$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/efa840d3-3c79-3ab5-8811-c67bec71e4d2.roa File: efa840d3-3c79-3ab5-8811-c67bec71e4d2.roa (raw, json) Hash identifier: s9q0vZkxIkSv7OXgIaEJELMYQVVo0jQzugC26AT7zvI= Subject key identifier: 49:F4:B1:92:36:BF:B0:D8:D2:09:84:D0:8E:20:C1:80:2F:27:CC:FA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D6AAA61B94085B97ADEBEF480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/efa840d3-3c79-3ab5-8811-c67bec71e4d2.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 8069 IP address blocks: 20.153.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:61:b9:40:85:b9:7a:de:be:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=a88b86ff-22d6-44f6-9c1b-466388a1e711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2a:71:7e:9f:9f:31:9b:76:75:e1:f6:54:67: ae:5a:dd:aa:4f:c7:bc:8c:7a:1e:07:de:5b:3d:db: ef:50:0a:92:ce:3b:9b:f3:9f:b7:cb:0f:5d:95:58: 89:41:7c:f2:a3:12:88:82:f4:ea:65:a8:a5:34:1e: 57:92:a6:71:31:a8:b8:eb:df:e2:a8:98:13:b2:45: a7:03:f2:ce:1a:cc:d4:13:6c:e8:25:3d:e2:36:d0: 7c:96:40:45:cb:bc:14:04:8f:4e:ab:25:08:d1:a5: ab:f7:74:9f:b2:d4:e3:01:a8:ea:cd:a6:63:33:8a: f0:c5:79:fd:88:5c:61:6f:8a:6f:e6:29:88:b4:98: c2:2f:cc:39:68:15:ec:02:3d:69:b0:f3:e2:21:fa: 88:07:e2:93:ab:e2:55:53:17:8d:77:cd:ef:41:bb: 11:fc:58:3a:c4:d3:11:a5:67:2e:15:96:c3:94:c2: b7:eb:11:8f:de:2c:d9:0c:92:15:16:4b:07:b4:18: be:7e:ce:3a:2a:c6:c2:85:cd:80:db:76:84:bf:10: 44:b1:05:ce:e6:55:6c:fd:3a:40:91:b1:d0:a2:6f: 12:06:f6:fe:7b:4c:6a:27:47:15:ce:54:eb:c1:4d: c9:0e:38:ab:a9:c6:be:4c:b2:8f:1d:9c:c7:e6:c4: e1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F4:B1:92:36:BF:B0:D8:D2:09:84:D0:8E:20:C1:80:2F:27:CC:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/efa840d3-3c79-3ab5-8811-c67bec71e4d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:0c:db:91:26:40:1c:e8:c4:ee:c8:e8:63:f7:df:14:fa:0c: 7f:47:81:37:57:41:19:47:1d:bc:6b:2a:c2:7f:21:2d:3d:44: 2c:d3:1a:55:7d:d3:ae:52:18:23:5c:be:aa:3e:27:d8:23:be: 09:42:76:20:74:ce:2b:99:aa:c3:ba:dc:33:3c:6a:56:89:75: d0:6f:6f:b6:ca:35:dc:20:38:e4:c8:e9:1b:0b:ac:4d:69:47: b7:de:6d:c9:2f:13:54:b7:66:77:3b:18:79:99:94:bc:1b:7c: 66:84:dd:70:72:25:b5:3a:85:c7:24:77:a6:03:de:df:5f:c0: 30:32:cf:e6:72:fa:95:63:e2:04:70:99:a2:5a:5f:50:7f:a2: a9:1b:c9:ed:2a:33:47:e6:d5:83:e1:bd:33:01:0a:a1:b6:04: ed:5a:83:16:01:c9:1f:14:4f:0d:d5:b4:57:40:4b:60:8a:65: d1:cf:ea:c9:7a:af:a2:c6:fc:ce:85:46:ba:25:14:27:ec:9c: 8d:2e:fb:20:8a:f6:56:ec:64:9d:6a:c2:46:42:e7:f3:f6:f0: dd:ee:4f:fd:ad:a5:46:fa:4e:73:f4:0f:f2:10:30:e4:34:ad: 8c:96:b9:b6:b9:5f:9f:a2:8a:1e:10:fd:a5:90:ef:7b:23:0c: 48:5b:c1:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqmG5QIW5et6+9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YTg4Yjg2ZmYtMjJkNi00NGY2LTljMWItNDY2Mzg4YTFlNzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmypxfp+fMZt2deH2VGeuWt2qT8e8jHoeB95b PdvvUAqSzjub85+3yw9dlViJQXzyoxKIgvTqZailNB5XkqZxMai469/iqJgTskWn A/LOGszUE2zoJT3iNtB8lkBFy7wUBI9OqyUI0aWr93SfstTjAajqzaZjM4rwxXn9 iFxhb4pv5imItJjCL8w5aBXsAj1psPPiIfqIB+KTq+JVUxeNd83vQbsR/Fg6xNMR pWcuFZbDlMK36xGP3izZDJIVFksHtBi+fs46KsbChc2A23aEvxBEsQXO5lVs/TpA kbHQom8SBvb+e0xqJ0cVzlTrwU3JDjirqca+TLKPHZzH5sThrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEn0sZI2v7DY0gmE0I4gwYAvJ8z6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWZhODQwZDMtM2M3OS0z YWI1LTg4MTEtYzY3YmVjNzFlNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwM25EmQBzoxO7I6GP33xT6DH9HgTdXQRlHHbxrKsJ/IS09RCzTGlV9 065SGCNcvqo+J9gjvglCdiB0ziuZqsO63DM8alaJddBvb7bKNdwgOOTI6RsLrE1p R7febckvE1S3Znc7GHmZlLwbfGaE3XByJbU6hcckd6YD3t9fwDAyz+Zy+pVj4gRw maJaX1B/oqkbye0qM0fm1YPhvTMBCqG2BO1agxYByR8UTw3VtFdAS2CKZdHP6sl6 r6LG/M6FRrolFCfsnI0u+yCK9lbsZJ1qwkZC5/P28N3uT/2tpUb6TnP0D/IQMOQ0 rYyWuba5X5+iih4Q/aWQ73sjDEhbwek= -----END CERTIFICATE-----Generated at Fri Apr 17 21:17:26 2026 by rpki-client