$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4858d17-c134-330d-a2d8-fc8645dbe828.roa File: a4858d17-c134-330d-a2d8-fc8645dbe828.roa (raw, json) Hash identifier: heSHo+yRrguM2tpJ5lY0z6t0FZq0Lip0+PRl3rHa2Zk= Subject key identifier: E0:94:2A:F7:BD:65:09:62:2B:E9:C3:0F:AC:5B:3A:D6:06:0F:E4:DE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D651521766808B877A0893080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4858d17-c134-330d-a2d8-fc8645dbe828.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 8069 IP address blocks: 20.153.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:21:76:68:08:b8:77:a0:89:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=aaeb7589-7d06-4297-bce0-92c6d8ad5ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:66:31:4d:50:b8:ff:bf:00:9b:53:4e:41: 55:93:6d:09:67:9d:9a:bb:67:94:b9:ff:f1:e3:71: ce:7e:dc:9d:c7:92:d8:67:cb:4c:33:1a:6d:80:a7: 19:7b:0f:39:2c:fd:a5:0b:01:c3:8f:be:da:76:1b: ac:8d:3a:ad:6c:f8:ff:c8:47:83:f6:b8:ff:b4:60: 9f:70:d1:06:db:55:dc:d2:7a:3f:28:cf:66:bb:80: 69:0b:a0:28:5c:23:e3:30:67:d5:01:ce:4e:2c:a0: de:ec:dd:90:d6:37:67:1c:af:93:d3:f0:db:60:9b: f2:08:a0:a0:9a:e2:bc:6e:3c:c8:16:5e:d9:d2:d9: 87:1a:08:4a:82:42:d7:72:8c:67:77:5c:b3:cd:91: cf:68:7b:72:7c:4e:7d:b3:ce:3a:6a:c2:83:09:1b: 10:a9:7d:f0:95:23:73:7c:c1:7a:57:09:da:99:a4: 7f:9f:0c:5c:88:f3:41:c6:8d:44:e4:8d:86:13:76: a2:3b:82:4a:76:e8:cc:44:ee:ee:3a:85:d0:e5:ac: e3:62:83:9b:91:af:38:a3:8b:76:fd:1a:63:54:98: 63:b8:19:69:7c:13:21:78:1d:3a:01:7e:4e:27:fa: 8e:87:99:17:09:38:8b:89:3a:88:dd:22:de:89:45: 18:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:94:2A:F7:BD:65:09:62:2B:E9:C3:0F:AC:5B:3A:D6:06:0F:E4:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4858d17-c134-330d-a2d8-fc8645dbe828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:7e:b3:2f:5f:19:c3:0c:46:ae:72:fb:98:29:00:e7:51:c1: c4:13:a3:2b:4d:4e:99:d5:47:59:83:c4:d5:25:f4:27:84:a5: ce:f0:c1:d2:e8:04:a2:32:64:69:45:dc:b6:89:1c:a3:02:b7: a4:11:97:1d:8c:c5:54:88:5d:8b:bd:16:26:15:27:0c:60:26: c2:22:a1:69:c5:87:1f:c0:e0:2d:0d:c5:0b:7d:a6:d1:90:f6: 2f:bc:b4:cd:87:12:c9:be:03:56:eb:a1:ae:5b:b9:f1:70:6a: 6c:99:9f:aa:24:22:2b:28:42:69:0c:4c:f5:3a:19:ab:2b:4a: a6:32:f8:47:cc:ad:f2:b1:1e:e4:d2:30:27:ce:59:4e:5e:91: d3:06:88:6c:d7:25:01:1f:0e:50:ab:aa:8a:57:f9:d7:7a:4e: 78:f3:cd:91:49:a4:ce:4c:a7:a9:fb:42:eb:b3:99:e9:11:43: 4c:9d:95:1d:8d:a0:4e:0f:ff:84:8b:b3:cb:e5:bf:21:17:c0: c6:29:54:47:0b:5a:95:af:92:f5:52:be:be:11:45:c7:1f:08: 8e:12:72:12:8d:d2:c5:09:47:52:2a:69:55:aa:6a:36:46:d4: c3:3f:6f:63:19:c8:88:fb:41:b9:46:25:c0:96:27:86:ce:39: 08:a1:07:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFSF2aAi4d6CJMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk YWFlYjc1ODktN2QwNi00Mjk3LWJjZTAtOTJjNmQ4YWQ1ZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8dmMU1QuP+/AJtTTkFVk20JZ52au2eUuf/x 43HOftydx5LYZ8tMMxptgKcZew85LP2lCwHDj77adhusjTqtbPj/yEeD9rj/tGCf cNEG21Xc0no/KM9mu4BpC6AoXCPjMGfVAc5OLKDe7N2Q1jdnHK+T0/DbYJvyCKCg muK8bjzIFl7Z0tmHGghKgkLXcoxnd1yzzZHPaHtyfE59s846asKDCRsQqX3wlSNz fMF6VwnamaR/nwxciPNBxo1E5I2GE3aiO4JKdujMRO7uOoXQ5azjYoObka84o4t2 /RpjVJhjuBlpfBMheB06AX5OJ/qOh5kXCTiLiTqI3SLeiUUYuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCUKve9ZQliK+nDD6xbOtYGD+TeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTQ4NThkMTctYzEzNC0z MzBkLWEyZDgtZmM4NjQ1ZGJlODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIF+sy9fGcMMRq5y+5gpAOdRwcQToytNTpnVR1mDxNUl9CeEpc7wwdLo BKIyZGlF3LaJHKMCt6QRlx2MxVSIXYu9FiYVJwxgJsIioWnFhx/A4C0NxQt9ptGQ 9i+8tM2HEsm+A1broa5bufFwamyZn6okIisoQmkMTPU6GasrSqYy+EfMrfKxHuTS MCfOWU5ekdMGiGzXJQEfDlCrqopX+dd6TnjzzZFJpM5Mp6n7QuuzmekRQ0ydlR2N oE4P/4SLs8vlvyEXwMYpVEcLWpWvkvVSvr4RRccfCI4SchKN0sUJR1IqaVWqajZG 1MM/b2MZyIj7QblGJcCWJ4bOOQihB44= -----END CERTIFICATE-----Generated at Fri Apr 17 23:51:03 2026 by rpki-client