$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/31070cfa-eefe-3512-a2fa-aaeba7433178.roa File: 31070cfa-eefe-3512-a2fa-aaeba7433178.roa (raw, json) Hash identifier: sxhqZakPf8wrp7Lc+3hWKMVzQ51YQIjQf9SFE0fpaiw= Subject key identifier: 2B:D7:E6:53:E1:D3:D0:05:EC:EE:AC:AB:5B:14:6E:F6:93:88:15:08 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DF4DB85C450EE4CE4BFEF8E00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/31070cfa-eefe-3512-a2fa-aaeba7433178.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:85:c4:50:ee:4c:e4:bf:ef:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=aa179afc-a962-43b4-8b04-aff5fe7a08cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:84:d1:21:bf:d6:93:c7:da:45:47:af:88:5e: d0:39:7b:44:01:12:d2:0f:5f:ea:fa:6a:43:ec:40: 25:e7:7f:9c:8e:b6:5f:ea:7d:e3:20:77:9c:0d:a7: 2f:5b:1f:3d:11:a7:9e:b1:6e:76:ba:f7:63:54:89: 48:ac:81:76:8d:42:3e:1d:dc:10:85:91:b2:ff:7b: a7:06:11:67:ef:35:d6:29:4d:d8:6f:45:0e:51:93: 66:5d:23:59:99:e1:c3:39:bf:eb:e0:f2:89:cf:e0: dd:b5:f4:89:d1:12:dd:79:11:b5:5e:a4:e7:b8:ee: c3:ba:cf:4a:fd:af:8d:1f:44:2d:94:00:ab:a5:ce: da:32:bb:c2:e9:f9:11:50:86:d2:85:57:b5:55:77: a8:d5:0d:9b:33:d8:b5:3e:ac:1a:21:2b:be:3d:8c: 00:4e:6a:85:94:7f:e1:e2:30:62:4a:b6:15:c6:71: 50:0a:13:b9:61:f1:ad:51:c6:43:68:54:27:8e:88: 84:e5:1d:24:6a:0e:00:7e:37:d1:61:e8:23:00:8f: 5a:27:8d:37:1b:51:6e:6b:37:9d:48:f4:4b:61:88: 61:5e:13:5b:a9:39:2b:fc:ba:0f:c3:38:8b:da:03: e7:62:c5:29:f5:33:a0:14:1e:62:a9:3c:26:94:dd: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D7:E6:53:E1:D3:D0:05:EC:EE:AC:AB:5B:14:6E:F6:93:88:15:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/31070cfa-eefe-3512-a2fa-aaeba7433178.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:81:b8:e6:61:57:bb:ec:57:b3:d6:55:12:63:e1:ce:6d:d6: 19:e3:2e:d5:45:b9:a7:b5:ce:be:19:75:af:a0:5d:cb:8c:9f: c1:08:da:bc:74:ce:84:d3:29:ae:61:e2:4d:f2:a1:e1:d4:d3: 30:2f:30:ce:38:0a:81:a3:a4:93:80:34:d1:86:d6:8e:82:41: 06:42:37:56:b9:67:cd:91:be:b4:d5:e7:68:50:94:8c:2c:92: 7f:05:94:36:44:2c:0f:d1:f6:9e:56:0b:5a:2c:de:57:5a:e5: 6b:d5:85:8a:c8:e2:64:de:dc:9b:af:49:78:56:6d:57:26:2e: a0:b2:67:20:5d:fd:e2:cd:d4:48:b1:49:82:13:5e:d4:fd:ec: 03:d7:8c:15:2f:ef:2a:a1:4d:ad:4a:6f:e4:6b:78:b5:92:e1: 36:b2:2e:05:f3:b3:a3:32:82:d5:8e:38:09:01:f2:25:78:b9: b5:0f:24:5e:e5:3f:44:3a:05:77:9b:8d:df:39:f0:da:e8:86: a5:4f:56:e8:9c:09:4d:c2:bc:c2:b3:36:56:5f:fb:50:ba:9d: 0b:c2:71:ac:d9:45:39:46:24:94:4c:fe:6f:4d:8f:3d:87:bd: d9:a3:03:b0:21:d3:93:23:e4:88:98:eb:aa:52:3c:72:30:c4: 0e:66:c5:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3024XEUO5M5L/vjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk YWExNzlhZmMtYTk2Mi00M2I0LThiMDQtYWZmNWZlN2EwOGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4TRIb/Wk8faRUeviF7QOXtEARLSD1/q+mpD 7EAl53+cjrZf6n3jIHecDacvWx89EaeesW52uvdjVIlIrIF2jUI+HdwQhZGy/3un BhFn7zXWKU3Yb0UOUZNmXSNZmeHDOb/r4PKJz+DdtfSJ0RLdeRG1XqTnuO7Dus9K /a+NH0QtlACrpc7aMrvC6fkRUIbShVe1VXeo1Q2bM9i1PqwaISu+PYwATmqFlH/h 4jBiSrYVxnFQChO5YfGtUcZDaFQnjoiE5R0kag4AfjfRYegjAI9aJ403G1Fuazed SPRLYYhhXhNbqTkr/LoPwziL2gPnYsUp9TOgFB5iqTwmlN3+LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvX5lPh09AF7O6sq1sUbvaTiBUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzEwNzBjZmEtZWVmZS0z NTEyLWEyZmEtYWFlYmE3NDMzMTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICBuOZhV7vsV7PWVRJj4c5t1hnjLtVFuae1zr4Zda+gXcuMn8EI2rx0 zoTTKa5h4k3yoeHU0zAvMM44CoGjpJOANNGG1o6CQQZCN1a5Z82RvrTV52hQlIws kn8FlDZELA/R9p5WC1os3lda5WvVhYrI4mTe3JuvSXhWbVcmLqCyZyBd/eLN1Eix SYITXtT97APXjBUv7yqhTa1Kb+RreLWS4TayLgXzs6MygtWOOAkB8iV4ubUPJF7l P0Q6BXebjd858NrohqVPVuicCU3CvMKzNlZf+1C6nQvCcazZRTlGJJRM/m9Njz2H vdmjA7Ah05Mj5IiY66pSPHIwxA5mxY4= -----END CERTIFICATE-----Generated at Sat Jun 6 14:44:58 2026 by rpki-client