$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d72792fe-5daf-30c7-8173-737c0832e061.roa File: d72792fe-5daf-30c7-8173-737c0832e061.roa (raw, json) Hash identifier: M5kt5EJ7tBiqAY22MMrXlMg1BNkrfclGgnStNWir6h0= Subject key identifier: 0B:B4:A4:FC:4E:45:55:AF:32:DC:01:0C:72:F4:DE:19:D0:37:CE:B4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D65153AA6271A53ED8D8791A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d72792fe-5daf-30c7-8173-737c0832e061.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 8069 IP address blocks: 20.153.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:3a:a6:27:1a:53:ed:8d:87:91:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=750be2d6-78c1-42f6-817d-95f3f3d5d9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c7:8f:c7:f8:da:52:54:df:98:42:ca:c8:0e: 57:09:b7:61:16:c2:db:79:a5:0a:89:e1:ca:d9:5f: ac:79:56:06:96:22:a6:f7:b1:90:1d:57:5d:97:e0: f3:4a:7c:b9:83:57:2a:ab:6f:67:b5:7a:75:45:62: ae:4c:22:aa:06:dd:7a:f6:e4:37:a5:cd:8b:b5:63: 24:6a:f3:f7:e4:c3:b3:2f:c0:7d:2e:ec:0d:23:04: fe:9c:a6:bc:03:3c:ac:5d:0d:4f:01:47:ed:c7:5d: 83:12:79:a9:41:90:44:32:c0:ce:39:78:6c:b6:76: 3a:26:4d:0d:3e:66:75:2e:ea:6b:92:f9:65:b4:b9: 60:bb:d7:91:7e:09:63:d1:78:83:43:aa:c2:b8:95: 01:73:2c:2a:24:ea:bf:bd:a2:17:0a:01:5d:f1:4d: 14:04:5f:b0:7a:ed:1d:95:55:41:9f:42:6c:a6:ab: 6b:48:e2:39:75:36:c4:2b:0c:54:f3:35:55:7e:ec: 4a:1a:f7:27:23:1c:9e:2d:cf:90:2f:79:84:32:33: 32:57:0b:c3:a3:9d:22:0a:c8:4f:72:44:a5:8d:bf: ad:4d:6d:c4:82:3b:e0:df:0b:cb:64:fc:5d:54:68: 8d:c7:e6:5d:ba:9a:23:5f:58:e6:c2:d1:4d:aa:95: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B4:A4:FC:4E:45:55:AF:32:DC:01:0C:72:F4:DE:19:D0:37:CE:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d72792fe-5daf-30c7-8173-737c0832e061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:af:3a:ed:cc:3a:86:12:22:10:87:3c:8e:93:ba:a0:4d:e6: f7:8a:55:69:04:12:7e:a5:c7:59:cb:49:21:4c:09:11:47:19: 92:27:11:28:ae:ac:01:6e:5f:7c:9e:a5:a6:99:b3:a6:ae:d7: f3:93:1a:16:cd:4b:c1:97:e8:6e:31:a0:c5:d2:e7:5a:d0:2e: b1:ca:1b:11:fe:65:9f:93:7b:c8:0b:f3:24:79:1c:b9:ad:1d: 58:8e:49:f5:f7:7c:3a:6f:2f:f9:07:36:ac:ca:2c:c6:a9:5e: 37:84:71:05:18:bc:5d:9f:ef:db:ab:7b:31:67:59:7a:82:2e: 7e:e3:b6:30:6c:3e:ed:e8:f5:c6:e5:bf:a3:46:5c:b0:b1:5a: 7b:fe:95:c6:d2:ce:07:7d:6a:46:65:5e:d0:3d:ba:38:83:b3: a6:0c:85:84:e1:eb:bb:eb:65:72:5d:32:bf:66:f1:56:5b:2b: 97:d6:20:3f:35:d0:da:e3:8c:1f:e9:a9:32:da:68:6e:62:7a: b0:88:3f:75:aa:ad:29:09:6a:0a:a8:5d:e8:a2:82:8e:d6:5d: 75:01:7f:61:37:d4:e6:3f:6a:2a:0c:52:90:59:62:42:b9:4d: 04:a7:cb:39:ab:96:09:db:1e:47:d0:2e:b7:ca:e7:a4:ac:43: ab:21:2b:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTqmJxpT7Y2HkaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk NzUwYmUyZDYtNzhjMS00MmY2LTgxN2QtOTVmM2YzZDVkOWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcePx/jaUlTfmELKyA5XCbdhFsLbeaUKieHK 2V+seVYGliKm97GQHVddl+DzSny5g1cqq29ntXp1RWKuTCKqBt169uQ3pc2LtWMk avP35MOzL8B9LuwNIwT+nKa8AzysXQ1PAUftx12DEnmpQZBEMsDOOXhstnY6Jk0N PmZ1LuprkvlltLlgu9eRfglj0XiDQ6rCuJUBcywqJOq/vaIXCgFd8U0UBF+weu0d lVVBn0JspqtrSOI5dTbEKwxU8zVVfuxKGvcnIxyeLc+QL3mEMjMyVwvDo50iCshP ckSljb+tTW3Egjvg3wvLZPxdVGiNx+ZdupojX1jmwtFNqpVBOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAu0pPxORVWvMtwBDHL03hnQN860MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDcyNzkyZmUtNWRhZi0z MGM3LTgxNzMtNzM3YzA4MzJlMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSvOu3MOoYSIhCHPI6TuqBN5veKVWkEEn6lx1nLSSFMCRFHGZInESiu rAFuX3yepaaZs6au1/OTGhbNS8GX6G4xoMXS51rQLrHKGxH+ZZ+Te8gL8yR5HLmt HViOSfX3fDpvL/kHNqzKLMapXjeEcQUYvF2f79urezFnWXqCLn7jtjBsPu3o9cbl v6NGXLCxWnv+lcbSzgd9akZlXtA9ujiDs6YMhYTh67vrZXJdMr9m8VZbK5fWID81 0NrjjB/pqTLaaG5ierCIP3WqrSkJagqoXeiigo7WXXUBf2E31OY/aioMUpBZYkK5 TQSnyzmrlgnbHkfQLrfK56SsQ6shK0I= -----END CERTIFICATE-----Generated at Fri Apr 17 23:41:15 2026 by rpki-client