: 44:a2:7c:18:f3:a0:93:57:a8:bd:1e:da:b8:3f:59: fc:a1:1c:49:9c:ef:1f:ac:f4:31:a4:46:af:b4:48: 3c:d8:69:a8:f0:0e:79:88:df:0a:46:6c:d6:aa:5d: a5:c8:21:c6:d3:bb:bf:64:7d:2c:77:52:6a:ee:18: 3b:3e:ce:c9:de:73:a6:b8:26:b8:6f:ad:e4:30:2a: 4d:e7:ed:ef:43:ba:87:cb:c0:a1:9d:96:d1:97:98: 3e:d0:cb:bb:33:98:15:4d:56:f4:ee:51:35:3e:cf: 59:d4:06:15:f5:3e:7b:70:5e:b4:19:a5:6d:60:9f: fc:7e:c2:87:f9:e0:73:61:ca:68:1c:fd:d1:50:ae: 29:1a:01:98:a2:12:79:3d:60:0d:e2:6d:be:6f:6a: be:9e:69:98:da:19:67:68:16:f5:7b:a2:9d:16:26: ec:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4A:87:CD:6D:C6:49:C4:DA:56:F7:2D:6A:D4:4B:5C:7E:67:F7:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8e769351-a4a9-3cc3-90c8-6121d56822f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:89:25:54:9a:c1:17:d0:c0:35:3c:73:bb:87:3b:fc:bc:07: b7:f5:39:3c:d9:fd:25:a8:d1:dc:f4:54:91:53:92:7d:82:4c: 12:b1:36:21:20:37:5b:40:c8:b6:a5:77:2e:61:ea:c8:5e:d9: b3:50:e3:57:5e:b2:54:ee:e0:89:1a:9a:f8:61:76:db:c0:e9: e3:6f:17:ab:e0:d4:e7:30:35:c2:7f:69:ef:7f:cf:ab:87:84: 2e:9b:83:0a:e2:2d:cc:3f:5d:8c:3f:71:2d:4a:17:75:f2:cf: 2b:68:33:91:9e:b8:04:5c:c7:da:99:eb:0a:0f:99:b5:88:90: ea:7f:fe:d9:85:5c:2a:f5:1b:44:69:b4:e8:81:e5:c4:3a:8f: dc:9b:23:5c:f3:f1:91:5a:34:53:34:1d:46:46:11:46:1a:72: 41:5c:bd:45:8b:c4:d5:be:64:9c:0e:c0:37:d1:a9:f2:3b:31: 11:44:e7:c2:ce:a4:6f:77:0b:35:8d:f2:84:72:b3:bb:3d:07: a1:0c:ac:9a:be:a9:1e:45:cc:f6:c8:b2:20:0a:a9:f8:cc:8e: 85:87:66:f8:96:52:da:96:e5:cf:0b:9a:c8:34:c1:5d:38:7a: 48:16:ce:8b:23:37:12:29:fd:6f:ec:e4:f7:b3:02:cb:68:2c: 9b:41:4c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5RANwkerTfCzOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MzQzYzgyOGQtMGZiOC00YzdlLWIxZDItMDQ1MDFkNTc1OGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vuFfxPbJHyVVkGFOlIcYfpqQuw94Pbv0o41 Svy5Jjrar5qjrtfvwDieeTgXEJnEYio6sOyyy2JbeJd4F6YzYYJjhQ0Rqh4j2LAi 067PEHaPmJ/rceDOXFhEonwY86CTV6i9Htq4P1n8oRxJnO8frPQxpEavtEg82Gmo 8A55iN8KRmzWql2lyCHG07u/ZH0sd1Jq7hg7Ps7J3nOmuCa4b63kMCpN5+3vQ7qH y8ChnZbRl5g+0Mu7M5gVTVb07lE1Ps9Z1AYV9T57cF60GaVtYJ/8fsKH+eBzYcpo HP3RUK4pGgGYohJ5PWAN4m2+b2q+nmmY2hlnaBb1e6KdFibsvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhKh81txknE2lb3LWrUS1x+Z/cuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGU3NjkzNTEtYTRhOS0z Y2MzLTkwYzgtNjEyMWQ1NjgyMmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJnXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOJJVSawRfQwDU8c7uHO/y8B7f1OTzZ/SWo0dz0VJFTkn2CTBKxNiEg N1tAyLaldy5h6she2bNQ41deslTu4IkamvhhdtvA6eNvF6vg1OcwNcJ/ae9/z6uH hC6bgwriLcw/XYw/cS1KF3XyzytoM5GeuARcx9qZ6woPmbWIkOp//tmFXCr1G0Rp tOiB5cQ6j9ybI1zz8ZFaNFM0HUZGEUYackFcvUWLxNW+ZJwOwDfRqfI7MRFE58LO pG93CzWN8oRys7s9B6EMrJq+qR5FzPbIsiAKqfjMjoWHZviWUtqW5c8Lmsg0wV04 ekgWzosjNxIp/W/s5PezAstoLJtBTBE= -----END CERTIFICATE-----Generated at Fri Apr 17 21:16:59 2026 by rpki-client