$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16593986-f3e0-304f-86f1-14b7a09e9c5c.roa File: 16593986-f3e0-304f-86f1-14b7a09e9c5c.roa (raw, json) Hash identifier: nxB5LrFSPtHq0kZAKXm1pBnffS8H1398jLUZP6Rhzxw= Subject key identifier: E8:98:34:66:CF:D8:0A:D7:8B:D7:AF:49:3D:7E:86:58:95:36:55:F0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB6B7241ABCFFBECBEFB0B580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16593986-f3e0-304f-86f1-14b7a09e9c5c.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.153.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:24:1a:bc:ff:be:cb:ef:b0:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=dc9d7f50-f440-4299-8b43-37692b411826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e6:81:02:30:f5:35:b1:3e:80:2e:55:b5:28: 71:ac:0c:bc:58:5b:0e:23:0f:bb:14:2f:cd:f6:d1: 49:a3:a0:f8:fc:43:a5:12:52:93:ff:5e:e7:89:53: 76:bb:b5:5f:63:3b:4b:01:da:2e:1b:40:ae:47:71: 85:8a:5b:a4:14:48:5b:81:fd:1c:79:a1:9b:10:d1: 3d:b2:4a:2a:b8:37:7b:92:21:72:af:15:74:82:5c: 41:33:37:65:cd:b4:e2:44:40:01:11:5b:e2:bd:01: 2d:3f:7a:68:20:1b:7c:2e:b0:b9:c3:f2:8b:6e:98: 24:d9:64:b8:c9:ea:d0:8f:7a:72:39:71:52:f3:fd: 1c:73:3a:df:00:37:2e:c5:2e:c9:15:bc:9b:7e:77: f8:0b:22:7f:a7:6b:b1:6f:89:25:a4:5f:02:cb:50: ef:be:5c:76:ab:f5:ef:2a:48:d7:a9:54:5f:b1:1c: fc:ad:86:f6:e9:2e:81:94:87:a5:53:30:81:b1:26: 06:a2:01:41:c4:5c:70:62:46:94:3e:7e:55:e3:df: db:2c:88:0e:ee:3e:bb:46:07:f2:17:31:f3:e1:08: f9:5e:bd:b7:8b:71:9c:3c:26:2e:17:5c:f3:e8:6a: 7b:48:3f:be:3b:7a:7b:b6:e8:70:a9:18:1c:9b:f9: 9d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:98:34:66:CF:D8:0A:D7:8B:D7:AF:49:3D:7E:86:58:95:36:55:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16593986-f3e0-304f-86f1-14b7a09e9c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:dd:ad:ac:05:ea:39:63:a4:9b:e4:8d:15:5a:22:23:0c:b6: 05:a3:d1:3e:6d:74:33:29:74:e1:66:01:c4:e0:31:de:99:c4: 86:a1:3d:5a:da:f5:38:34:00:e0:0e:1c:8e:1b:71:ed:08:6f: 9e:09:ef:ce:6a:81:15:ae:ad:d0:1d:ad:ad:69:59:4e:69:7c: 3a:b0:e9:1a:d7:b1:a4:4a:e7:71:1d:44:7a:64:51:30:84:bb: da:85:f2:7f:4c:34:ee:d8:c3:b5:b9:79:56:8d:74:e8:0d:d6: 5c:25:0b:3f:19:5b:26:fa:c6:45:59:7e:84:ee:e3:18:fe:38: 56:80:d4:fa:92:f1:aa:6c:69:5e:ab:d4:6b:02:3c:f0:cc:73: 33:c5:d5:d9:c7:b6:07:52:8c:b5:4c:27:99:2d:b5:a7:89:cc: 9c:a6:d7:2b:cc:ff:8d:d2:f1:48:0f:4c:d4:88:b2:9e:62:02: ca:e4:de:0e:cc:5a:ba:42:5f:1f:b0:57:13:f4:01:97:71:7c: e5:05:e9:b1:d3:57:27:ae:c5:fa:9e:12:e8:93:3e:d9:f2:63: 96:80:24:eb:26:9f:f0:ac:c5:ae:73:0d:9e:20:ce:e2:7a:50: 42:0d:60:81:f7:c2:20:02:28:f1:ac:1d:67:f3:d3:f9:46:07: f7:8e:c8:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tyQavP++y++wtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZGM5ZDdmNTAtZjQ0MC00Mjk5LThiNDMtMzc2OTJiNDExODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeaBAjD1NbE+gC5VtShxrAy8WFsOIw+7FC/N 9tFJo6D4/EOlElKT/17niVN2u7VfYztLAdouG0CuR3GFilukFEhbgf0ceaGbENE9 skoquDd7kiFyrxV0glxBMzdlzbTiREABEVvivQEtP3poIBt8LrC5w/KLbpgk2WS4 yerQj3pyOXFS8/0cczrfADcuxS7JFbybfnf4CyJ/p2uxb4klpF8Cy1Dvvlx2q/Xv KkjXqVRfsRz8rYb26S6BlIelUzCBsSYGogFBxFxwYkaUPn5V49/bLIgO7j67Rgfy FzHz4Qj5Xr23i3GcPCYuF1zz6Gp7SD++O3p7tuhwqRgcm/mdIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiYNGbP2ArXi9evST1+hliVNlXwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTY1OTM5ODYtZjNlMC0z MDRmLTg2ZjEtMTRiN2EwOWU5YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACndrawF6jljpJvkjRVaIiMMtgWj0T5tdDMpdOFmAcTgMd6ZxIahPVra 9Tg0AOAOHI4bce0Ib54J785qgRWurdAdra1pWU5pfDqw6RrXsaRK53EdRHpkUTCE u9qF8n9MNO7Yw7W5eVaNdOgN1lwlCz8ZWyb6xkVZfoTu4xj+OFaA1PqS8apsaV6r 1GsCPPDMczPF1dnHtgdSjLVMJ5kttaeJzJym1yvM/43S8UgPTNSIsp5iAsrk3g7M WrpCXx+wVxP0AZdxfOUF6bHTVyeuxfqeEuiTPtnyY5aAJOsmn/Csxa5zDZ4gzuJ6 UEINYIH3wiACKPGsHWfz0/lGB/eOyKQ= -----END CERTIFICATE-----Generated at Mon Mar 2 16:50:24 2026 by rpki-client