$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a75ef9ac-039c-3b4c-827a-083b988f4873.roa File: a75ef9ac-039c-3b4c-827a-083b988f4873.roa (raw, json) Hash identifier: 4D+MKax+BqWysF/aJMfopvxQI/gSgbbWmpFUUO7bL5M= Subject key identifier: E7:B6:EE:37:E2:1F:B9:A4:1E:64:66:05:EE:4D:1D:B2:17:79:79:18 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA6B031D19006587684B27538 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a75ef9ac-039c-3b4c-827a-083b988f4873.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:31:d1:90:06:58:76:84:b2:75:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=ccf742f2-520b-4840-8cb3-e4942b9b10dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:e6:18:be:e3:2e:8b:35:4b:53:f8:d1:c1: d0:42:8a:a7:43:fa:63:1a:c7:32:40:87:a4:3f:3e: 24:41:eb:94:69:9f:03:95:d7:2d:ca:c3:87:b9:35: 24:16:9f:65:13:75:bc:bc:9d:f8:19:25:3b:2d:ef: e5:07:49:75:f6:9e:a5:31:73:5e:27:fb:04:1a:26: df:5a:e9:e0:dd:cd:b5:bb:82:d4:4f:6a:e0:85:a4: 97:f1:df:54:fa:1c:34:76:fd:78:1d:e1:ce:2b:76: 90:fc:0d:d2:f1:e2:27:52:fb:39:de:0e:0a:14:7b: 42:8a:ab:1e:98:11:97:d3:f3:42:f5:c3:32:eb:52: 45:cf:fa:4e:bb:b4:d2:e1:d1:76:8c:df:4a:38:7f: 6f:ed:2a:53:7d:78:6b:21:a4:07:f7:cc:42:a5:83: 46:1e:77:fe:c1:19:42:01:c6:4d:5a:da:df:5a:19: 54:fe:3b:a6:de:8d:7d:d7:35:08:4e:a1:d4:ac:3a: 38:2e:79:2f:7a:a7:34:64:36:13:19:76:1d:8f:21: 5b:5c:32:c1:42:c8:2f:51:f4:b6:57:82:52:6d:0b: 7d:cb:ec:87:84:32:40:ec:5c:7a:be:42:ce:6e:33: 1f:7f:2a:61:7d:af:2f:6f:ca:03:89:60:4d:6d:b0: ec:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B6:EE:37:E2:1F:B9:A4:1E:64:66:05:EE:4D:1D:B2:17:79:79:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a75ef9ac-039c-3b4c-827a-083b988f4873.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d9:25:30:09:df:c7:a0:1c:3c:27:f8:c8:af:89:46:80:34: 07:18:65:f3:9d:c3:d8:b9:0c:96:36:c8:c2:7e:a3:0d:31:d4: 1d:c7:e7:30:37:97:89:6a:e1:90:df:1f:0b:fa:62:b8:65:8d: a0:69:1a:21:83:2e:85:76:9f:58:83:79:95:21:4a:a8:7f:33: 06:bb:a3:de:63:8d:0b:0f:e1:b9:66:10:e1:93:0f:00:51:17: 04:24:8d:9c:c5:91:60:a4:e3:c8:68:74:ff:d8:a6:c7:11:97: 3e:72:a3:cf:93:0b:6e:50:16:5a:ea:bf:2e:38:50:07:4f:9f: aa:8a:1a:8e:b7:87:9b:9d:0e:9d:64:a3:ba:92:d8:bb:20:4f: 1d:e9:2b:d7:c3:8f:d9:81:ca:f9:f5:1a:fc:87:3d:ad:37:24: b6:c5:0b:75:fd:f3:26:eb:00:7d:c0:0b:22:52:9d:8a:b9:44: e7:1b:9d:73:30:1f:b3:4a:e2:76:12:0e:eb:c3:18:0d:ac:b0: 1b:3e:5d:5c:a9:39:42:5b:6f:73:59:20:7d:bf:a7:58:b7:f0: 63:c4:56:e1:f6:c5:77:cf:cc:0a:07:14:44:ba:1f:30:93:33: 5e:09:a5:cc:1b:94:53:b2:4c:9a:dc:1e:d7:ea:ef:3c:86:75: 0b:e0:13:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msDHRkAZYdoSydTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk Y2NmNzQyZjItNTIwYi00ODQwLThjYjMtZTQ5NDJiOWIxMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLDmGL7jLos1S1P40cHQQoqnQ/pjGscyQIek Pz4kQeuUaZ8DldctysOHuTUkFp9lE3W8vJ34GSU7Le/lB0l19p6lMXNeJ/sEGibf Wung3c21u4LUT2rghaSX8d9U+hw0dv14HeHOK3aQ/A3S8eInUvs53g4KFHtCiqse mBGX0/NC9cMy61JFz/pOu7TS4dF2jN9KOH9v7SpTfXhrIaQH98xCpYNGHnf+wRlC AcZNWtrfWhlU/jum3o191zUITqHUrDo4Lnkveqc0ZDYTGXYdjyFbXDLBQsgvUfS2 V4JSbQt9y+yHhDJA7Fx6vkLObjMffyphfa8vb8oDiWBNbbDsCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOe27jfiH7mkHmRmBe5NHbIXeXkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTc1ZWY5YWMtMDM5Yy0z YjRjLTgyN2EtMDgzYjk4OGY0ODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnZJTAJ38egHDwn+MiviUaANAcYZfOdw9i5DJY2yMJ+ow0x1B3H5zA3 l4lq4ZDfHwv6YrhljaBpGiGDLoV2n1iDeZUhSqh/Mwa7o95jjQsP4blmEOGTDwBR FwQkjZzFkWCk48hodP/YpscRlz5yo8+TC25QFlrqvy44UAdPn6qKGo63h5udDp1k o7qS2LsgTx3pK9fDj9mByvn1GvyHPa03JLbFC3X98ybrAH3ACyJSnYq5ROcbnXMw H7NK4nYSDuvDGA2ssBs+XVypOUJbb3NZIH2/p1i38GPEVuH2xXfPzAoHFES6HzCT M14JpcwblFOyTJrcHtfq7zyGdQvgE4Y= -----END CERTIFICATE-----Generated at Wed May 13 13:36:05 2026 by rpki-client