$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e181be4e-3fdd-3e66-8cb6-88a2ad3b3294.roa File: e181be4e-3fdd-3e66-8cb6-88a2ad3b3294.roa (raw, json) Hash identifier: gnOf5AG4elLKMZaeQTXeOakOjCwCE9HkSTfIZSstSww= Subject key identifier: 43:96:CC:2C:15:A7:98:B7:12:51:9F:09:80:97:BD:AF:4A:5E:B6:5D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D65153B32921502723C435180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e181be4e-3fdd-3e66-8cb6-88a2ad3b3294.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 8069 IP address blocks: 20.153.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:3b:32:92:15:02:72:3c:43:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=2393bee1-cec6-470b-b8f3-03670eea6ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:ca:d2:35:1b:8e:38:a4:58:e0:b1:88:74: 96:f2:92:31:0c:7a:3e:e3:90:3f:75:8c:83:f8:13: 71:74:70:c2:fe:7f:a0:57:45:c7:01:ea:4d:3f:b5: 33:36:77:4b:6d:b2:04:5e:49:1c:11:f4:da:0f:9b: f3:23:a2:a0:5d:45:af:d8:27:76:65:68:f4:5e:57: 90:fe:5f:f6:bb:fc:87:d0:bf:df:e9:47:26:0b:5d: ab:ec:d2:70:54:76:29:ec:95:2c:8d:2e:0b:2c:f4: 79:04:b0:70:52:df:89:47:1d:00:3e:54:e6:15:a1: 89:42:7a:27:5d:71:0d:2e:8d:11:b3:28:cb:0f:39: c7:95:bf:38:c2:fc:dd:2e:4e:0d:53:b1:e1:ad:d1: 92:b6:69:a0:cf:d4:26:e4:ec:59:2a:6c:69:5f:1c: 37:66:70:bb:53:b6:91:42:43:1e:22:f4:bf:f9:de: 66:d8:10:cf:9a:15:cc:1d:60:15:d0:ad:e8:c7:3e: 0e:91:27:d8:65:53:9f:c9:b2:95:48:57:1d:fa:fc: f2:1b:2e:7e:50:63:51:28:bf:dc:7a:79:40:01:e2: 22:de:2c:b0:55:dc:a9:f2:bb:83:a4:8a:8c:26:3f: de:e6:7f:45:ac:06:5f:31:72:12:d7:f1:83:3f:38: cf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:96:CC:2C:15:A7:98:B7:12:51:9F:09:80:97:BD:AF:4A:5E:B6:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e181be4e-3fdd-3e66-8cb6-88a2ad3b3294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e6:31:ca:b4:62:50:41:8e:da:07:a5:f4:b5:ec:43:45:9e: 03:c0:bc:74:de:f5:06:97:8c:19:f9:0d:3f:4b:0c:f0:93:e1: 32:77:49:4c:cb:f2:0d:c5:ba:b4:16:41:a7:ca:33:71:6f:95: fb:1d:f2:ca:ff:97:2f:e9:c8:aa:4b:f7:75:f7:9d:7f:4c:a3: 22:2e:86:b7:cd:f4:51:d1:6c:68:8d:d0:b6:97:5e:b1:9a:e3: 90:26:5f:61:4d:de:d5:a8:60:43:c6:ae:24:e2:27:2b:20:0f: 10:4b:8f:96:21:90:88:1d:f9:59:66:51:b0:3a:9e:c8:59:28: 4e:03:00:63:84:77:18:23:70:21:9b:51:07:65:18:94:16:d1: f6:a0:15:f6:4a:07:d4:0f:78:49:e8:e0:18:4d:aa:e9:bf:c1: f4:d4:92:c6:e8:ac:06:fa:e5:4e:e7:dd:48:9c:c0:3a:a7:46: d3:42:8f:bb:e7:82:22:75:de:eb:f7:e8:7f:e2:2c:23:20:5e: 12:82:cc:b6:1a:a3:3d:69:53:5a:25:54:60:c3:de:7b:d4:42: 52:72:77:3b:90:3b:53:52:d7:05:12:36:51:b2:5f:28:32:3b: fe:57:e3:fd:67:bf:f4:e6:20:a2:82:02:29:06:1b:ec:e6:55: f1:3f:ba:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTsykhUCcjxDUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MjM5M2JlZTEtY2VjNi00NzBiLWI4ZjMtMDM2NzBlZWE2YmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDTK0jUbjjikWOCxiHSW8pIxDHo+45A/dYyD +BNxdHDC/n+gV0XHAepNP7UzNndLbbIEXkkcEfTaD5vzI6KgXUWv2Cd2ZWj0XleQ /l/2u/yH0L/f6UcmC12r7NJwVHYp7JUsjS4LLPR5BLBwUt+JRx0APlTmFaGJQnon XXENLo0RsyjLDznHlb84wvzdLk4NU7HhrdGStmmgz9Qm5OxZKmxpXxw3ZnC7U7aR QkMeIvS/+d5m2BDPmhXMHWAV0K3oxz4OkSfYZVOfybKVSFcd+vzyGy5+UGNRKL/c enlAAeIi3iywVdyp8ruDpIqMJj/e5n9FrAZfMXIS1/GDPzjPAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOWzCwVp5i3ElGfCYCXva9KXrZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTE4MWJlNGUtM2ZkZC0z ZTY2LThjYjYtODhhMmFkM2IzMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFJmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPmMcq0YlBBjtoHpfS17ENFngPAvHTe9QaXjBn5DT9LDPCT4TJ3SUzL 8g3FurQWQafKM3Fvlfsd8sr/ly/pyKpL93X3nX9MoyIuhrfN9FHRbGiN0LaXXrGa 45AmX2FN3tWoYEPGriTiJysgDxBLj5YhkIgd+VlmUbA6nshZKE4DAGOEdxgjcCGb UQdlGJQW0fagFfZKB9QPeEno4BhNqum/wfTUksborAb65U7n3UicwDqnRtNCj7vn giJ13uv36H/iLCMgXhKCzLYaoz1pU1olVGDD3nvUQlJydzuQO1NS1wUSNlGyXygy O/5X4/1nv/TmIKKCAikGG+zmVfE/ujo= -----END CERTIFICATE-----Generated at Fri Apr 17 22:15:20 2026 by rpki-client