$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2799286e-a51a-3044-bd67-9ee123f7108f.roa File: 2799286e-a51a-3044-bd67-9ee123f7108f.roa (raw, json) Hash identifier: XpOSTOnRf6AoPNvgmQSjt/s7pm6AAZSRFAIzveJzYU8= Subject key identifier: B3:8B:5D:AC:F6:BB:98:98:85:41:AC:82:6F:EF:5C:2B:69:E5:AB:F2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA6B017C398407425A407A480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2799286e-a51a-3044-bd67-9ee123f7108f.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:17:c3:98:40:74:25:a4:07:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=86f227ff-c993-42bd-9b5d-ed14822839d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:88:74:2c:34:da:02:69:82:5f:76:b1:f1: 7b:a7:af:5e:03:fa:72:0b:88:60:4c:d6:46:07:37: 37:84:2a:db:9a:8f:68:8a:d0:93:f4:5c:75:9f:52: de:f4:e1:81:05:82:19:5d:47:a8:1a:e8:ef:45:56: 38:8a:df:1f:93:68:8a:d0:80:a7:40:63:6e:e6:f4: 0e:fc:ef:85:55:93:06:2d:42:96:60:da:54:a0:bc: 8e:31:ca:6f:1d:1c:49:65:8b:79:01:b2:c5:3b:45: ef:09:52:ba:db:bf:4a:45:9c:ab:f3:ac:42:6b:7e: dc:b0:9c:fc:27:d8:53:da:1e:60:e5:d6:4b:32:5f: 7a:44:3d:bf:34:11:30:f0:66:ad:24:ef:cb:7e:b8: ec:e4:30:d3:ae:f4:15:58:8d:a3:f9:90:c9:19:ed: 02:e9:f4:43:27:ea:95:25:47:46:fa:9e:37:d9:01: 8a:03:d1:cc:6c:0a:64:17:a2:da:30:23:46:29:49: fe:d9:01:f8:f3:0f:66:ff:7c:40:e7:f4:cd:2f:b1: b4:7f:50:05:21:e6:c3:79:13:93:86:6d:e8:3c:01: 47:7e:18:a2:00:04:92:0a:2f:c3:a9:17:ef:3d:05: a8:6e:c3:3f:aa:27:92:40:bd:9b:78:fe:d7:87:b0: 77:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8B:5D:AC:F6:BB:98:98:85:41:AC:82:6F:EF:5C:2B:69:E5:AB:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2799286e-a51a-3044-bd67-9ee123f7108f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:54:4f:3d:70:22:b3:cf:60:90:c7:71:00:d0:f9:f1:15:a3: 57:3e:ce:2d:3b:47:d9:72:0d:96:ab:93:ff:21:17:1b:ca:d1: c1:ce:4d:3b:5f:ff:9d:43:e4:0f:8f:8d:07:b5:7f:7d:d0:9a: a7:0e:37:ed:8d:33:da:ef:e7:0e:35:b4:1b:9a:3e:5c:f0:a1: 61:cc:4c:d1:1b:a1:ad:02:a6:65:41:e1:f9:be:a9:22:6b:70: b9:bd:89:1f:f9:7b:84:c1:1e:ec:58:6b:79:5d:3a:a3:be:3f: 18:6a:4a:ca:47:59:78:db:a0:04:28:4d:78:a6:6f:83:9a:f9: 59:80:02:43:8f:6f:86:77:8d:9f:7c:4d:9a:64:f1:88:7f:f0: 44:33:d1:4a:0e:7e:54:04:55:a9:f4:79:3f:a1:02:6e:02:86: fb:bd:48:e6:87:a0:74:a5:7d:55:9e:74:29:e5:41:31:73:90: f3:fa:28:69:38:46:97:95:c3:15:9f:01:95:84:9f:28:e9:74: 5c:a4:f3:27:3b:60:f4:45:47:ed:11:93:64:ef:a3:da:27:27: ee:7e:78:d2:00:3a:09:41:7e:81:71:5b:48:1e:8d:8d:ba:22: 6f:72:f5:c9:8e:f7:2b:23:86:6b:0b:92:c5:dc:19:18:a3:67: f6:1e:94:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBfDmEB0JaQHpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ODZmMjI3ZmYtYzk5My00MmJkLTliNWQtZWQxNDgyMjgzOWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwuIdCw02gJpgl92sfF7p69eA/pyC4hgTNZG Bzc3hCrbmo9oitCT9Fx1n1Le9OGBBYIZXUeoGujvRVY4it8fk2iK0ICnQGNu5vQO /O+FVZMGLUKWYNpUoLyOMcpvHRxJZYt5AbLFO0XvCVK6279KRZyr86xCa37csJz8 J9hT2h5g5dZLMl96RD2/NBEw8GatJO/Lfrjs5DDTrvQVWI2j+ZDJGe0C6fRDJ+qV JUdG+p432QGKA9HMbApkF6LaMCNGKUn+2QH48w9m/3xA5/TNL7G0f1AFIebDeROT hm3oPAFHfhiiAASSCi/DqRfvPQWobsM/qieSQL2beP7Xh7B3XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOLXaz2u5iYhUGsgm/vXCtp5avyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjc5OTI4NmUtYTUxYS0z MDQ0LWJkNjctOWVlMTIzZjcxMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJn7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRUTz1wIrPPYJDHcQDQ+fEVo1c+zi07R9lyDZark/8hFxvK0cHOTTtf /51D5A+PjQe1f33QmqcON+2NM9rv5w41tBuaPlzwoWHMTNEboa0CpmVB4fm+qSJr cLm9iR/5e4TBHuxYa3ldOqO+PxhqSspHWXjboAQoTXimb4Oa+VmAAkOPb4Z3jZ98 TZpk8Yh/8EQz0UoOflQEVan0eT+hAm4Chvu9SOaHoHSlfVWedCnlQTFzkPP6KGk4 RpeVwxWfAZWEnyjpdFyk8yc7YPRFR+0Rk2Tvo9onJ+5+eNIAOglBfoFxW0gejY26 Im9y9cmO9ysjhmsLksXcGRijZ/YelI0= -----END CERTIFICATE-----Generated at Wed May 13 12:55:30 2026 by rpki-client