$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a83b2356-d220-35a8-ac0c-e8f69259c4e3.roa File: a83b2356-d220-35a8-ac0c-e8f69259c4e3.roa (raw, json) Hash identifier: QUPxQfqNYHjydeiyFAmy/2KrFi67U1mpXpSAOeV119k= Subject key identifier: 29:BD:67:C0:FC:85:8F:90:26:EC:D2:B0:2F:8A:AE:0B:C7:5C:58:B9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DB7702801C80F96A449BE0000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a83b2356-d220-35a8-ac0c-e8f69259c4e3.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 8069 IP address blocks: 20.153.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:28:01:c8:0f:96:a4:49:be:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=e328c33d-15d2-45d8-80e9-eaf0716125ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c3:10:d5:c4:95:5e:38:20:2d:02:87:35:c4: e9:f7:52:bf:33:f5:5f:c3:df:0d:4d:c8:0c:01:f8: 78:cb:26:7b:ba:b4:09:d4:f1:35:7c:a7:d6:b3:ed: 55:c6:de:15:fc:32:b6:f5:4b:59:7e:22:2c:77:21: f2:da:8d:97:41:46:cb:f0:d6:9a:b3:a3:9c:54:60: 96:19:10:89:93:fa:75:e1:39:47:f2:8b:78:6b:8b: 54:30:68:05:36:f6:84:4d:be:58:12:4e:98:b0:71: 0b:52:c2:2a:98:82:46:04:b1:57:d0:85:77:24:07: 3d:2c:35:d4:28:6e:46:ad:17:6e:fc:7c:26:e0:3f: e1:8e:f3:34:30:3c:3f:f4:81:30:d1:29:61:46:92: 01:fb:10:f8:2f:70:b5:bc:2a:d2:f6:45:57:99:c2: 14:b2:0b:a5:cd:7c:47:2e:0b:2e:3a:56:85:cb:26: fb:c2:89:f2:d9:aa:cc:62:09:54:9a:07:31:ef:85: d2:98:9d:87:86:57:76:c6:1a:6a:4c:bf:d9:66:5e: a5:c7:d9:1d:52:e0:1a:f3:7d:08:0d:b5:82:70:08: dd:30:37:84:ee:84:d8:06:d2:32:30:36:71:ed:75: 26:44:a1:34:2e:e4:0d:1f:00:05:f9:91:75:2c:87: 95:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BD:67:C0:FC:85:8F:90:26:EC:D2:B0:2F:8A:AE:0B:C7:5C:58:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a83b2356-d220-35a8-ac0c-e8f69259c4e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f1:eb:3c:bd:d2:59:5a:e9:28:d8:ba:e9:0a:eb:a5:cf:2b: fb:74:53:98:db:84:3f:10:31:97:9c:68:a8:2c:ca:8d:5c:4c: 04:08:ab:d0:69:8a:90:93:c9:71:da:58:dc:54:16:06:9a:48: c0:27:95:7a:4a:ec:f4:78:17:dd:bb:b0:bb:ce:79:de:82:f5: e4:57:5f:6b:39:16:8d:b5:fb:45:c2:c3:d2:31:67:ab:4f:39: 76:df:41:9a:a6:55:23:56:a9:2b:2a:a4:53:2f:ca:7e:4b:d3: 7b:43:48:f9:48:c5:43:d4:7d:81:21:4c:68:4f:73:33:e4:26: ed:4a:4c:49:26:2f:9b:16:ca:fc:49:4b:40:71:ea:76:ea:06: 85:8f:15:2c:84:f1:18:7c:97:42:1d:e6:8c:04:cd:91:6b:9d: db:be:f1:92:45:ba:b1:8c:2e:11:e6:5c:79:11:48:a4:06:c7: 88:fd:a5:5f:2b:95:eb:29:88:7e:1f:73:47:0d:57:f4:8a:6c: 2c:57:5b:1c:69:cd:bf:c4:88:4a:19:c8:0e:95:96:73:a6:df: 01:16:99:0a:c2:97:a1:29:6d:a9:64:72:ec:bf:5f:e2:7b:e7: e3:a2:20:4a:17:c4:7f:79:d7:ff:e7:83:7e:3e:94:d2:50:21: 7d:14:ba:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cCgByA+WpEm+AAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk ZTMyOGMzM2QtMTVkMi00NWQ4LTgwZTktZWFmMDcxNjEyNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssMQ1cSVXjggLQKHNcTp91K/M/Vfw98NTcgM Afh4yyZ7urQJ1PE1fKfWs+1Vxt4V/DK29UtZfiIsdyHy2o2XQUbL8Naas6OcVGCW GRCJk/p14TlH8ot4a4tUMGgFNvaETb5YEk6YsHELUsIqmIJGBLFX0IV3JAc9LDXU KG5GrRdu/Hwm4D/hjvM0MDw/9IEw0SlhRpIB+xD4L3C1vCrS9kVXmcIUsgulzXxH LgsuOlaFyyb7wony2arMYglUmgcx74XSmJ2Hhld2xhpqTL/ZZl6lx9kdUuAa830I DbWCcAjdMDeE7oTYBtIyMDZx7XUmRKE0LuQNHwAF+ZF1LIeVkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCm9Z8D8hY+QJuzSsC+KrgvHXFi5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTgzYjIzNTYtZDIyMC0z NWE4LWFjMGMtZThmNjkyNTljNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnx6zy90lla6SjYuukK66XPK/t0U5jbhD8QMZecaKgsyo1cTAQIq9Bp ipCTyXHaWNxUFgaaSMAnlXpK7PR4F927sLvOed6C9eRXX2s5Fo21+0XCw9IxZ6tP OXbfQZqmVSNWqSsqpFMvyn5L03tDSPlIxUPUfYEhTGhPczPkJu1KTEkmL5sWyvxJ S0Bx6nbqBoWPFSyE8Rh8l0Id5owEzZFrndu+8ZJFurGMLhHmXHkRSKQGx4j9pV8r lespiH4fc0cNV/SKbCxXWxxpzb/EiEoZyA6VlnOm3wEWmQrCl6Epbalkcuy/X+J7 5+OiIEoXxH951//ng34+lNJQIX0Uun0= -----END CERTIFICATE-----Generated at Wed May 13 08:57:52 2026 by rpki-client