$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70d7d4f6-bf66-36b0-9c7f-d14083a36a2d.roa File: 70d7d4f6-bf66-36b0-9c7f-d14083a36a2d.roa (raw, json) Hash identifier: X4cqN+DxwPSBjb+h5tdDjBjZiBo6sDBZAmHPdTHzpmE= Subject key identifier: F2:16:65:07:21:F1:21:5C:80:3D:D4:7B:CD:8B:3B:A4:D3:68:60:53 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D6AAAA7304B1BB3CA824DD080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70d7d4f6-bf66-36b0-9c7f-d14083a36a2d.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 8069 IP address blocks: 20.153.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:a7:30:4b:1b:b3:ca:82:4d:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=f4a581b6-f772-4129-a456-8f635010e7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:68:bf:c1:1c:e9:ad:fd:df:72:c1:2f:84: 3a:44:83:4a:ef:1d:15:cf:e2:40:29:05:42:43:04: 2c:87:df:51:87:8b:33:61:b8:00:a8:63:b7:a6:cb: 7c:8f:6e:c1:77:ca:b9:5e:c1:d1:b7:9b:2e:42:14: 02:f3:28:ec:b3:f2:b9:0a:c2:5f:b0:36:41:fc:d9: 8a:95:33:2d:f5:b4:7e:b4:e8:07:b7:41:59:6b:df: fd:5d:4a:86:b1:04:8c:9c:98:9a:b5:fd:c5:7d:a3: 6a:43:5f:27:6e:23:c8:48:2c:97:0c:4c:44:23:00: d8:38:29:e4:08:c7:d6:e2:eb:33:e2:7a:8e:82:02: d0:6c:68:7a:6c:86:0e:27:87:54:e3:68:c2:0c:8b: 71:d2:35:21:69:ab:12:04:fd:57:d2:e1:e4:7e:1d: aa:32:bc:3f:74:ce:7c:ba:a7:bc:e8:09:f6:0c:2c: dc:cf:72:7a:ab:0b:e5:94:a2:ce:21:60:77:bc:06: fe:55:32:69:82:df:59:25:6d:33:89:80:02:c8:3c: 0d:0c:c6:d2:e3:c6:b9:a0:53:ba:6d:c1:28:03:a6: a2:f5:45:6d:e2:6e:66:f1:94:03:be:3c:d6:ea:f1: 02:99:3b:a2:97:ba:30:6b:99:44:3a:73:a9:c9:ed: 40:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:16:65:07:21:F1:21:5C:80:3D:D4:7B:CD:8B:3B:A4:D3:68:60:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70d7d4f6-bf66-36b0-9c7f-d14083a36a2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:40:5b:86:b5:31:99:e1:cc:81:d3:56:8d:e2:a3:24:ae:30: fb:da:ad:ec:a4:7a:6f:44:e3:bd:0e:bd:1d:21:34:b5:63:16: 11:e1:33:dd:6e:a2:3d:12:5f:01:6d:20:8e:65:79:76:8c:26: 39:d5:4e:ac:1f:ad:ea:f2:37:6a:12:fb:d8:ee:9d:5b:95:64: 3a:09:48:38:ab:e6:df:e4:61:1b:e7:4f:8d:b7:47:f0:d5:48: bb:81:85:fe:cf:64:dc:c8:16:a9:1b:4f:20:d7:af:96:5d:4a: 22:e9:4c:72:98:03:16:f2:d9:4f:48:6c:b8:05:82:7d:b6:b2: 10:6f:6f:bf:bf:0d:bd:19:f1:2e:a8:30:3d:41:a8:38:d6:27: ac:68:02:82:bf:f8:86:42:ed:f9:8c:8f:b1:3d:60:2b:33:67: 14:d3:63:f3:57:a2:09:60:3c:31:b2:5a:37:21:6e:0f:3b:ac: 6e:b4:c9:a0:6a:cb:76:d8:bc:4f:ee:5c:73:c0:09:e0:3c:60: 1a:23:2f:58:68:07:3c:3f:4f:9f:c0:b6:48:80:b0:9e:58:13: 3d:a6:35:ca:f4:5f:9b:b5:d2:a2:0a:8e:6a:e9:3d:52:10:9b: 3f:ac:06:d8:c6:2e:f1:ae:84:8e:85:e7:31:7e:62:71:c5:68: 62:85:c2:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqqcwSxuzyoJN0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ZjRhNTgxYjYtZjc3Mi00MTI5LWE0NTYtOGY2MzUwMTBlN2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6Bov8Ec6a3933LBL4Q6RINK7x0Vz+JAKQVC QwQsh99Rh4szYbgAqGO3pst8j27Bd8q5XsHRt5suQhQC8yjss/K5CsJfsDZB/NmK lTMt9bR+tOgHt0FZa9/9XUqGsQSMnJiatf3FfaNqQ18nbiPISCyXDExEIwDYOCnk CMfW4usz4nqOggLQbGh6bIYOJ4dU42jCDItx0jUhaasSBP1X0uHkfh2qMrw/dM58 uqe86An2DCzcz3J6qwvllKLOIWB3vAb+VTJpgt9ZJW0ziYACyDwNDMbS48a5oFO6 bcEoA6ai9UVt4m5m8ZQDvjzW6vECmTuil7owa5lEOnOpye1ADQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIWZQch8SFcgD3Ue82LO6TTaGBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzBkN2Q0ZjYtYmY2Ni0z NmIwLTljN2YtZDE0MDgzYTM2YTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANAW4a1MZnhzIHTVo3ioySuMPvareykem9E470OvR0hNLVjFhHhM91u oj0SXwFtII5leXaMJjnVTqwfreryN2oS+9junVuVZDoJSDir5t/kYRvnT423R/DV SLuBhf7PZNzIFqkbTyDXr5ZdSiLpTHKYAxby2U9IbLgFgn22shBvb7+/Db0Z8S6o MD1BqDjWJ6xoAoK/+IZC7fmMj7E9YCszZxTTY/NXoglgPDGyWjchbg87rG60yaBq y3bYvE/uXHPACeA8YBojL1hoBzw/T5/AtkiAsJ5YEz2mNcr0X5u10qIKjmrpPVIQ mz+sBtjGLvGuhI6F5zF+YnHFaGKFwmc= -----END CERTIFICATE-----Generated at Fri Apr 17 21:16:36 2026 by rpki-client