$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7a7c3e6d-1f9a-3e0a-afa9-f8c9380bd602.roa File: 7a7c3e6d-1f9a-3e0a-afa9-f8c9380bd602.roa (raw, json) Hash identifier: L6ayhsJYzGXqGchRpWXN6ThZLzcGmk9AhPgAX0aDX1E= Subject key identifier: 04:21:BC:70:23:22:2A:9D:2D:92:CA:C6:81:6E:4E:BF:CC:AC:F1:D1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DADAAE7B0D12CD6BB4229AA80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7a7c3e6d-1f9a-3e0a-afa9-f8c9380bd602.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 8069 IP address blocks: 20.157.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:e7:b0:d1:2c:d6:bb:42:29:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=e4e657ef-c7cc-4bb7-8694-13b76fd30b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e9:72:a5:4a:66:de:39:58:dc:8c:2e:37:71: de:81:d4:b7:c2:b2:57:da:8a:ae:ae:8d:ba:8f:10: 00:4c:c1:bc:bb:f6:ea:65:23:03:fc:91:dc:eb:0b: 80:42:b6:60:b9:41:ca:de:7f:99:fd:9a:c8:bd:3b: 43:76:5c:ab:dc:94:ff:d2:35:04:c3:3a:5d:9d:84: 7a:ea:86:74:52:70:42:67:9b:e0:d7:55:83:04:a2: 33:d0:fc:8e:65:03:b7:af:4e:80:c2:23:67:af:a7: 0f:7b:0c:e3:b2:06:cb:81:f4:9b:a9:95:6f:f4:b2: 3f:96:73:92:18:62:49:06:99:e0:af:5e:54:0e:5f: 18:26:5e:7e:a3:8f:d4:47:2d:46:4f:78:cf:fa:0f: bc:37:bc:1f:6d:4f:d5:19:0d:86:e6:68:bb:81:74: 35:b5:4e:e3:14:dc:4b:c5:6e:56:b7:77:b6:fb:d1: ed:59:20:ba:bd:53:21:c7:33:89:47:ed:ab:70:49: ff:b3:15:1b:70:93:b7:d3:41:f9:08:4f:50:be:ff: 41:a3:1c:ab:c0:4c:1f:1e:bb:24:9a:52:03:8f:a8: 76:4c:e9:25:50:73:79:4f:ec:ca:16:05:7c:c8:ac: 69:0a:66:98:63:7a:bf:b5:61:ae:fe:42:9f:a7:96: 1d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:21:BC:70:23:22:2A:9D:2D:92:CA:C6:81:6E:4E:BF:CC:AC:F1:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7a7c3e6d-1f9a-3e0a-afa9-f8c9380bd602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:28:c6:eb:a4:bb:8c:46:4e:41:60:65:7a:21:2b:07:d1:af: 36:f0:d3:e9:36:f5:06:bd:c3:60:cd:c0:2b:c3:e9:14:2e:55: 87:9b:71:58:6e:51:f7:52:61:af:81:44:2f:26:80:1e:16:4c: 8d:f5:11:a3:ef:a9:55:ab:69:da:bf:b2:8a:da:af:31:b6:84: d4:ab:b0:1c:f3:4c:2e:83:cb:a7:fe:c0:eb:9a:66:de:5d:cf: 41:d9:7b:50:ab:b2:ef:94:ef:5a:68:25:bd:2f:43:27:18:4d: e8:f5:7a:48:94:81:8d:73:0c:e7:3c:3d:2c:aa:41:5c:cb:9c: 08:4f:01:7d:79:c6:4f:67:99:bb:1b:a9:8c:7e:a2:6d:41:1d: 15:5e:fc:1d:ce:6c:aa:1e:30:6c:67:64:72:10:e1:ca:e5:c1: cc:1d:e4:93:59:a2:31:3f:25:2d:26:d8:f2:e9:31:eb:45:38: 2c:57:7f:ff:8e:a9:3a:48:b6:33:c8:d6:50:c3:f1:53:79:91: 91:f7:ae:bd:3b:a1:a7:f9:f6:58:96:aa:3b:be:31:6e:75:a5: 6c:4e:c7:8c:16:71:31:41:20:b1:f5:53:90:75:65:dd:f4:ac: 21:fd:92:5b:ff:25:df:d2:68:2b:23:2f:38:ca:23:f7:c2:64: 13:56:89:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tquew0SzWu0IpqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk ZTRlNjU3ZWYtYzdjYy00YmI3LTg2OTQtMTNiNzZmZDMwYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmelypUpm3jlY3IwuN3HegdS3wrJX2oquro26 jxAATMG8u/bqZSMD/JHc6wuAQrZguUHK3n+Z/ZrIvTtDdlyr3JT/0jUEwzpdnYR6 6oZ0UnBCZ5vg11WDBKIz0PyOZQO3r06AwiNnr6cPewzjsgbLgfSbqZVv9LI/lnOS GGJJBpngr15UDl8YJl5+o4/URy1GT3jP+g+8N7wfbU/VGQ2G5mi7gXQ1tU7jFNxL xW5Wt3e2+9HtWSC6vVMhxzOJR+2rcEn/sxUbcJO300H5CE9Qvv9BoxyrwEwfHrsk mlIDj6h2TOklUHN5T+zKFgV8yKxpCmaYY3q/tWGu/kKfp5YdTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQhvHAjIiqdLZLKxoFuTr/MrPHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2E3YzNlNmQtMWY5YS0z ZTBhLWFmYTktZjhjOTM4MGJkNjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIoxuuku4xGTkFgZXohKwfRrzbw0+k29Qa9w2DNwCvD6RQuVYebcVhu UfdSYa+BRC8mgB4WTI31EaPvqVWradq/sorarzG2hNSrsBzzTC6Dy6f+wOuaZt5d z0HZe1Crsu+U71poJb0vQycYTej1ekiUgY1zDOc8PSyqQVzLnAhPAX15xk9nmbsb qYx+om1BHRVe/B3ObKoeMGxnZHIQ4crlwcwd5JNZojE/JS0m2PLpMetFOCxXf/+O qTpItjPI1lDD8VN5kZH3rr07oaf59liWqju+MW51pWxOx4wWcTFBILH1U5B1Zd30 rCH9klv/Jd/SaCsjLzjKI/fCZBNWiec= -----END CERTIFICATE-----Generated at Wed May 13 13:23:31 2026 by rpki-client