$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25ccba33-1884-3978-a226-e76953260ba0.roa File: 25ccba33-1884-3978-a226-e76953260ba0.roa (raw, json) Hash identifier: u9gBCHbs0QB/rLVEnuJi/N8A7OH9TCDB0z2yZsGyrA0= Subject key identifier: CA:3B:B4:A3:F7:29:A0:42:9A:0B:39:E5:C3:98:1B:7C:39:A2:85:EB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA3E5661397488EB05986CBF0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25ccba33-1884-3978-a226-e76953260ba0.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:66:13:97:48:8e:b0:59:86:cb:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=9fae37aa-f5e9-4360-bd20-0094995aea09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:25:84:28:34:bf:8c:be:67:32:c4:13:2a:2a: 34:df:f3:db:54:42:e1:e4:09:3a:50:00:09:14:24: ce:a3:dc:af:45:d1:8e:83:21:cb:66:bf:d3:d2:e9: be:28:5f:8c:74:b8:5a:09:13:94:e3:2a:05:82:0b: 36:8b:4b:44:e5:cf:8b:21:ec:74:6e:92:c8:54:ea: 59:14:c0:ee:bd:2e:e8:02:b5:d6:51:0e:c3:ee:3d: 0d:4b:a9:d2:e7:6b:c2:8e:2a:28:20:58:82:32:f6: b2:9c:4d:d4:72:0a:bc:e9:0f:f0:59:e9:62:aa:03: 43:43:72:8d:34:cc:0d:c7:75:99:89:8f:e6:9a:3e: 6a:a5:b0:c9:81:2c:ec:6a:90:fe:d6:f3:61:98:34: 68:73:b8:e9:a1:c0:b3:ad:72:61:7d:68:40:4c:6f: 0a:81:00:61:cf:cb:b4:2d:2b:18:fe:7f:ff:38:a2: 4d:f9:fc:c3:97:51:52:2f:20:34:c3:f3:88:c3:62: 1f:84:58:e0:a6:80:64:af:c4:b6:87:b4:a5:c4:53: 83:c3:78:7a:20:24:44:5f:e6:08:59:2c:d5:a4:2d: 38:b0:40:8d:16:15:5e:fc:69:de:84:45:26:f0:78: 6f:86:50:d1:4a:d3:f8:3d:5c:3c:46:22:0e:bb:2c: a9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3B:B4:A3:F7:29:A0:42:9A:0B:39:E5:C3:98:1B:7C:39:A2:85:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25ccba33-1884-3978-a226-e76953260ba0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a1:4a:ac:d5:db:65:5b:9a:e0:9c:64:3e:18:cb:dc:9d:87: 63:a5:c8:66:27:97:eb:c6:a6:38:2d:b5:36:ee:08:03:88:cf: 26:33:9c:9e:39:5b:07:c2:25:0d:ff:30:87:6e:de:05:5f:db: 97:e6:93:f2:c2:db:d6:f5:78:ac:20:11:09:80:de:74:66:d9: d2:55:14:66:ea:98:12:b9:b8:5b:8e:ba:a0:3f:c4:7c:cd:c2: 30:fb:e7:57:d7:ef:75:b6:6e:ed:c2:35:22:d4:ec:12:2f:8c: 7f:22:10:e2:41:43:eb:81:c9:eb:ae:f3:3f:b5:48:ef:99:8a: 55:19:e0:9c:61:fe:1b:f3:8d:12:04:48:fd:51:91:5b:5a:d7: 09:08:cd:8f:0d:ac:8e:ef:61:1b:78:15:67:8b:02:70:23:21: ab:42:12:ae:16:69:2b:b9:91:21:7f:0e:ab:9c:25:a8:31:5e: 79:5b:8a:fb:a4:b5:57:db:6b:97:18:e5:80:02:22:57:c3:b6: 9e:f4:56:c4:cc:82:c3:47:1a:96:43:37:bb:50:7c:7c:bc:b6: 5c:7b:0b:1a:06:b3:fb:e5:20:f7:72:bd:3a:74:8e:05:46:3f: 83:ae:03:32:1f:88:e4:38:bd:36:e4:b6:62:5c:b9:5c:45:e5: 0b:c1:af:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5WYTl0iOsFmGy/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk OWZhZTM3YWEtZjVlOS00MzYwLWJkMjAtMDA5NDk5NWFlYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CWEKDS/jL5nMsQTKio03/PbVELh5Ak6UAAJ FCTOo9yvRdGOgyHLZr/T0um+KF+MdLhaCROU4yoFggs2i0tE5c+LIex0bpLIVOpZ FMDuvS7oArXWUQ7D7j0NS6nS52vCjiooIFiCMvaynE3Ucgq86Q/wWeliqgNDQ3KN NMwNx3WZiY/mmj5qpbDJgSzsapD+1vNhmDRoc7jpocCzrXJhfWhATG8KgQBhz8u0 LSsY/n//OKJN+fzDl1FSLyA0w/OIw2IfhFjgpoBkr8S2h7SlxFODw3h6ICREX+YI WSzVpC04sECNFhVe/GnehEUm8HhvhlDRStP4PVw8RiIOuyyp2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo7tKP3KaBCmgs55cOYG3w5ooXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjVjY2JhMzMtMTg4NC0z OTc4LWEyMjYtZTc2OTUzMjYwYmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2hSqzV22VbmuCcZD4Yy9ydh2OlyGYnl+vGpjgttTbuCAOIzyYznJ45 WwfCJQ3/MIdu3gVf25fmk/LC29b1eKwgEQmA3nRm2dJVFGbqmBK5uFuOuqA/xHzN wjD751fX73W2bu3CNSLU7BIvjH8iEOJBQ+uByeuu8z+1SO+ZilUZ4Jxh/hvzjRIE SP1RkVta1wkIzY8NrI7vYRt4FWeLAnAjIatCEq4WaSu5kSF/DqucJagxXnlbivuk tVfba5cY5YACIlfDtp70VsTMgsNHGpZDN7tQfHy8tlx7CxoGs/vlIPdyvTp0jgVG P4OuAzIfiOQ4vTbktmJcuVxF5QvBr64= -----END CERTIFICATE-----Generated at Wed May 13 13:49:47 2026 by rpki-client