$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b57f4240-51b4-387a-a937-eb616049d478.roa File: b57f4240-51b4-387a-a937-eb616049d478.roa (raw, json) Hash identifier: 0j/T030DY8SHCxx8iW+jExVDAhV3CNlrS20T2Tm6kLY= Subject key identifier: A1:4C:97:98:A0:F9:DB:E7:C8:77:01:B2:45:2F:2C:24:C7:66:C0:82 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DA6B0311D0EAEE9AC587C1080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b57f4240-51b4-387a-a937-eb616049d478.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:31:1d:0e:ae:e9:ac:58:7c:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=7faf78fa-e2de-459a-8d4a-6b6955d4d2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:de:ba:83:19:84:f6:bd:c9:b6:5d:20:6d: d0:eb:14:c4:4a:4f:d9:cd:66:90:32:95:b4:95:2a: 3d:3a:af:53:72:c4:54:9f:75:3e:d3:30:ec:83:01: df:e2:fb:d0:de:86:a7:81:17:e1:60:fa:d8:ba:2c: b1:93:42:54:40:72:07:93:81:8b:03:57:eb:b6:54: 76:63:06:95:4c:4e:25:1d:0b:66:17:4b:6a:79:f0: 06:94:c5:0d:3d:d7:7b:a6:d9:72:62:b1:6d:41:a6: 68:7a:89:57:64:b1:08:4f:51:c1:74:11:17:13:84: 1d:f6:e3:51:77:9a:24:bb:19:b0:dc:7c:6b:ca:5a: 5d:55:bc:63:c5:2c:4f:b0:c7:df:1a:51:a2:41:4a: e0:00:1b:6b:25:f5:32:e4:25:44:13:8f:f9:b2:ae: 16:c6:9d:1a:3f:c3:bd:2f:4f:0b:9c:51:7b:37:3a: b3:cd:a0:88:ac:95:13:e4:69:9e:da:12:bc:96:cb: 40:88:b1:31:3d:10:8a:e0:73:6d:d2:38:4c:c8:69: d5:e1:49:4e:c8:0d:26:a1:6a:7c:65:2e:c4:f5:ee: f3:18:0d:e4:18:73:ce:8e:8a:34:17:55:93:30:45: f8:35:c9:df:b8:8e:f6:1f:38:6f:44:f6:85:64:18: 02:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4C:97:98:A0:F9:DB:E7:C8:77:01:B2:45:2F:2C:24:C7:66:C0:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b57f4240-51b4-387a-a937-eb616049d478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:d9:1c:42:cb:67:51:9a:8d:5a:85:eb:ba:8c:0a:cf:3b:99: 71:e5:d3:0b:3c:d9:cb:3a:3f:80:f1:bc:8e:89:87:74:3f:53: df:68:1d:52:f5:54:65:80:64:c1:a4:30:08:8a:38:27:d2:fb: 0c:38:1e:9f:ac:78:8c:b9:83:1c:81:fc:5d:5c:bc:19:4c:17: 4c:74:9c:b3:4d:f6:ad:55:a4:de:a4:5c:45:c7:bc:de:a3:5f: 87:c2:93:81:d2:c4:68:66:ba:fe:c5:25:5e:35:3f:40:5b:06: d9:07:be:0c:2c:a5:6c:f8:3a:8f:7c:73:13:7f:0b:a0:23:ae: ba:e0:98:f5:2e:25:20:6c:96:c0:8e:05:22:25:29:ce:a8:7e: d5:bd:00:79:8c:97:1b:5f:05:a5:b1:90:61:0a:81:fa:33:7c: e5:f4:af:52:25:bb:b4:ee:0b:fa:1e:10:ec:2c:81:61:1b:07: 8e:f1:e6:32:83:de:c3:a0:45:31:c2:d0:0d:ec:d2:b9:7c:63: ec:7a:0f:17:91:af:bb:82:90:4e:19:65:59:a3:4d:68:e2:58: e6:73:76:05:31:54:69:1b:fa:ca:dd:74:34:2d:91:02:0d:d5: 0b:37:66:70:5d:dd:41:c2:9e:fb:1a:8e:60:35:4f:5e:81:af: 09:71:c4:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msDEdDq7prFh8EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk N2ZhZjc4ZmEtZTJkZS00NTlhLThkNGEtNmI2OTU1ZDRkMmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRjeuoMZhPa9ybZdIG3Q6xTESk/ZzWaQMpW0 lSo9Oq9TcsRUn3U+0zDsgwHf4vvQ3oangRfhYPrYuiyxk0JUQHIHk4GLA1frtlR2 YwaVTE4lHQtmF0tqefAGlMUNPdd7ptlyYrFtQaZoeolXZLEIT1HBdBEXE4Qd9uNR d5okuxmw3HxrylpdVbxjxSxPsMffGlGiQUrgABtrJfUy5CVEE4/5sq4Wxp0aP8O9 L08LnFF7NzqzzaCIrJUT5Gme2hK8lstAiLExPRCK4HNt0jhMyGnV4UlOyA0moWp8 ZS7E9e7zGA3kGHPOjoo0F1WTMEX4NcnfuI72HzhvRPaFZBgCBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFMl5ig+dvnyHcBskUvLCTHZsCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjU3ZjQyNDAtNTFiNC0z ODdhLWE5MzctZWI2MTYwNDlkNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErZHELLZ1GajVqF67qMCs87mXHl0ws82cs6P4DxvI6Jh3Q/U99oHVL1 VGWAZMGkMAiKOCfS+ww4Hp+seIy5gxyB/F1cvBlMF0x0nLNN9q1VpN6kXEXHvN6j X4fCk4HSxGhmuv7FJV41P0BbBtkHvgwspWz4Oo98cxN/C6AjrrrgmPUuJSBslsCO BSIlKc6oftW9AHmMlxtfBaWxkGEKgfozfOX0r1Ilu7TuC/oeEOwsgWEbB47x5jKD 3sOgRTHC0A3s0rl8Y+x6DxeRr7uCkE4ZZVmjTWjiWOZzdgUxVGkb+srddDQtkQIN 1Qs3ZnBd3UHCnvsajmA1T16BrwlxxEo= -----END CERTIFICATE-----Generated at Wed May 13 15:34:27 2026 by rpki-client