$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a00f52f6-d4cf-3314-9fdc-9cefa660d256.roa File: a00f52f6-d4cf-3314-9fdc-9cefa660d256.roa (raw, json) Hash identifier: OQI1GEwo4fJdYLIcr7/e33JIbmVIowHXGfeRgRIGsWc= Subject key identifier: 0E:97:68:8B:5E:93:F7:4B:DB:CD:B3:04:D5:9D:37:81:0D:FF:A2:48 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D65153D4432A875E44E12B000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a00f52f6-d4cf-3314-9fdc-9cefa660d256.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 8069 IP address blocks: 20.153.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:3d:44:32:a8:75:e4:4e:12:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=60b2e0be-ff8f-4e57-9413-3105591e4318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:38:88:a9:7d:4f:37:a2:00:d0:ce:ae:8c: 19:eb:46:d4:9f:47:55:52:e5:1c:77:a4:40:db:d5: fc:5c:23:bd:1b:81:a1:6c:ab:1e:bb:51:58:8b:89: 09:5a:ca:5c:ce:5f:4e:56:2b:7d:48:d4:4c:91:f4: 5c:dc:fb:dd:62:c3:5b:b7:5a:fb:a3:5b:d3:15:0b: 4c:d7:87:f6:69:51:63:15:c9:7a:91:0b:73:41:05: ad:ce:0e:c8:bc:57:70:47:07:06:b6:99:7d:ba:43: 4c:c7:2b:c5:6f:51:8d:ea:38:1c:31:dc:bc:3b:0e: 8c:79:00:41:b5:cb:38:8b:03:40:21:78:fd:be:34: 4c:90:87:84:0c:89:7d:37:05:d3:04:54:c0:fa:a8: 5a:1f:5d:63:c1:ad:60:8f:6f:8f:8d:ab:92:5d:be: 0c:66:24:33:6b:2e:0f:3d:b7:cc:75:7b:c9:f9:52: d8:00:f9:64:95:f7:ad:75:60:bf:55:61:37:36:70: a3:9d:f7:49:59:64:9a:f0:ae:ce:32:f8:50:23:3e: 85:bc:e9:94:92:fa:21:d4:0f:f9:fa:a3:4b:77:dd: 94:93:6e:c6:df:03:1c:80:0e:2e:4f:72:f8:bb:86: d8:46:53:b3:98:29:80:4e:f4:90:46:15:b2:7e:47: ef:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:97:68:8B:5E:93:F7:4B:DB:CD:B3:04:D5:9D:37:81:0D:FF:A2:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a00f52f6-d4cf-3314-9fdc-9cefa660d256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:4c:5b:41:5e:ef:14:64:1a:42:7a:1c:7d:18:52:16:59:99: 91:34:c8:9c:56:20:75:ef:58:15:a2:b8:36:cf:fc:14:d2:e1: f3:5c:bb:1e:5c:d4:e0:c3:51:97:34:c7:ea:07:9b:52:ad:f1: 62:44:35:13:48:4e:1e:6c:11:d5:ff:da:15:52:38:c5:ae:f1: fe:02:05:b8:f8:5c:01:7f:09:2e:d2:d0:23:42:b9:b4:44:11: 8d:f2:78:bd:61:75:4f:72:1e:78:c9:2e:9c:3a:ce:da:c8:bf: 0e:5f:e3:df:77:9d:4c:88:d6:d1:0b:be:03:c7:e2:41:7f:6e: 63:4a:c0:53:73:6f:8f:c3:e0:0f:f0:c1:2b:cc:f4:1e:27:c2: 17:5d:0a:79:a3:1e:17:3a:74:31:d7:a4:a4:f3:dc:74:7e:46: 43:a9:1e:a1:28:49:55:64:fc:65:73:9e:06:36:19:ba:17:15: 42:7b:74:c6:f0:2c:95:0d:19:db:d2:9d:6a:76:4c:a4:9c:fc: 16:9d:ef:95:be:98:87:85:9c:cf:bd:29:6b:99:56:56:b8:73: bd:f2:ba:26:23:e0:70:42:1b:8b:e4:7e:49:e3:fe:76:15:ad: 69:a6:0a:76:db:50:ad:81:6e:59:22:a7:3d:82:33:20:ca:36: 8e:8f:c2:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFT1EMqh15E4SsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk NjBiMmUwYmUtZmY4Zi00ZTU3LTk0MTMtMzEwNTU5MWU0MzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ84iKl9TzeiANDOrowZ60bUn0dVUuUcd6RA 29X8XCO9G4GhbKseu1FYi4kJWspczl9OVit9SNRMkfRc3PvdYsNbt1r7o1vTFQtM 14f2aVFjFcl6kQtzQQWtzg7IvFdwRwcGtpl9ukNMxyvFb1GN6jgcMdy8Ow6MeQBB tcs4iwNAIXj9vjRMkIeEDIl9NwXTBFTA+qhaH11jwa1gj2+PjauSXb4MZiQzay4P PbfMdXvJ+VLYAPlklfetdWC/VWE3NnCjnfdJWWSa8K7OMvhQIz6FvOmUkvoh1A/5 +qNLd92Uk27G3wMcgA4uT3L4u4bYRlOzmCmATvSQRhWyfkfvwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6XaItek/dL282zBNWdN4EN/6JIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTAwZjUyZjYtZDRjZi0z MzE0LTlmZGMtOWNlZmE2NjBkMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJnWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRMW0Fe7xRkGkJ6HH0YUhZZmZE0yJxWIHXvWBWiuDbP/BTS4fNcux5c 1ODDUZc0x+oHm1Kt8WJENRNITh5sEdX/2hVSOMWu8f4CBbj4XAF/CS7S0CNCubRE EY3yeL1hdU9yHnjJLpw6ztrIvw5f4993nUyI1tELvgPH4kF/bmNKwFNzb4/D4A/w wSvM9B4nwhddCnmjHhc6dDHXpKTz3HR+RkOpHqEoSVVk/GVzngY2GboXFUJ7dMbw LJUNGdvSnWp2TKSc/Bad75W+mIeFnM+9KWuZVla4c73yuiYj4HBCG4vkfknj/nYV rWmmCnbbUK2Bblkipz2CMyDKNo6Pwig= -----END CERTIFICATE-----Generated at Fri Apr 17 21:15:39 2026 by rpki-client