$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c3bdd1b3-ed51-3fa1-b161-38b41cadd900.roa File: c3bdd1b3-ed51-3fa1-b161-38b41cadd900.roa (raw, json) Hash identifier: v5AIM9IhMixaf0959xkZzFJ70Av2xuNIh/rD1dlxIwk= Subject key identifier: 4A:2A:B6:CB:B5:7C:3A:EF:0E:6F:99:E2:3A:E3:79:71:D8:D4:61:89 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D6AAAA73CC1EDAD935A57AD70 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c3bdd1b3-ed51-3fa1-b161-38b41cadd900.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 8069 IP address blocks: 20.153.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:a7:3c:c1:ed:ad:93:5a:57:ad:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=7cb9a043-824a-4c71-86b6-f2d979db0623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:18:30:fd:fe:8b:13:57:c3:2f:ea:5f:b1: df:8e:2d:c2:dc:15:f5:c1:09:be:4a:e3:cd:4c:50: da:44:3d:f6:83:44:9c:5d:56:d2:69:9f:07:ab:39: 6e:69:89:4b:40:09:2c:f3:84:e3:68:e8:75:ca:53: c2:76:c7:40:3f:7c:b9:62:61:66:f9:f9:60:59:bc: 17:2f:17:6e:0b:a4:7e:93:d4:bf:23:dc:ad:3e:0c: 31:07:d8:05:37:89:bc:77:dc:2f:fc:f3:1b:d4:f6: 35:77:75:f3:75:18:82:1c:67:40:46:0b:dc:d5:8a: a2:b0:e6:a8:72:47:e2:9a:d9:1b:aa:fc:1b:e7:32: e0:fd:52:da:ac:88:8d:3b:c8:51:25:25:e1:28:31: 95:6f:2f:c9:5d:9e:4e:a8:bc:b3:0f:61:6c:98:2b: a4:6e:6d:da:65:a6:84:8b:3e:d8:03:10:3b:ec:5b: 11:67:5d:af:c1:c2:de:c2:f9:09:78:b9:3e:59:85: d8:55:02:3f:e0:9b:86:f1:a3:6f:4c:11:7f:03:15: 82:af:80:3d:38:bd:6e:fe:8f:d6:97:29:75:12:f8: 61:79:bd:72:ab:70:6a:4d:22:2d:b2:b3:53:9d:9c: 84:5e:c8:da:80:1e:58:3f:b9:02:92:52:ae:36:0a: 55:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2A:B6:CB:B5:7C:3A:EF:0E:6F:99:E2:3A:E3:79:71:D8:D4:61:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c3bdd1b3-ed51-3fa1-b161-38b41cadd900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:fc:c5:bf:2d:39:75:d2:ec:e2:2b:f5:ed:6a:02:c7:9b:d2: c4:e7:6f:f9:a0:05:bd:02:b6:d2:cd:62:8a:47:81:d1:5d:6c: 2c:c5:74:91:f0:ca:54:cf:0b:11:27:f4:e8:02:0d:29:0f:2a: 8a:f1:99:1f:b5:98:2b:52:44:97:95:32:2b:68:b6:52:8c:cf: 60:93:9a:bb:ce:47:4b:c4:69:a2:6b:8f:65:37:ef:bc:4b:06: 21:e1:cd:9d:ec:d3:4e:ce:58:5a:4d:5e:f4:cc:ca:e7:6e:38: 56:5a:0f:77:0e:6e:a9:94:26:7b:4a:61:b4:01:17:ef:63:de: e3:c5:63:0e:02:ba:5b:59:7d:aa:cc:39:02:94:6b:32:7c:4c: 05:ff:86:ca:91:48:0e:ed:f7:89:d1:f0:ac:92:4f:04:13:18: 6e:5d:b0:56:c8:cc:cf:1c:52:b9:32:c6:97:df:a1:dd:26:63: 22:09:2f:b7:8b:c8:a8:2c:6a:c4:2a:43:b1:50:f1:77:72:fe: db:f0:1b:bf:d0:05:bc:62:52:9e:6b:39:58:7f:4d:70:22:2b: dc:39:76:8b:6b:34:10:7b:41:06:38:cc:fd:97:a8:4f:41:bd: 16:86:2d:82:e9:d2:44:78:75:4a:98:04:06:4e:13:29:ce:c2: 7c:d1:4b:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqqc8we2tk1pXrXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk N2NiOWEwNDMtODI0YS00YzcxLTg2YjYtZjJkOTc5ZGIwNjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEgYMP3+ixNXwy/qX7Hfji3C3BX1wQm+SuPN TFDaRD32g0ScXVbSaZ8HqzluaYlLQAks84TjaOh1ylPCdsdAP3y5YmFm+flgWbwX LxduC6R+k9S/I9ytPgwxB9gFN4m8d9wv/PMb1PY1d3XzdRiCHGdARgvc1YqisOao ckfimtkbqvwb5zLg/VLarIiNO8hRJSXhKDGVby/JXZ5OqLyzD2FsmCukbm3aZaaE iz7YAxA77FsRZ12vwcLewvkJeLk+WYXYVQI/4JuG8aNvTBF/AxWCr4A9OL1u/o/W lyl1Evhheb1yq3BqTSItsrNTnZyEXsjagB5YP7kCklKuNgpVSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoqtsu1fDrvDm+Z4jrjeXHY1GGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzNiZGQxYjMtZWQ1MS0z ZmExLWIxNjEtMzhiNDFjYWRkOTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIf8xb8tOXXS7OIr9e1qAseb0sTnb/mgBb0CttLNYopHgdFdbCzFdJHw ylTPCxEn9OgCDSkPKorxmR+1mCtSRJeVMitotlKMz2CTmrvOR0vEaaJrj2U377xL BiHhzZ3s007OWFpNXvTMyuduOFZaD3cObqmUJntKYbQBF+9j3uPFYw4CultZfarM OQKUazJ8TAX/hsqRSA7t94nR8KySTwQTGG5dsFbIzM8cUrkyxpffod0mYyIJL7eL yKgsasQqQ7FQ8Xdy/tvwG7/QBbxiUp5rOVh/TXAiK9w5dotrNBB7QQY4zP2XqE9B vRaGLYLp0kR4dUqYBAZOEynOwnzRS04= -----END CERTIFICATE-----Generated at Fri Apr 17 23:41:31 2026 by rpki-client