$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/641b1418-84c2-3695-9fd6-f5fd7caaa574.roa File: 641b1418-84c2-3695-9fd6-f5fd7caaa574.roa (raw, json) Hash identifier: z9sLKqNR1rlVvCxNBC8SB75BTixSHJQP5roUBs9Buig= Subject key identifier: 02:9A:CD:8A:93:E3:42:D1:70:09:D5:FC:4C:07:69:FB:8F:AB:56:33 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DF4DB9156506FAAAD28113BBF Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/641b1418-84c2-3695-9fd6-f5fd7caaa574.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:91:56:50:6f:aa:ad:28:11:3b:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=67c8e0b5-4324-443c-bc65-63767b12f417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bf:b6:1f:c2:75:22:5b:f3:4e:d9:c9:b6:7b: 51:54:84:5f:35:ba:31:7b:95:a3:a3:cd:2f:56:f1: e1:85:55:3e:6f:7e:a4:66:2f:43:3f:d4:a1:a2:41: 7d:4e:31:a8:c0:fd:e0:51:c8:7c:c8:f7:89:81:f4: f8:d0:96:ce:67:26:67:1d:85:4d:34:45:d8:68:26: cc:bd:4b:7f:b4:be:a0:31:e1:3e:88:69:b7:f2:a9: 3e:04:b1:4f:fc:66:a5:b0:0f:13:84:d9:5c:0d:26: b2:e2:6d:a2:29:fb:e1:7e:e8:48:d1:53:59:f0:78: 1d:1f:82:22:9b:51:91:d5:94:ab:76:02:40:15:6c: 61:4d:02:f2:53:4a:7f:af:6b:f6:db:13:c2:cb:0e: 0f:6b:9f:d5:32:b0:8f:63:4f:74:6e:26:36:c2:38: ab:0f:cb:15:d0:cb:4a:2d:1a:ec:e9:96:60:7e:08: d2:14:bb:2b:82:47:9d:08:3d:e6:41:4c:7e:1e:bf: 3e:9b:a7:87:04:2a:b1:50:cd:d5:6c:73:11:0f:e2: 22:fc:47:5e:11:08:17:db:8e:e2:4b:41:18:c6:27: b0:22:c6:6d:b6:70:0d:2a:a3:8a:4e:c0:6c:d9:c6: 53:1f:ce:f1:7f:5a:7e:91:56:37:38:be:ea:5b:96: ca:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9A:CD:8A:93:E3:42:D1:70:09:D5:FC:4C:07:69:FB:8F:AB:56:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/641b1418-84c2-3695-9fd6-f5fd7caaa574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:46:de:a5:0e:40:90:7d:a9:56:fb:7d:20:8f:1a:c6:3c:85: 4e:5f:36:f9:65:1d:6c:d9:e0:1c:d9:e6:57:7a:cb:fd:be:69: fe:cf:28:bd:f1:c4:ca:5c:eb:49:00:86:cb:2f:1d:55:96:78: 27:32:35:31:97:db:67:b0:f3:8b:a4:df:14:ab:dd:aa:9e:bf: 79:b4:79:93:83:3a:a4:07:f4:5a:33:2f:fd:55:fb:66:16:01: fe:57:83:76:9e:65:ab:87:5b:df:4b:35:99:d3:43:26:31:2b: 0c:3c:12:4c:e9:fb:48:ea:e4:3e:b8:09:b0:e2:ae:ad:40:20: e2:f4:01:25:ca:37:f4:70:44:7d:b7:14:85:6f:07:27:9e:b4: b8:40:33:d5:bc:28:7d:43:0c:31:8e:4a:32:1e:ba:27:8a:a2: fc:1e:5a:df:7d:0a:ca:75:5e:7e:9f:19:13:39:67:b3:31:d0: d9:ab:90:fa:b5:ac:af:2a:2d:8a:2c:f5:2b:b0:01:30:3b:b7: 0d:a4:e1:0a:31:62:38:c5:ca:77:b6:db:00:ac:98:60:8c:be: 76:9d:ff:94:52:f6:f3:b6:fa:45:0c:bd:65:fc:8a:5a:32:4d: 34:ae:eb:22:c4:80:45:61:85:ca:e7:45:d4:64:a0:35:7c:bc: 48:15:0b:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3025FWUG+qrSgRO78wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk NjdjOGUwYjUtNDMyNC00NDNjLWJjNjUtNjM3NjdiMTJmNDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr+2H8J1IlvzTtnJtntRVIRfNboxe5Wjo80v VvHhhVU+b36kZi9DP9ShokF9TjGowP3gUch8yPeJgfT40JbOZyZnHYVNNEXYaCbM vUt/tL6gMeE+iGm38qk+BLFP/GalsA8ThNlcDSay4m2iKfvhfuhI0VNZ8HgdH4Ii m1GR1ZSrdgJAFWxhTQLyU0p/r2v22xPCyw4Pa5/VMrCPY090biY2wjirD8sV0MtK LRrs6ZZgfgjSFLsrgkedCD3mQUx+Hr8+m6eHBCqxUM3VbHMRD+Ii/EdeEQgX247i S0EYxiewIsZttnANKqOKTsBs2cZTH87xf1p+kVY3OL7qW5bKEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKazYqT40LRcAnV/EwHafuPq1YzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjQxYjE0MTgtODRjMi0z Njk1LTlmZDYtZjVmZDdjYWFhNTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1G3qUOQJB9qVb7fSCPGsY8hU5fNvllHWzZ4BzZ5ld6y/2+af7PKL3x xMpc60kAhssvHVWWeCcyNTGX22ew84uk3xSr3aqev3m0eZODOqQH9FozL/1V+2YW Af5Xg3aeZauHW99LNZnTQyYxKww8Ekzp+0jq5D64CbDirq1AIOL0ASXKN/RwRH23 FIVvByeetLhAM9W8KH1DDDGOSjIeuieKovweWt99Csp1Xn6fGRM5Z7Mx0NmrkPq1 rK8qLYos9SuwATA7tw2k4QoxYjjFyne22wCsmGCMvnad/5RS9vO2+kUMvWX8iloy TTSu6yLEgEVhhcrnRdRkoDV8vEgVC1c= -----END CERTIFICATE-----Generated at Sat Jun 6 14:47:42 2026 by rpki-client