$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b4dbd1cf-ce7a-344f-95d1-9d94f9ffaa21.roa File: b4dbd1cf-ce7a-344f-95d1-9d94f9ffaa21.roa (raw, json) Hash identifier: gTbp6ZNAie7pCURRkZongVA1uleh6ad7hC7QIiVUGGk= Subject key identifier: F7:B2:B4:8A:23:E0:31:BA:F2:A0:6F:43:F2:07:E2:AE:7F:BA:91:80 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DF4DB5844B5A9ABC23C925880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b4dbd1cf-ce7a-344f-95d1-9d94f9ffaa21.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.153.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:58:44:b5:a9:ab:c2:3c:92:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=952a03e0-e2bd-44f6-ab42-a284fd2e34d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bf:d1:4d:c3:ca:29:b4:33:93:bc:15:d8:f6: 94:da:e0:19:22:a9:14:48:a1:35:aa:f6:9e:f1:ec: bf:03:be:0c:85:0a:b5:2a:a6:1c:f7:72:a6:4b:8f: e8:62:b4:86:0e:ff:cd:8b:6a:b9:c6:eb:e8:d7:3b: 86:fe:db:cc:d9:6b:6e:54:9b:82:f1:3d:49:90:ad: 47:e0:fd:31:05:1b:9b:7a:30:c1:2d:80:84:fc:a8: 5f:42:e1:2f:a3:35:c6:05:57:bf:0d:e8:11:6a:b7: 10:eb:7b:cf:b0:87:6e:88:98:ff:f6:9a:06:d0:0a: d8:f0:ed:dd:c8:5d:39:56:67:9a:6b:3c:a6:09:59: 46:74:48:09:c8:4d:17:8e:d3:86:6f:2e:98:42:61: 1c:c9:46:e5:63:30:66:c7:16:f4:d8:77:bd:d5:f7: d7:f9:83:34:52:74:80:91:4e:03:95:d6:0d:ad:ed: 9b:30:6c:99:73:23:54:a7:15:87:14:2e:79:3a:b1: 46:6e:0d:ec:52:08:ee:66:6d:20:3d:dd:5f:5e:2b: be:99:9b:00:11:25:e3:40:82:7d:ed:67:f0:73:93: a8:a0:bc:59:d8:ad:3f:26:0f:d4:6e:93:a1:86:c6: 3c:e4:ac:fc:da:ad:26:1b:e8:93:f2:8d:44:66:85: 38:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B2:B4:8A:23:E0:31:BA:F2:A0:6F:43:F2:07:E2:AE:7F:BA:91:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b4dbd1cf-ce7a-344f-95d1-9d94f9ffaa21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:18:04:db:a0:af:a2:c9:56:88:87:10:42:c1:82:e5:a6:4c: 7e:5d:e4:60:71:eb:6a:f8:0c:76:8d:0a:de:53:da:0a:b7:db: 86:c2:c0:f7:a3:9f:77:a9:0f:a4:f2:43:a9:8b:69:b6:54:d3: 3e:10:f0:53:aa:08:8b:b4:97:b7:74:1c:04:2d:0e:f1:60:a6: cc:b9:86:7d:a6:89:5e:b4:c3:1d:ab:bb:9b:95:d4:8c:40:20: 29:37:03:2e:32:3a:6a:8d:c5:b5:7c:73:94:c5:77:e1:71:bc: a2:5c:66:8a:ff:a0:ce:58:ac:9d:9b:d3:f4:93:07:25:3d:e3: 35:76:08:01:c4:3d:3a:a2:77:bb:1b:e6:2a:31:d8:c1:77:ed: 94:4a:8e:bc:ea:53:e3:6a:6c:5b:c0:88:62:01:c6:de:17:02: 9d:af:1b:fc:68:47:3a:eb:6b:77:16:6f:4c:67:6c:18:5e:cf: 7c:34:be:73:de:ff:ab:5d:05:ec:64:06:6a:53:19:ec:d0:b0: 41:3c:0f:96:d8:aa:ae:27:ae:5a:be:2c:d9:c4:9d:e3:b4:59: 99:2c:80:e2:83:bd:16:eb:0d:15:8d:90:b9:3f:98:74:e2:42: 98:e6:38:af:ec:a9:25:fc:42:4c:d6:76:83:3e:a5:68:d2:d8: d4:a6:a5:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3021hEtamrwjySWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk OTUyYTAzZTAtZTJiZC00NGY2LWFiNDItYTI4NGZkMmUzNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb/RTcPKKbQzk7wV2PaU2uAZIqkUSKE1qvae 8ey/A74MhQq1KqYc93KmS4/oYrSGDv/Ni2q5xuvo1zuG/tvM2WtuVJuC8T1JkK1H 4P0xBRubejDBLYCE/KhfQuEvozXGBVe/DegRarcQ63vPsIduiJj/9poG0ArY8O3d yF05VmeaazymCVlGdEgJyE0XjtOGby6YQmEcyUblYzBmxxb02He91ffX+YM0UnSA kU4DldYNre2bMGyZcyNUpxWHFC55OrFGbg3sUgjuZm0gPd1fXiu+mZsAESXjQIJ9 7Wfwc5OooLxZ2K0/Jg/UbpOhhsY85Kz82q0mG+iT8o1EZoU4+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeytIoj4DG68qBvQ/IH4q5/upGAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjRkYmQxY2YtY2U3YS0z NDRmLTk1ZDEtOWQ5NGY5ZmZhYTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUYBNugr6LJVoiHEELBguWmTH5d5GBx62r4DHaNCt5T2gq324bCwPej n3epD6TyQ6mLabZU0z4Q8FOqCIu0l7d0HAQtDvFgpsy5hn2miV60wx2ru5uV1IxA ICk3Ay4yOmqNxbV8c5TFd+FxvKJcZor/oM5YrJ2b0/STByU94zV2CAHEPTqid7sb 5iox2MF37ZRKjrzqU+NqbFvAiGIBxt4XAp2vG/xoRzrra3cWb0xnbBhez3w0vnPe /6tdBexkBmpTGezQsEE8D5bYqq4nrlq+LNnEneO0WZksgOKDvRbrDRWNkLk/mHTi QpjmOK/sqSX8QkzWdoM+pWjS2NSmpQs= -----END CERTIFICATE-----Generated at Sat Jun 6 14:44:50 2026 by rpki-client