$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65df7823-ba47-3444-b05e-486205632b0f.roa File: 65df7823-ba47-3444-b05e-486205632b0f.roa (raw, json) Hash identifier: CFuHzJY86BDgJGHwvnIF/FDPPzF5acbZU4UA4yyaMqg= Subject key identifier: AC:F6:C4:35:36:57:E6:47:3E:31:7C:83:CC:99:E8:AB:88:0A:98:14 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D9755670CC46161C179AD7580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65df7823-ba47-3444-b05e-486205632b0f.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 8069 IP address blocks: 20.157.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:67:0c:c4:61:61:c1:79:ad:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=4c477e54-8e4d-4844-9182-3caf6000b36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:03:a1:4c:eb:23:bf:d8:88:72:11:e1:fd:60: d2:79:70:87:9e:60:e2:ab:98:41:89:de:22:a5:52: e4:a0:13:0d:3e:eb:2b:8a:9b:8c:a5:ef:d7:9f:14: 48:b4:36:32:f5:12:7e:5d:2b:1d:6f:f3:8b:a4:c9: 81:73:43:8d:e3:45:d1:07:ea:17:c4:93:1f:c2:0c: a2:c7:df:7a:f2:5b:7a:6a:d9:48:48:f1:c2:0a:66: be:8f:61:e9:e1:42:c8:bf:f1:42:51:d1:a6:63:de: d3:86:1e:91:39:23:e1:86:1e:0b:12:a7:45:e3:dd: 64:57:72:15:6b:fa:12:c2:ed:8c:b4:0f:29:2b:a3: b7:19:5a:90:70:d2:d1:2d:a3:2a:4f:02:fc:b1:1a: 7b:6e:ca:59:10:75:e1:5c:56:da:90:29:6c:8a:0e: ef:0a:1d:56:67:94:0a:91:d9:20:8d:a0:43:31:c0: 60:54:16:9e:79:e0:91:8e:a8:73:3f:08:d3:05:44: ed:55:41:e9:1b:d8:5f:b2:c8:8d:db:28:a7:28:1f: 85:72:ef:4c:45:2b:61:21:d9:a4:09:4a:c3:f0:13: b5:2d:c8:18:29:95:b3:54:a3:2f:36:97:08:90:5d: 96:06:a9:7e:31:23:e0:d1:3f:53:2d:08:13:c4:ad: 0e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F6:C4:35:36:57:E6:47:3E:31:7C:83:CC:99:E8:AB:88:0A:98:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65df7823-ba47-3444-b05e-486205632b0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:61:06:37:89:99:b9:4d:13:70:8f:79:4b:fa:88:08:47:e6: de:8a:e2:96:6d:35:27:16:ae:5a:8b:b2:d3:dc:dc:c2:fe:bd: 1b:00:74:a0:bd:3d:89:f8:30:96:80:04:1e:f3:e9:4d:d3:1f: 0a:d5:a6:5b:aa:7e:4f:e3:ad:a2:cd:a6:c9:3b:47:22:98:4f: 4c:22:ae:fe:2a:b4:f2:f0:fb:a5:96:a9:bb:f5:e6:03:49:e5: a7:48:42:38:41:03:bc:08:25:29:34:1a:f9:47:65:af:2a:cb: 4e:9b:cd:10:9a:fa:f9:cd:59:82:dc:ce:b8:7e:19:cc:db:c2: 46:09:96:e1:0d:08:f8:0f:7a:e3:46:0a:3d:da:34:d5:55:e2: f1:b8:9e:03:1b:bc:9b:c6:9f:2a:f9:e6:ae:bb:e5:a0:d1:75: 25:59:c5:df:f9:6a:75:bd:6f:06:d6:47:e2:5f:15:07:08:c3: 94:ae:91:71:f2:33:4c:49:c4:33:1f:a2:de:15:76:cf:2d:9e: 8d:cb:cc:d6:f4:bd:9f:85:6e:26:ba:bd:84:68:6a:a8:65:e3: 82:56:ac:75:86:78:53:e8:53:6d:9c:2e:17:fc:2e:81:a8:bb: 5e:f6:8a:2f:71:96:17:8e:f5:9c:3f:71:73:d5:9b:ad:e9:4d: 9c:ae:da:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWcMxGFhwXmtdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk NGM0NzdlNTQtOGU0ZC00ODQ0LTkxODItM2NhZjYwMDBiMzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQOhTOsjv9iIchHh/WDSeXCHnmDiq5hBid4i pVLkoBMNPusripuMpe/XnxRItDYy9RJ+XSsdb/OLpMmBc0ON40XRB+oXxJMfwgyi x9968lt6atlISPHCCma+j2Hp4ULIv/FCUdGmY97Thh6ROSPhhh4LEqdF491kV3IV a/oSwu2MtA8pK6O3GVqQcNLRLaMqTwL8sRp7bspZEHXhXFbakClsig7vCh1WZ5QK kdkgjaBDMcBgVBaeeeCRjqhzPwjTBUTtVUHpG9hfssiN2yinKB+Fcu9MRSthIdmk CUrD8BO1LcgYKZWzVKMvNpcIkF2WBql+MSPg0T9TLQgTxK0OWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKz2xDU2V+ZHPjF8g8yZ6KuICpgUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjVkZjc4MjMtYmE0Ny0z NDQ0LWIwNWUtNDg2MjA1NjMyYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdhBjeJmblNE3CPeUv6iAhH5t6K4pZtNScWrlqLstPc3ML+vRsAdKC9 PYn4MJaABB7z6U3THwrVpluqfk/jraLNpsk7RyKYT0wirv4qtPLw+6WWqbv15gNJ 5adIQjhBA7wIJSk0GvlHZa8qy06bzRCa+vnNWYLczrh+GczbwkYJluENCPgPeuNG Cj3aNNVV4vG4ngMbvJvGnyr55q675aDRdSVZxd/5anW9bwbWR+JfFQcIw5SukXHy M0xJxDMfot4Vds8tno3LzNb0vZ+Fbia6vYRoaqhl44JWrHWGeFPoU22cLhf8LoGo u172ii9xlheO9Zw/cXPVm63pTZyu2l8= -----END CERTIFICATE-----Generated at Wed May 13 13:04:54 2026 by rpki-client