$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa File: b7b843e5-1b24-372c-a453-258435c10dbf.roa (raw, json) Hash identifier: jyCYPO01FUmIwZlbp9vqqpH1Hh2dOpMWpMDaZzVhPQU= Subject key identifier: 07:22:68:6C:21:02:41:77:24:A8:6D:DE:C8:A2:9F:2C:1B:24:C8:7D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DB7702B334CEDA31297C9C780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 8069 IP address blocks: 20.153.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:2b:33:4c:ed:a3:12:97:c9:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=0fdab92f-29aa-47e5-9fd3-a58769929448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ea:39:c8:1f:8e:1f:90:a6:0b:c6:46:34:90: d7:66:03:ff:fd:96:50:29:e1:ed:43:c4:14:19:c8: bd:2c:6f:a1:ad:87:7f:83:ba:46:ae:0d:08:26:d1: 26:3e:66:2a:07:bd:88:ad:a1:be:d9:6b:a0:50:b4: 76:65:2c:b4:db:5e:d4:06:05:ab:79:17:2b:7f:14: ba:97:37:ed:58:ad:2a:1b:5b:47:73:f9:e6:9a:17: 92:f6:d1:cb:73:ff:e9:9a:c0:cf:39:be:f1:3a:ee: d6:f7:99:72:24:58:af:86:64:3b:f2:f1:e1:8c:ff: 08:00:55:30:f3:54:57:dc:f4:da:ce:e1:ae:8b:7d: 99:2e:cd:e1:02:f6:4f:7c:9e:90:10:2a:b5:ce:35: 35:2d:2a:85:45:0c:7d:5f:cb:a1:eb:83:9d:58:1a: 1f:a5:76:6b:16:72:49:36:63:1e:62:bf:5e:de:e9: d6:31:34:41:9a:fd:2c:14:b4:07:20:d4:29:3b:83: dc:43:a4:2b:41:07:fd:9e:b1:58:e0:5a:d5:28:4d: 0a:0c:22:a1:da:c2:0a:a5:b1:81:bb:d1:64:ed:db: 2a:e3:f4:19:8c:a1:78:75:3d:85:78:1c:79:c0:c4: 71:c2:d2:23:42:16:fc:bf:5b:8c:e5:97:3d:5d:58: 2c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:22:68:6C:21:02:41:77:24:A8:6D:DE:C8:A2:9F:2C:1B:24:C8:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:24:fc:f9:cf:95:33:7f:1d:0c:49:96:9c:53:20:9d:b1:46: fd:14:bc:be:0c:c7:b7:41:1e:63:76:3c:58:1d:23:fe:34:a7: 76:47:0d:c3:c2:25:2d:99:cb:7c:37:fe:95:f3:28:39:ea:05: 8e:19:87:f6:ab:e7:d0:2f:67:fe:09:2f:c9:c9:92:ef:38:be: 64:49:7a:3f:e6:87:aa:88:6f:17:ce:32:41:ed:54:d8:dd:d9: ee:51:5c:f9:ef:7c:be:7a:18:0c:24:5f:66:3d:b2:c4:f6:e4: db:0e:76:d7:7c:e5:c5:86:bc:21:25:b9:52:9b:85:4c:b6:e9: 00:4d:e3:b5:e9:ca:15:15:ac:2d:f4:01:30:a9:ef:98:ce:34: a6:68:51:ab:54:bc:a5:3e:b0:c7:94:1e:28:7c:c6:10:14:5e: 3a:a1:18:60:da:9b:87:9b:49:77:21:33:1f:a3:7f:b5:4d:7f: d6:cc:1a:58:b4:3a:42:0f:99:c0:a9:ed:bd:47:15:a5:ec:85: 92:9c:a7:1b:9c:7d:76:97:2d:df:80:75:c4:a1:6a:0f:b3:76: 77:ad:bc:8a:48:40:73:a6:ea:2b:3a:f0:6d:51:ae:c3:06:92: 79:7e:43:0b:46:fb:0f:43:7d:a2:1a:65:35:3f:75:ce:40:d7: 01:29:43:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cCszTO2jEpfJx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk MGZkYWI5MmYtMjlhYS00N2U1LTlmZDMtYTU4NzY5OTI5NDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOo5yB+OH5CmC8ZGNJDXZgP//ZZQKeHtQ8QU Gci9LG+hrYd/g7pGrg0IJtEmPmYqB72IraG+2WugULR2ZSy0217UBgWreRcrfxS6 lzftWK0qG1tHc/nmmheS9tHLc//pmsDPOb7xOu7W95lyJFivhmQ78vHhjP8IAFUw 81RX3PTazuGui32ZLs3hAvZPfJ6QECq1zjU1LSqFRQx9X8uh64OdWBofpXZrFnJJ NmMeYr9e3unWMTRBmv0sFLQHINQpO4PcQ6QrQQf9nrFY4FrVKE0KDCKh2sIKpbGB u9Fk7dsq4/QZjKF4dT2FeBx5wMRxwtIjQhb8v1uM5Zc9XVgsKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAciaGwhAkF3JKht3siinywbJMh9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjdiODQzZTUtMWIyNC0z NzJjLWE0NTMtMjU4NDM1YzEwZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgk/PnPlTN/HQxJlpxTIJ2xRv0UvL4Mx7dBHmN2PFgdI/40p3ZHDcPC JS2Zy3w3/pXzKDnqBY4Zh/ar59AvZ/4JL8nJku84vmRJej/mh6qIbxfOMkHtVNjd 2e5RXPnvfL56GAwkX2Y9ssT25NsOdtd85cWGvCEluVKbhUy26QBN47XpyhUVrC30 ATCp75jONKZoUatUvKU+sMeUHih8xhAUXjqhGGDam4ebSXchMx+jf7VNf9bMGli0 OkIPmcCp7b1HFaXshZKcpxucfXaXLd+AdcShag+zdnetvIpIQHOm6is68G1RrsMG knl+QwtG+w9DfaIaZTU/dc5A1wEpQ20= -----END CERTIFICATE-----Generated at Wed May 13 12:09:44 2026 by rpki-client