$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/22badc46-7f2c-3330-9dcd-30f3a1bd5152.roa File: 22badc46-7f2c-3330-9dcd-30f3a1bd5152.roa (raw, json) Hash identifier: sHj3zVUXcLQytEaJA5YnsAywNkwiwixRzaS940tLNhU= Subject key identifier: 35:80:6F:0A:11:0D:08:7F:73:D5:D5:61:A4:E0:D1:11:8F:A1:BF:48 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D60E50E0CEB6D10761FCECE00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/22badc46-7f2c-3330-9dcd-30f3a1bd5152.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.157.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:0e:0c:eb:6d:10:76:1f:ce:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=302bf33a-4d5a-4f90-ae00-5c376b88e17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fb:d6:49:f2:72:cf:6d:85:09:36:f8:cc:4e: fe:0d:53:1a:1c:02:e1:71:dc:88:ec:c0:63:e9:1b: fd:75:ee:eb:2d:a8:49:ca:af:68:cc:ea:a1:f5:f4: f0:47:5c:80:25:5b:09:8a:5b:39:37:2a:95:ae:b8: 57:ce:e9:74:5d:cb:14:30:76:05:40:83:01:10:22: f9:3f:e9:d5:d4:a1:a0:b2:bc:2d:cb:0a:80:f6:3b: 04:5e:c5:b4:4d:95:5e:22:26:2e:2c:d4:f2:fa:61: ac:c2:29:b0:6e:54:80:d0:0c:fe:dd:ec:8e:ff:ce: 08:c3:1c:ca:2d:d4:7a:9c:1b:f4:7e:7f:89:3b:f1: bf:47:3c:32:72:ff:8b:e8:24:52:fc:f5:3a:30:20: b2:d7:d5:6f:bc:3a:bc:6a:66:9d:c6:d2:ee:e4:77: 48:57:95:ba:68:a2:83:4a:19:ed:29:11:8c:00:38: 00:d7:54:db:88:a7:72:18:72:ff:ce:96:47:27:52: e6:f5:63:7a:f3:ae:55:e5:dd:91:a9:70:02:3d:f5: 99:18:b3:0a:2c:09:7a:4b:23:1b:89:63:11:10:e1: 67:80:91:24:4b:ef:24:40:21:0f:e0:ea:ab:98:b5: 1f:a0:f8:32:fc:8f:ae:6c:4c:f0:b1:1f:07:c5:09: 2c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:80:6F:0A:11:0D:08:7F:73:D5:D5:61:A4:E0:D1:11:8F:A1:BF:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/22badc46-7f2c-3330-9dcd-30f3a1bd5152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:6e:68:96:91:0a:39:98:8e:35:e9:9e:7c:48:a1:6b:40:c6: 32:09:c5:4d:11:81:c0:f7:7a:8d:a5:c3:cb:9b:10:9b:07:ee: 4a:6a:00:68:16:88:8f:a6:66:f0:98:34:4d:26:d0:18:c8:e9: cc:bd:62:19:6c:ee:19:ca:76:e2:76:6f:0e:61:60:18:84:e4: 4f:37:60:a5:50:c8:40:52:18:b9:e1:96:e5:ae:dc:37:77:34: a3:39:0b:1d:71:0e:eb:f7:5f:7c:75:51:c8:30:0d:a5:32:5c: 54:ac:11:a9:7c:3d:46:06:c3:c0:43:ee:67:13:5e:06:4e:1b: 3c:81:28:20:8c:b2:16:43:ed:b1:7e:b4:7a:ce:1d:da:55:1d: 1d:54:bf:c7:95:21:fa:c0:31:98:f3:4e:ce:e2:fc:a4:87:02: ca:21:64:80:47:67:29:3c:ee:54:54:aa:b2:2c:56:55:b7:40: d3:f5:a2:04:b7:94:6a:fd:14:f3:2d:10:13:40:8e:2c:49:bd: fe:cd:24:42:02:3b:fd:38:ce:51:37:bd:48:e5:de:6c:03:1b: f2:50:49:2f:db:d1:9e:ac:a3:6d:c4:3e:ec:2c:91:bc:9f:3c: a8:fb:bf:b4:35:db:a9:ea:99:b5:16:91:3a:55:82:a8:8c:27: d2:30:15:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Q4M620Qdh/OzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MzAyYmYzM2EtNGQ1YS00ZjkwLWFlMDAtNWMzNzZiODhlMTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/vWSfJyz22FCTb4zE7+DVMaHALhcdyI7MBj 6Rv9de7rLahJyq9ozOqh9fTwR1yAJVsJils5NyqVrrhXzul0XcsUMHYFQIMBECL5 P+nV1KGgsrwtywqA9jsEXsW0TZVeIiYuLNTy+mGswimwblSA0Az+3eyO/84IwxzK LdR6nBv0fn+JO/G/Rzwycv+L6CRS/PU6MCCy19VvvDq8amadxtLu5HdIV5W6aKKD ShntKRGMADgA11TbiKdyGHL/zpZHJ1Lm9WN6865V5d2RqXACPfWZGLMKLAl6SyMb iWMREOFngJEkS+8kQCEP4OqrmLUfoPgy/I+ubEzwsR8HxQksxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWAbwoRDQh/c9XVYaTg0RGPob9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjJiYWRjNDYtN2YyYy0z MzMwLTlkY2QtMzBmM2ExYmQ1MTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1uaJaRCjmYjjXpnnxIoWtAxjIJxU0RgcD3eo2lw8ubEJsH7kpqAGgW iI+mZvCYNE0m0BjI6cy9Yhls7hnKduJ2bw5hYBiE5E83YKVQyEBSGLnhluWu3Dd3 NKM5Cx1xDuv3X3x1UcgwDaUyXFSsEal8PUYGw8BD7mcTXgZOGzyBKCCMshZD7bF+ tHrOHdpVHR1Uv8eVIfrAMZjzTs7i/KSHAsohZIBHZyk87lRUqrIsVlW3QNP1ogS3 lGr9FPMtEBNAjixJvf7NJEICO/04zlE3vUjl3mwDG/JQSS/b0Z6so23EPuwskbyf PKj7v7Q126nqmbUWkTpVgqiMJ9IwFcM= -----END CERTIFICATE-----Generated at Fri Apr 17 21:16:08 2026 by rpki-client