$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da1d564b-362d-3a9a-993d-48e4fe19b098.roa File: da1d564b-362d-3a9a-993d-48e4fe19b098.roa (raw, json) Hash identifier: la7HB+2pp0EIoSMUE57IGMGGT5vXv+7+nwrInITDEiI= Subject key identifier: F0:63:96:6A:50:A1:95:43:B5:E4:D2:36:F5:11:05:65:27:9B:6C:25 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D6AAA7F581C039A47234EAFBC Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da1d564b-362d-3a9a-993d-48e4fe19b098.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 8069 IP address blocks: 20.153.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:7f:58:1c:03:9a:47:23:4e:af:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=02cee793-821f-4b07-8d4c-a6a0cf1dcf3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:4a:e2:89:0d:ba:c4:e6:9b:31:67:4f:d3: 2c:63:d9:74:3a:b6:bf:83:ff:21:82:c4:c5:4f:1c: c4:76:4b:a1:59:2b:a6:50:0d:77:38:33:67:51:64: 95:19:cd:98:99:86:f1:94:b1:ac:eb:89:eb:44:d3: 58:53:aa:1d:28:62:1c:30:33:23:21:82:43:63:43: 1d:09:d4:20:04:a2:65:12:f7:3d:5b:17:e8:46:be: 66:1b:af:c6:a6:45:99:90:bf:a8:21:7a:f3:b0:9f: 10:e9:75:08:25:ed:cb:c2:b1:69:cc:1d:a5:de:35: 0c:ae:3c:f0:28:ac:3b:4c:1e:41:e3:5e:27:44:79: 84:2c:9b:ec:e1:cf:d7:2a:04:22:bf:3e:1e:21:fd: d6:55:5a:4c:87:7e:c3:73:59:6c:c9:c0:99:25:e6: e0:0d:9d:72:03:79:42:e7:13:3a:fd:b6:e1:20:0f: d1:75:96:7e:fa:07:1f:25:87:83:9d:cf:4a:5a:2e: 3a:f5:25:8a:d9:52:d3:e0:f8:98:df:12:ef:03:02: 88:e8:e1:11:8f:3b:85:37:f9:d2:b1:44:20:c1:eb: c4:da:61:eb:2b:f7:70:b7:ed:05:63:27:31:a3:e1: 81:51:e3:33:b9:e8:32:e2:ff:f0:81:10:39:d5:66: b1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:63:96:6A:50:A1:95:43:B5:E4:D2:36:F5:11:05:65:27:9B:6C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da1d564b-362d-3a9a-993d-48e4fe19b098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:a9:df:ef:30:e8:96:7e:0e:45:79:6b:60:39:93:ca:69:58: 9c:35:8d:83:8a:3e:72:ef:1a:d1:27:bb:31:08:2b:34:22:a5: 30:04:ce:92:60:d3:a6:c3:91:76:84:ba:a8:9a:64:d6:2a:e8: 37:f8:e3:b1:59:27:9b:5f:6a:c2:be:2d:fc:31:a5:f7:54:74: 1d:16:c1:37:9d:24:65:c0:3a:44:f9:a8:1f:db:93:92:9d:cb: ce:80:e6:2c:d9:10:42:04:da:3a:aa:5e:bc:fb:52:08:f3:4a: 58:84:f7:b7:4e:97:90:f3:36:f9:29:2e:7a:42:9d:67:ce:90: 60:14:f9:e7:37:c6:16:bd:fb:da:2c:82:af:24:8d:f6:3c:d7: ad:f8:f2:9f:26:85:d1:d3:17:17:8e:b6:c3:8f:9f:f8:24:b4: 68:76:ea:19:65:89:8b:64:34:71:a1:6c:57:bc:ec:bd:e8:f5: a7:20:6a:34:fa:d4:47:2e:5e:67:96:c3:b8:20:a7:56:7f:f6: 5d:7d:9b:96:ac:74:5b:ba:a1:05:d2:73:5b:13:2d:64:fd:ba: dd:fa:00:2b:68:75:12:d8:ba:f9:97:01:5d:aa:55:52:52:f8: 36:75:83:cd:fa:d3:d0:8e:a8:71:84:b7:25:f3:11:fd:2c:9f: 7b:1e:ec:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqn9YHAOaRyNOr7wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk MDJjZWU3OTMtODIxZi00YjA3LThkNGMtYTZhMGNmMWRjZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRFK4okNusTmmzFnT9MsY9l0Ora/g/8hgsTF TxzEdkuhWSumUA13ODNnUWSVGc2YmYbxlLGs64nrRNNYU6odKGIcMDMjIYJDY0Md CdQgBKJlEvc9WxfoRr5mG6/GpkWZkL+oIXrzsJ8Q6XUIJe3LwrFpzB2l3jUMrjzw KKw7TB5B414nRHmELJvs4c/XKgQivz4eIf3WVVpMh37Dc1lsycCZJebgDZ1yA3lC 5xM6/bbhIA/RdZZ++gcfJYeDnc9KWi469SWK2VLT4PiY3xLvAwKI6OERjzuFN/nS sUQgwevE2mHrK/dwt+0FYycxo+GBUeMzuegy4v/wgRA51WaxmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBjlmpQoZVDteTSNvURBWUnm2wlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGExZDU2NGItMzYyZC0z YTlhLTk5M2QtNDhlNGZlMTliMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGp3+8w6JZ+DkV5a2A5k8ppWJw1jYOKPnLvGtEnuzEIKzQipTAEzpJg 06bDkXaEuqiaZNYq6Df447FZJ5tfasK+LfwxpfdUdB0WwTedJGXAOkT5qB/bk5Kd y86A5izZEEIE2jqqXrz7UgjzSliE97dOl5DzNvkpLnpCnWfOkGAU+ec3xha9+9os gq8kjfY816348p8mhdHTFxeOtsOPn/gktGh26hlliYtkNHGhbFe87L3o9acgajT6 1EcuXmeWw7ggp1Z/9l19m5asdFu6oQXSc1sTLWT9ut36ACtodRLYuvmXAV2qVVJS +DZ1g83609COqHGEtyXzEf0sn3se7Kk= -----END CERTIFICATE-----Generated at Fri Apr 17 21:16:25 2026 by rpki-client