$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa File: 25af00ca-4f76-3e40-b823-c83ad676aaa2.roa (raw, json) Hash identifier: 120KTVyr1xpzeCvELo5VcCgy88HBae9kYpqXMshVpYQ= Subject key identifier: 07:03:39:1C:E9:8C:BC:78:F4:AF:8C:50:7E:24:CE:C8:3D:B8:74:76 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D97556673E08CD2DE51A85D80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.153.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:66:73:e0:8c:d2:de:51:a8:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=bef0fdbf-0dbe-486d-ab19-974122b6357b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9e:cd:60:5e:e9:f5:fb:79:01:50:39:a8:71: 6a:52:90:65:45:4f:d7:f7:57:12:fe:79:fd:97:87: a4:07:8e:a9:62:ae:45:a8:1e:3b:15:a1:42:58:c5: e1:9e:15:71:ea:37:63:ba:74:b7:b9:49:d4:9e:80: 7e:7b:26:06:f3:b8:9b:1e:c1:b6:0f:2c:b0:ad:e6: 6a:f9:8d:64:85:a3:e1:28:b7:a3:f2:54:de:39:7a: 45:38:53:f3:48:89:3e:d1:fc:62:e6:a7:0d:18:44: c4:ad:45:3e:48:90:9d:1d:c5:0c:01:63:f7:35:a1: 79:66:98:e0:f5:92:65:5f:1d:cd:6e:c1:38:79:7d: 71:1d:63:04:cf:03:54:ed:4f:53:c3:d0:24:a4:66: 30:fc:92:a5:d1:b3:41:40:93:b9:a7:e3:0f:e2:29: d6:56:3a:fe:e7:f4:e4:b0:9e:bc:82:7d:07:4a:38: 44:23:b4:d3:fa:2e:18:65:a5:4e:d2:15:6e:e7:cc: 5c:05:bf:c7:21:eb:fb:9c:60:88:a2:3c:29:5c:d6: 0b:8e:8e:2a:cd:85:5d:48:19:ae:e5:a3:63:2b:f2: ad:9a:87:4f:a6:1d:e5:06:0f:56:14:09:f3:60:bb: 9c:74:4c:2d:79:4f:14:9a:1e:e5:3d:9c:fd:2a:c7: 81:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:03:39:1C:E9:8C:BC:78:F4:AF:8C:50:7E:24:CE:C8:3D:B8:74:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:59:2e:94:31:fb:e7:df:5f:88:b2:75:ab:2f:e0:3c:32:ba: b5:e3:0a:05:6e:c5:1f:1f:d8:b2:01:62:ff:f3:d7:d5:c1:03: 5b:d2:a5:10:93:50:37:bd:18:3f:fb:cd:5f:f5:4d:68:f6:fa: a0:8f:0d:b7:08:9b:0e:99:5f:92:51:2e:f2:3d:48:50:7b:12: 9a:63:e0:17:21:d2:16:8d:de:4a:26:8e:d4:5b:6b:0f:9e:9f: a1:c2:11:bb:9a:9e:c0:32:87:6f:60:c3:53:9a:5e:7b:0a:28: 9c:6b:fc:ea:55:fb:72:7c:f9:fb:92:5a:ab:33:01:f6:4a:a6: 84:71:70:5b:8a:8f:be:bf:a8:a3:f2:29:72:36:ce:2d:28:55: fd:3f:fc:48:c9:d4:c3:b7:97:b7:6f:c4:14:88:cd:83:30:92: 34:fb:39:c8:cd:16:bc:0d:9c:ca:e1:10:85:8f:1e:39:d6:63: 2e:82:09:9e:2f:43:ce:49:05:33:1a:e3:0c:00:24:bd:f3:c0: 3f:ae:c7:b8:ee:d5:ac:0d:cf:ad:06:5d:22:94:42:ab:b1:68: ff:a0:cd:b5:55:e1:9b:16:fc:d7:bd:c1:42:94:3b:e0:8b:1a: 2f:34:6c:3d:38:41:c4:3f:56:3f:16:60:92:76:09:ed:bc:c6: 05:9a:35:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWZz4IzS3lGoXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk YmVmMGZkYmYtMGRiZS00ODZkLWFiMTktOTc0MTIyYjYzNTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo57NYF7p9ft5AVA5qHFqUpBlRU/X91cS/nn9 l4ekB46pYq5FqB47FaFCWMXhnhVx6jdjunS3uUnUnoB+eyYG87ibHsG2DyywreZq +Y1khaPhKLej8lTeOXpFOFPzSIk+0fxi5qcNGETErUU+SJCdHcUMAWP3NaF5Zpjg 9ZJlXx3NbsE4eX1xHWMEzwNU7U9Tw9AkpGYw/JKl0bNBQJO5p+MP4inWVjr+5/Tk sJ68gn0HSjhEI7TT+i4YZaVO0hVu58xcBb/HIev7nGCIojwpXNYLjo4qzYVdSBmu 5aNjK/KtmodPph3lBg9WFAnzYLucdEwteU8Umh7lPZz9KseBkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcDORzpjLx49K+MUH4kzsg9uHR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjVhZjAwY2EtNGY3Ni0z ZTQwLWI4MjMtYzgzYWQ2NzZhYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdZLpQx++ffX4iydasv4DwyurXjCgVuxR8f2LIBYv/z19XBA1vSpRCT UDe9GD/7zV/1TWj2+qCPDbcImw6ZX5JRLvI9SFB7Eppj4Bch0haN3komjtRbaw+e n6HCEbuansAyh29gw1OaXnsKKJxr/OpV+3J8+fuSWqszAfZKpoRxcFuKj76/qKPy KXI2zi0oVf0//EjJ1MO3l7dvxBSIzYMwkjT7OcjNFrwNnMrhEIWPHjnWYy6CCZ4v Q85JBTMa4wwAJL3zwD+ux7ju1awNz60GXSKUQquxaP+gzbVV4ZsW/Ne9wUKUO+CL Gi80bD04QcQ/Vj8WYJJ2Ce28xgWaNU4= -----END CERTIFICATE-----Generated at Wed May 13 09:14:18 2026 by rpki-client