$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54e90b43-8f5f-3692-a164-491370e9f425.roa File: 54e90b43-8f5f-3692-a164-491370e9f425.roa (raw, json) Hash identifier: ChvAvxyYWhUCWOXI7g38LmZobJhxKQ/C71WJBAMvYDM= Subject key identifier: 02:5B:42:95:79:C0:0D:C2:36:C8:C2:E3:4E:0E:01:36:6C:C9:BD:27 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DF4DB56B306655C0E7BDEEF80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54e90b43-8f5f-3692-a164-491370e9f425.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:56:b3:06:65:5c:0e:7b:de:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=1b35fead-c528-4f30-b6b5-a64b3c252e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b2:fd:9e:3a:4a:dd:20:d3:c5:bd:11:d8:4b: c5:7f:9b:3b:a1:6b:e7:da:c7:01:ea:d5:0a:23:4f: e4:69:81:ba:ac:4d:f3:0b:a9:36:70:54:3f:c4:72: 84:c1:b1:15:7f:b9:14:a7:fc:b0:70:33:1c:0e:f9: 08:5b:93:b5:fe:06:d7:54:dd:5d:5c:7d:c6:0e:75: 06:3d:09:56:36:1f:9d:8e:8d:60:bc:ed:67:f6:d5: 72:ab:4e:8a:bf:a1:ca:a5:1b:5e:9e:b8:22:d5:25: a3:25:6f:b7:5d:f8:3d:72:9f:61:be:ac:cd:c2:bf: aa:c0:05:15:e5:8a:55:01:28:40:e1:b3:2f:c6:cb: cd:31:bb:c1:5f:a2:aa:f5:37:74:09:e8:c9:85:18: b7:f4:4d:cc:15:18:50:5b:7c:41:30:93:51:d4:db: 6f:18:cb:16:22:97:d5:12:84:1e:91:ac:31:25:eb: ed:83:7b:66:4b:85:d5:9e:2a:ce:b4:2b:e6:c6:f0: f9:91:c0:09:dd:d8:92:d7:09:9a:b2:ae:14:73:81: 97:24:3c:82:ae:f7:91:01:77:f4:59:e5:ff:4e:5c: fa:a7:a3:c8:ae:8a:1d:04:e6:4d:ab:38:36:23:d9: 51:62:c3:42:bf:6f:36:15:f2:65:80:fd:ca:48:15: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5B:42:95:79:C0:0D:C2:36:C8:C2:E3:4E:0E:01:36:6C:C9:BD:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54e90b43-8f5f-3692-a164-491370e9f425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:53:3d:ac:0b:99:57:53:49:9c:36:f0:42:7d:36:7b:29:90: 66:37:45:13:03:62:38:f5:81:82:6a:cf:d2:62:87:39:98:b1: cf:67:2c:98:9e:d6:8a:20:1e:6d:09:06:cc:01:5c:98:8e:ce: 8e:3e:83:c2:37:9e:49:7a:3d:7a:e8:e6:f3:ea:1d:b5:d7:65: ea:44:55:1b:86:c1:14:e3:69:ce:c9:53:59:2d:62:a2:79:d0: 8d:9e:a3:7a:6f:58:57:28:6c:8a:fe:45:85:73:53:a3:4c:f7: 7c:5f:41:01:40:dd:12:16:a8:8c:05:e0:ac:1e:89:4d:bd:57: 62:9c:2a:46:2d:2c:be:f6:7c:4a:6e:ad:12:c3:82:64:0a:3b: db:ef:80:e1:4b:42:f7:cc:e4:65:18:e2:10:08:b0:74:ac:21: 01:c7:d9:78:83:48:e7:d6:33:ac:25:3b:be:e6:e4:fd:b4:79: 46:30:52:c8:43:0e:d0:68:7d:12:e1:cc:51:71:69:5c:d6:71: 0b:e0:0a:54:9e:a4:00:09:82:e3:03:5d:ff:65:b0:55:ec:5f: c9:b3:37:3f:06:d0:a1:21:d8:8b:35:f8:6c:59:2b:98:be:cc: fe:b5:c3:92:4c:87:94:9e:ed:b6:e7:87:c6:c0:42:f5:b6:a9: a8:7d:48:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3021azBmVcDnve74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk MWIzNWZlYWQtYzUyOC00ZjMwLWI2YjUtYTY0YjNjMjUyZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7L9njpK3SDTxb0R2EvFf5s7oWvn2scB6tUK I0/kaYG6rE3zC6k2cFQ/xHKEwbEVf7kUp/ywcDMcDvkIW5O1/gbXVN1dXH3GDnUG PQlWNh+djo1gvO1n9tVyq06Kv6HKpRtenrgi1SWjJW+3Xfg9cp9hvqzNwr+qwAUV 5YpVAShA4bMvxsvNMbvBX6Kq9Td0CejJhRi39E3MFRhQW3xBMJNR1NtvGMsWIpfV EoQekawxJevtg3tmS4XVnirOtCvmxvD5kcAJ3diS1wmasq4Uc4GXJDyCrveRAXf0 WeX/Tlz6p6PIroodBOZNqzg2I9lRYsNCv282FfJlgP3KSBUf8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJbQpV5wA3CNsjC404OATZsyb0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTRlOTBiNDMtOGY1Zi0z NjkyLWExNjQtNDkxMzcwZTlmNDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtTPawLmVdTSZw28EJ9NnspkGY3RRMDYjj1gYJqz9JihzmYsc9nLJie 1oogHm0JBswBXJiOzo4+g8I3nkl6PXro5vPqHbXXZepEVRuGwRTjac7JU1ktYqJ5 0I2eo3pvWFcobIr+RYVzU6NM93xfQQFA3RIWqIwF4KweiU29V2KcKkYtLL72fEpu rRLDgmQKO9vvgOFLQvfM5GUY4hAIsHSsIQHH2XiDSOfWM6wlO77m5P20eUYwUshD DtBofRLhzFFxaVzWcQvgClSepAAJguMDXf9lsFXsX8mzNz8G0KEh2Is1+GxZK5i+ zP61w5JMh5Se7bbnh8bAQvW2qah9SHs= -----END CERTIFICATE-----Generated at Sat Jun 6 14:47:42 2026 by rpki-client