$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/87256a49-d859-3f01-b5d7-f9504390e1bb.roa File: 87256a49-d859-3f01-b5d7-f9504390e1bb.roa (raw, json) Hash identifier: TmB6E9bpSCVDbvijOMXsLthfBOFAuffeBHVfjCoWSzI= Subject key identifier: F3:18:5A:D7:D3:81:94:87:93:FD:45:55:54:43:30:86:38:15:CF:A0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DF4DB408969B1AF12A7C07680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/87256a49-d859-3f01-b5d7-f9504390e1bb.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:40:89:69:b1:af:12:a7:c0:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=5bc4675a-d717-4552-92f7-b0e4cb74d155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:92:db:4c:9a:7a:41:3e:48:03:6e:57:c2: 61:e1:14:cc:9c:62:bf:c2:f8:01:29:f0:fb:7b:36: c1:58:2c:f3:d4:e8:74:88:19:f8:09:7a:d3:d1:36: 3e:94:2d:da:c2:0f:76:73:95:66:1f:47:ac:dd:5f: e3:42:4d:b0:fb:3d:c9:93:80:72:b6:b6:39:c9:b1: 18:a6:8d:e0:47:34:ee:39:e8:8e:e4:49:51:ea:1c: f7:fe:38:1a:44:b5:7f:9d:e5:34:d5:aa:8c:e7:6c: 80:19:e8:98:6c:8f:a6:e8:e6:dd:70:6b:27:ed:08: f3:de:f4:f4:00:2e:31:55:26:3a:2d:9d:6d:fa:73: 8e:da:4b:cd:33:5e:d3:19:a2:15:b6:8f:de:58:e1: 20:d5:4c:8a:0a:56:4a:a3:27:7b:1a:39:ab:20:43: 54:a0:44:f7:5c:ac:ac:43:93:74:73:cd:eb:22:68: d9:13:51:af:83:51:f3:3a:8e:29:31:f3:83:e0:5e: ca:87:ab:cc:45:66:61:47:07:20:66:36:72:2c:47: c6:38:a3:43:27:9e:bc:27:be:3b:a7:11:04:55:e8: 42:14:41:0d:e1:ea:72:d2:91:26:ab:45:25:36:31: 50:ed:12:cb:92:90:eb:11:b6:2d:55:dc:f3:94:84: 9b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:18:5A:D7:D3:81:94:87:93:FD:45:55:54:43:30:86:38:15:CF:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/87256a49-d859-3f01-b5d7-f9504390e1bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:5a:97:71:0a:ca:7f:1b:49:c6:fa:09:95:81:ae:6c:66:a4: 3f:56:c2:38:52:26:e7:18:f0:9d:59:ae:bc:b6:13:ed:2d:11: 84:9b:2f:9c:10:53:19:06:75:38:4f:1a:b1:f9:7a:da:01:ca: f0:cd:22:2a:c7:8d:f4:b4:fa:87:96:90:4b:7f:0e:90:20:43: 09:bc:0f:3f:37:28:db:8a:f6:d6:f5:77:6e:1e:ba:ec:2a:e0: 5a:5d:cd:81:1a:84:41:b5:2e:e3:32:b8:45:7c:1d:2d:82:aa: 99:90:32:14:af:85:a4:c0:df:4f:94:50:10:35:c5:ce:7e:be: fc:50:85:d8:56:d0:fa:4e:54:98:f5:01:e5:7f:01:ae:5a:63: ab:03:31:38:4b:47:0c:49:3e:1b:74:61:54:13:f1:a7:45:bb: 54:e8:ce:d3:24:b4:21:1a:22:8d:b7:9c:8e:c4:59:80:84:5d: 54:ae:06:8f:51:13:a0:6a:e9:f1:f7:9d:0e:ad:1e:41:60:7a: ee:0d:70:aa:e7:ba:ae:cb:77:32:d2:61:c6:49:ec:53:12:36: 89:ed:69:a5:bf:85:99:56:cc:ea:41:f4:f1:3a:36:37:9b:62: 2f:9d:90:79:99:c4:01:86:e8:02:3c:aa:52:f9:3c:cd:9a:0a: 5e:1c:22:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3020CJabGvEqfAdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk NWJjNDY3NWEtZDcxNy00NTUyLTkyZjctYjBlNGNiNzRkMTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaWS20yaekE+SANuV8Jh4RTMnGK/wvgBKfD7 ezbBWCzz1Oh0iBn4CXrT0TY+lC3awg92c5VmH0es3V/jQk2w+z3Jk4BytrY5ybEY po3gRzTuOeiO5ElR6hz3/jgaRLV/neU01aqM52yAGeiYbI+m6ObdcGsn7Qjz3vT0 AC4xVSY6LZ1t+nOO2kvNM17TGaIVto/eWOEg1UyKClZKoyd7GjmrIENUoET3XKys Q5N0c83rImjZE1Gvg1HzOo4pMfOD4F7Kh6vMRWZhRwcgZjZyLEfGOKNDJ568J747 pxEEVehCFEEN4epy0pEmq0UlNjFQ7RLLkpDrEbYtVdzzlISbIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMYWtfTgZSHk/1FVVRDMIY4Fc+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODcyNTZhNDktZDg1OS0z ZjAxLWI1ZDctZjk1MDQzOTBlMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJluMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVal3EKyn8bScb6CZWBrmxmpD9WwjhSJucY8J1Zrry2E+0tEYSbL5wQ UxkGdThPGrH5etoByvDNIirHjfS0+oeWkEt/DpAgQwm8Dz83KNuK9tb1d24euuwq 4FpdzYEahEG1LuMyuEV8HS2CqpmQMhSvhaTA30+UUBA1xc5+vvxQhdhW0PpOVJj1 AeV/Aa5aY6sDMThLRwxJPht0YVQT8adFu1ToztMktCEaIo23nI7EWYCEXVSuBo9R E6Bq6fH3nQ6tHkFgeu4NcKrnuq7LdzLSYcZJ7FMSNontaaW/hZlWzOpB9PE6Njeb Yi+dkHmZxAGG6AI8qlL5PM2aCl4cItA= -----END CERTIFICATE-----Generated at Sat Jun 6 14:47:59 2026 by rpki-client