$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3a298cc3-0efd-37b4-91d3-1e3697d6a370.roa File: 3a298cc3-0efd-37b4-91d3-1e3697d6a370.roa (raw, json) Hash identifier: fUnFcuzMyc1u9yHsLfJdoYvfUyHijt03/ngYLPy35tA= Subject key identifier: 1E:DC:20:69:C8:47:5B:78:7D:C0:4B:9C:E4:EA:22:DF:AB:3C:BB:3A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D97556666DC4886CFF25161E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3a298cc3-0efd-37b4-91d3-1e3697d6a370.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.153.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:66:66:dc:48:86:cf:f2:51:61:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=d2e5563f-a79d-423e-9b0c-8ec7c164dc0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a4:60:cc:f6:e4:85:fa:a2:6d:9d:15:ab:61: 3d:6b:5a:38:99:57:c4:e6:75:17:f0:9c:55:a4:c1: 90:d3:54:37:52:72:14:16:2c:3c:f0:4e:26:51:fa: f6:eb:e9:96:19:93:31:77:c0:27:46:c3:c0:00:7f: dd:e3:92:d2:98:63:fb:dc:5b:0c:63:e1:19:49:d6: f3:7e:90:d1:10:99:ee:9b:35:cd:bc:3c:32:9b:a6: b8:96:cb:97:aa:e4:bd:58:a2:c7:d3:1c:0f:b4:dc: 10:18:a3:55:7a:0e:d6:7f:cc:6b:14:9f:8a:0d:f4: f1:9d:17:79:6b:fa:e8:ea:9a:cb:ef:98:7d:5d:ba: ab:a5:1c:17:77:a0:4b:d3:2a:ca:81:d8:14:35:1e: eb:0f:16:fa:d5:de:e3:46:3f:1e:21:25:c3:01:73: 85:28:0a:22:cf:20:09:ef:9c:0f:39:04:2b:86:76: 24:d0:31:f6:6e:cf:d4:40:5c:62:24:49:aa:b1:30: ac:f4:83:9f:af:46:d4:7e:6e:5b:bd:fb:7d:e7:2a: bc:cc:c6:09:96:db:76:37:22:69:ba:89:d5:2e:c9: d0:6e:4f:16:da:ce:3e:1c:22:40:c0:b1:92:51:5f: c0:72:fb:d3:d6:36:2e:58:63:da:7b:76:cc:06:dd: fe:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DC:20:69:C8:47:5B:78:7D:C0:4B:9C:E4:EA:22:DF:AB:3C:BB:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3a298cc3-0efd-37b4-91d3-1e3697d6a370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:92:3d:87:9a:e3:3f:93:1e:b6:96:f8:35:f2:46:12:83:89: 49:b8:8f:6c:52:85:c5:f6:28:d0:86:25:bc:d8:3b:ea:c8:38: 40:0b:1a:57:d8:61:c9:cc:dd:dd:d1:19:ac:e5:a3:67:e2:5a: 37:6d:d0:79:d3:d9:68:d6:4c:d3:53:be:9e:ea:a1:be:e8:f2: 1c:d5:ab:04:db:55:e7:d3:05:92:57:21:53:1a:72:56:b3:a9: 40:92:96:9d:d1:4b:7b:f7:d4:61:13:ca:5a:36:52:9e:91:d0: 1c:5e:ac:c5:be:23:b7:65:5a:39:49:c9:34:57:dc:86:bf:b6: 9d:90:76:3a:cb:f2:7c:a8:32:28:dd:cf:70:d1:eb:d0:d7:32: 95:a7:bd:92:9d:eb:bf:3b:bc:cc:f2:41:6d:3f:4d:f8:c6:19: 71:6a:c4:74:b6:d4:2a:73:4f:78:07:85:82:2e:3a:db:67:8e: fd:a0:2f:7f:fc:8f:3a:38:b6:52:84:03:ec:43:39:07:6f:6a: e1:cb:d3:18:37:35:6d:e1:f0:08:b3:bb:62:24:ad:8c:d1:8e: d7:f9:78:85:40:68:ab:b2:49:c8:cc:93:32:6c:b1:3d:ca:1b: 85:da:2b:83:1d:a8:33:96:3d:e7:29:6b:bd:9c:05:cc:bc:49: 90:3d:02:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWZm3EiGz/JRYeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk ZDJlNTU2M2YtYTc5ZC00MjNlLTliMGMtOGVjN2MxNjRkYzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqRgzPbkhfqibZ0Vq2E9a1o4mVfE5nUX8JxV pMGQ01Q3UnIUFiw88E4mUfr26+mWGZMxd8AnRsPAAH/d45LSmGP73FsMY+EZSdbz fpDREJnumzXNvDwym6a4lsuXquS9WKLH0xwPtNwQGKNVeg7Wf8xrFJ+KDfTxnRd5 a/ro6prL75h9XbqrpRwXd6BL0yrKgdgUNR7rDxb61d7jRj8eISXDAXOFKAoizyAJ 75wPOQQrhnYk0DH2bs/UQFxiJEmqsTCs9IOfr0bUfm5bvft95yq8zMYJltt2NyJp uonVLsnQbk8W2s4+HCJAwLGSUV/AcvvT1jYuWGPae3bMBt3+nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7cIGnIR1t4fcBLnOTqIt+rPLs6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2EyOThjYzMtMGVmZC0z N2I0LTkxZDMtMWUzNjk3ZDZhMzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmSPYea4z+THraW+DXyRhKDiUm4j2xShcX2KNCGJbzYO+rIOEALGlfY YcnM3d3RGazlo2fiWjdt0HnT2WjWTNNTvp7qob7o8hzVqwTbVefTBZJXIVMaclaz qUCSlp3RS3v31GETylo2Up6R0BxerMW+I7dlWjlJyTRX3Ia/tp2QdjrL8nyoMijd z3DR69DXMpWnvZKd6787vMzyQW0/TfjGGXFqxHS21CpzT3gHhYIuOttnjv2gL3/8 jzo4tlKEA+xDOQdvauHL0xg3NW3h8Aizu2IkrYzRjtf5eIVAaKuyScjMkzJssT3K G4XaK4MdqDOWPecpa72cBcy8SZA9Aso= -----END CERTIFICATE-----Generated at Wed May 13 12:22:41 2026 by rpki-client