$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9fe82129-7ac7-3807-a8b1-97e83fcba244.roa File: 9fe82129-7ac7-3807-a8b1-97e83fcba244.roa (raw, json) Hash identifier: NgSnPw4oHiU4T6RE5hl/NrugYH+kSz67+8YWA32ZIkU= Subject key identifier: 10:99:08:45:82:B4:F4:80:17:E1:A5:D7:C2:B1:4B:33:85:E5:52:53 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D6AAA804C0F22C8B7FF544E10 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9fe82129-7ac7-3807-a8b1-97e83fcba244.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 8069 IP address blocks: 20.153.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:80:4c:0f:22:c8:b7:ff:54:4e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=f3091c17-3a48-4195-963e-56fb0a4a2190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7f:17:97:c9:c3:e6:d9:09:87:04:ad:ce:79: 1f:55:18:eb:39:cb:6f:6d:66:bb:11:3a:38:32:ce: 37:e9:ef:27:dc:8e:99:7b:66:ed:d6:5d:07:40:05: 70:bb:d2:a5:b8:7e:54:44:ec:1e:07:81:9d:c3:6f: 1c:51:85:74:03:78:4e:cf:c9:ac:1f:c6:c8:42:e7: 12:80:8c:ed:c3:e7:42:28:89:74:7a:ac:36:23:2a: 1f:67:dc:0f:96:de:5c:cf:29:11:c7:da:0f:1f:83: 16:70:6a:45:e1:16:52:c9:d8:9d:f6:d3:de:a3:df: 61:81:f1:b4:6a:4b:df:cb:d3:42:2a:92:82:eb:96: bc:d7:1b:e3:0e:5b:48:06:68:d3:bf:4c:18:ed:c5: fe:b8:ed:19:f2:85:1d:ed:ac:b9:be:6c:81:a6:11: 9e:53:8f:5d:61:48:12:3a:0f:2c:5a:25:09:3d:e0: 58:aa:a2:28:e2:24:72:35:3a:d3:e4:ae:7b:12:cf: 78:e0:f5:5d:59:f2:c9:1c:77:d0:2e:d5:3b:c8:18: c0:f7:b9:eb:ab:fe:9c:cd:69:19:25:ac:f1:77:7d: 0f:aa:0a:03:6e:1b:6d:88:af:dc:2e:64:01:2e:75: 70:16:f1:91:37:10:51:bd:99:23:86:b2:75:82:03: bb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:99:08:45:82:B4:F4:80:17:E1:A5:D7:C2:B1:4B:33:85:E5:52:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9fe82129-7ac7-3807-a8b1-97e83fcba244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a4:8b:86:eb:4c:47:35:4a:6d:6c:5d:76:14:29:c0:f9:19: 11:51:38:1a:f3:a2:5d:0a:9a:6a:35:10:55:eb:d8:00:01:73: 9a:94:8a:c5:e2:1b:71:89:c6:73:f2:45:92:2c:d9:7d:5e:a2: 7e:6b:08:1c:15:9a:90:7e:3e:06:39:d0:9d:b9:81:df:47:bc: a7:3a:28:58:d6:d0:a3:0d:7e:b3:be:f8:de:8b:3e:65:2a:24: f7:af:f8:7e:12:73:a9:53:4d:67:bc:dd:33:10:00:b0:16:4c: 41:22:e2:81:ab:ab:eb:45:cc:29:96:1a:74:d7:d5:e5:d6:96: 9d:5a:f7:d9:3d:35:a8:2f:52:42:9b:1d:41:0b:7a:f5:ad:05: a8:4d:59:cf:98:9d:33:b9:70:8d:6e:fd:4b:eb:1d:d1:66:0d: 2c:83:3a:6f:3d:a4:91:bc:65:6b:89:8e:5e:6a:f6:93:5d:18: 82:26:58:84:6b:75:dd:d2:e8:60:25:e9:a0:6d:b8:38:77:11: 8c:48:b0:8f:de:d0:af:82:a4:d7:a2:d2:c1:5e:94:0c:bf:0e: d8:41:0f:fc:3d:f8:4d:69:9e:a6:68:fc:79:eb:6e:3c:4a:cb: 6c:e5:0f:31:b6:cb:2e:4b:7c:9d:6f:a8:26:4c:94:c1:57:5c: 88:e3:5b:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqoBMDyLIt/9UThAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ZjMwOTFjMTctM2E0OC00MTk1LTk2M2UtNTZmYjBhNGEyMTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz38Xl8nD5tkJhwStznkfVRjrOctvbWa7ETo4 Ms436e8n3I6Ze2bt1l0HQAVwu9KluH5UROweB4Gdw28cUYV0A3hOz8msH8bIQucS gIztw+dCKIl0eqw2IyofZ9wPlt5czykRx9oPH4MWcGpF4RZSydid9tPeo99hgfG0 akvfy9NCKpKC65a81xvjDltIBmjTv0wY7cX+uO0Z8oUd7ay5vmyBphGeU49dYUgS Og8sWiUJPeBYqqIo4iRyNTrT5K57Es944PVdWfLJHHfQLtU7yBjA97nrq/6czWkZ Jazxd30PqgoDbhttiK/cLmQBLnVwFvGRNxBRvZkjhrJ1ggO77QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCZCEWCtPSAF+Gl18KxSzOF5VJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWZlODIxMjktN2FjNy0z ODA3LWE4YjEtOTdlODNmY2JhMjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqki4brTEc1Sm1sXXYUKcD5GRFROBrzol0Kmmo1EFXr2AABc5qUisXi G3GJxnPyRZIs2X1eon5rCBwVmpB+PgY50J25gd9HvKc6KFjW0KMNfrO++N6LPmUq JPev+H4Sc6lTTWe83TMQALAWTEEi4oGrq+tFzCmWGnTX1eXWlp1a99k9NagvUkKb HUELevWtBahNWc+YnTO5cI1u/UvrHdFmDSyDOm89pJG8ZWuJjl5q9pNdGIImWIRr dd3S6GAl6aBtuDh3EYxIsI/e0K+CpNei0sFelAy/DthBD/w9+E1pnqZo/HnrbjxK y2zlDzG2yy5LfJ1vqCZMlMFXXIjjW7o= -----END CERTIFICATE-----Generated at Fri Apr 17 21:19:13 2026 by rpki-client