$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/99262335-e4d0-30ea-8231-d57c9635e705.roa File: 99262335-e4d0-30ea-8231-d57c9635e705.roa (raw, json) Hash identifier: whPflv9BPoopsu8XTRFRiJDQcfgUEXSgWPKUqR97AD0= Subject key identifier: E0:E0:35:F2:2A:C8:57:2C:25:3A:41:EA:7B:94:BF:2D:15:8D:63:89 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D95F00D7E10E30778B8111D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/99262335-e4d0-30ea-8231-d57c9635e705.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 8069 IP address blocks: 20.157.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:0d:7e:10:e3:07:78:b8:11:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=82408e3b-6a2a-45b7-a3cc-e7eb62c60f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:af:be:c2:57:69:05:4b:89:a7:d9:41:64:bd: 33:11:16:44:82:81:1b:e9:c0:fa:10:70:2f:c6:83: 10:91:6f:e6:ce:dd:e7:63:2c:b7:0e:05:6a:1d:35: ad:bd:92:14:66:92:17:39:32:2b:1b:b8:b3:4a:f4: 44:4e:44:2c:91:a8:df:bc:25:65:9e:d3:9f:1c:d5: 06:08:47:ef:55:33:92:e1:02:a2:3c:18:4f:4b:7c: e1:41:87:fe:91:a0:d2:bb:21:60:ae:9f:5f:7f:ca: 29:dc:1e:1e:cf:47:96:e1:bc:a1:c5:aa:a3:1f:38: 33:3a:e2:c2:68:89:a2:10:a3:f2:85:ea:12:b1:39: fc:9b:ec:42:16:58:4e:3b:cf:1f:18:cd:6c:e4:b8: c5:52:8c:e1:b1:b1:55:9f:e5:c4:01:3d:17:f0:4f: 2b:15:f7:c6:ef:15:a4:cb:fa:cc:b5:50:d7:8d:6c: 95:3b:8f:86:9f:15:c6:3d:f9:98:ac:39:7c:7c:94: bd:79:ce:3d:61:79:f8:35:f0:fe:09:48:11:21:eb: 45:35:e3:16:5a:d0:78:57:04:72:7b:23:d7:75:63: 01:63:c2:b1:42:2d:47:7b:9b:d4:b1:f7:aa:8e:9e: 09:ba:53:47:38:ff:80:35:0c:27:88:92:95:a3:f9: 97:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E0:35:F2:2A:C8:57:2C:25:3A:41:EA:7B:94:BF:2D:15:8D:63:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/99262335-e4d0-30ea-8231-d57c9635e705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d4:73:9f:d0:8d:74:73:f2:c0:40:27:cb:69:4b:ac:7d:92: d2:d3:1a:ef:f8:c2:54:6d:db:f9:75:49:7d:83:f4:08:29:a1: 12:c8:8a:7d:c3:9c:2f:84:05:4e:0a:51:0b:6a:2f:6d:82:ae: ab:aa:23:f3:9f:bb:3d:2a:65:ac:ec:ce:f5:f1:88:ed:bb:de: 63:fd:ae:b0:04:b0:1c:c5:c9:76:5a:0a:b0:5c:57:24:cf:e5: a0:91:e3:c7:01:cf:e3:6d:50:c1:55:72:96:1a:a7:8d:e2:0f: 7e:7e:17:e6:1f:88:43:de:40:5e:34:72:f8:79:a7:52:83:1e: 41:4a:0d:64:a0:79:0f:3e:fd:ba:32:4b:35:eb:fc:cc:dc:b6: f9:eb:b2:e8:47:77:c9:39:47:95:89:4c:62:5f:ba:b4:7c:23: 57:84:da:e3:60:34:dd:23:47:72:5e:e6:fb:74:ee:0a:7b:d4: b7:32:11:ea:f9:aa:c2:60:9e:e6:11:a7:bd:7f:81:17:c6:50: 2e:84:ae:a3:b7:c9:7e:6e:a4:93:97:7e:7d:e6:62:3e:d2:03: 78:c7:32:ce:73:2d:26:5e:c5:e9:3c:46:64:29:cd:c2:3d:c3: 7a:c9:ea:79:27:82:91:c7:12:5f:a9:33:17:7f:4d:b7:ef:ad: fa:54:8b:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8A1+EOMHeLgRHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk ODI0MDhlM2ItNmEyYS00NWI3LWEzY2MtZTdlYjYyYzYwZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq++wldpBUuJp9lBZL0zERZEgoEb6cD6EHAv xoMQkW/mzt3nYyy3DgVqHTWtvZIUZpIXOTIrG7izSvRETkQskajfvCVlntOfHNUG CEfvVTOS4QKiPBhPS3zhQYf+kaDSuyFgrp9ff8op3B4ez0eW4byhxaqjHzgzOuLC aImiEKPyheoSsTn8m+xCFlhOO88fGM1s5LjFUozhsbFVn+XEAT0X8E8rFffG7xWk y/rMtVDXjWyVO4+GnxXGPfmYrDl8fJS9ec49YXn4NfD+CUgRIetFNeMWWtB4VwRy eyPXdWMBY8KxQi1He5vUsfeqjp4JulNHOP+ANQwniJKVo/mX6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODgNfIqyFcsJTpB6nuUvy0VjWOJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTkyNjIzMzUtZTRkMC0z MGVhLTgyMzEtZDU3Yzk2MzVlNzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3Uc5/QjXRz8sBAJ8tpS6x9ktLTGu/4wlRt2/l1SX2D9AgpoRLIin3D nC+EBU4KUQtqL22CrquqI/Ofuz0qZazszvXxiO273mP9rrAEsBzFyXZaCrBcVyTP 5aCR48cBz+NtUMFVcpYap43iD35+F+YfiEPeQF40cvh5p1KDHkFKDWSgeQ8+/boy SzXr/MzctvnrsuhHd8k5R5WJTGJfurR8I1eE2uNgNN0jR3Je5vt07gp71LcyEer5 qsJgnuYRp71/gRfGUC6ErqO3yX5upJOXfn3mYj7SA3jHMs5zLSZexek8RmQpzcI9 w3rJ6nkngpHHEl+pMxd/TbfvrfpUiwg= -----END CERTIFICATE-----Generated at Wed May 13 11:40:34 2026 by rpki-client