$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1ce6e781-5c0d-36ba-814c-679f5a41ae06.roa File: 1ce6e781-5c0d-36ba-814c-679f5a41ae06.roa (raw, json) Hash identifier: PjErRAkRQRgkiEo98JwzvfHeNNZwWhnVshJAEKXVyyI= Subject key identifier: F9:FE:EA:5A:4F:4E:C5:D9:BD:B1:DF:38:AF:7F:AA:8D:C2:9E:9E:88 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC3473E3C784801270E492080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1ce6e781-5c0d-36ba-814c-679f5a41ae06.roa Signing time: Thu 05 Feb 2026 14:00:40 +0000 ROA not before: Thu 05 Feb 2026 14:00:40 +0000 ROA not after: Wed 06 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c3:47:3e:3c:78:48:01:27:0e:49:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 5 14:00:40 2026 GMT Not After : May 6 13:00:40 2026 GMT Subject: CN=73ffa516-6b29-4386-a276-33427a659148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:ba:cb:bc:43:6c:8d:bc:2d:b2:cc:d6:c3: a1:07:10:57:8b:30:a7:9a:ce:4d:d2:cb:e2:24:5f: b1:ee:3e:4e:c3:32:be:80:a3:65:ad:7e:e4:25:05: 5e:34:72:24:26:e6:66:3d:70:c6:c0:1e:7c:bd:78: d6:82:40:79:82:85:be:76:36:9e:1b:50:53:77:6d: b9:bc:19:e0:34:2a:af:9f:d3:a9:40:9d:7d:4c:58: b7:34:f0:4b:0b:14:6a:6d:db:94:99:55:da:50:c0: 8d:c8:68:1c:b6:7b:74:b5:21:d9:8e:49:fb:e1:2c: 2a:8e:d4:29:95:8c:8d:a5:6a:39:c9:ad:64:5a:47: 24:a7:09:7a:bf:bb:8c:d5:3c:3c:65:84:29:d6:30: 7e:99:9b:b4:5c:02:90:a7:e5:48:d3:d6:f3:0d:63: a7:c6:6f:22:58:a1:6e:27:9a:2b:24:1a:70:e6:d6: 84:12:fe:fb:96:6d:16:1c:8b:89:be:0e:6e:da:c6: b0:99:9f:ed:3c:e1:bc:38:a2:95:c2:9f:e7:ae:c8: f5:c7:55:b6:89:0f:52:6d:37:3f:5d:db:08:de:0b: 2e:0d:f6:9c:2a:0c:1a:36:cf:21:cc:ab:27:a9:e1: f3:eb:9c:0e:9d:8e:00:97:de:a7:b6:67:fe:a1:c0: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FE:EA:5A:4F:4E:C5:D9:BD:B1:DF:38:AF:7F:AA:8D:C2:9E:9E:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1ce6e781-5c0d-36ba-814c-679f5a41ae06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:96:92:bd:c5:ea:0a:c1:2f:dd:28:97:0e:c2:7b:b9:cd:04: 68:36:48:bf:d4:32:2c:c3:46:ec:6e:96:05:1c:d0:44:b6:67: 95:4e:3a:21:86:e8:fb:ab:bd:3d:82:62:71:80:9b:4a:33:12: d8:54:5e:67:1e:2f:74:13:74:49:24:fa:5c:47:0c:be:0c:4d: 6a:02:12:82:d4:02:2c:49:48:7d:76:51:3d:ef:d9:5e:f1:8b: 87:57:d7:30:a3:17:7b:51:82:35:94:a3:f8:0f:20:28:72:35: 6a:d1:77:8b:cf:50:db:2b:23:3e:68:51:34:76:f5:46:d9:bc: 14:64:b3:68:da:44:94:c1:6f:a0:d1:bf:af:2d:b6:e4:eb:99: 2a:c6:b6:f7:8a:00:53:c8:a1:84:f3:40:36:0b:94:46:06:be: 0f:f5:30:46:a7:3d:4f:b9:6c:83:17:f8:c8:30:7f:29:12:56: 7a:0a:26:71:71:28:63:7c:8b:b1:cd:3f:71:59:c4:44:17:8d: 62:21:0c:07:c3:7b:fa:27:fd:40:65:5b:bf:e2:8c:35:e8:02: 56:0f:e3:8c:55:f7:0e:e6:1a:ca:37:01:09:8c:d5:3b:b6:de: 87:01:bc:22:84:7b:1a:ea:6b:28:d4:d7:b5:68:38:07:af:49: e4:af:56:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzDRz48eEgBJw5JIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk NzNmZmE1MTYtNmIyOS00Mzg2LWEyNzYtMzM0MjdhNjU5MTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrO6y7xDbI28LbLM1sOhBxBXizCnms5N0svi JF+x7j5OwzK+gKNlrX7kJQVeNHIkJuZmPXDGwB58vXjWgkB5goW+djaeG1BTd225 vBngNCqvn9OpQJ19TFi3NPBLCxRqbduUmVXaUMCNyGgctnt0tSHZjkn74SwqjtQp lYyNpWo5ya1kWkckpwl6v7uM1Tw8ZYQp1jB+mZu0XAKQp+VI09bzDWOnxm8iWKFu J5orJBpw5taEEv77lm0WHIuJvg5u2sawmZ/tPOG8OKKVwp/nrsj1x1W2iQ9SbTc/ XdsI3gsuDfacKgwaNs8hzKsnqeHz65wOnY4Al96ntmf+ocBjUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPn+6lpPTsXZvbHfOK9/qo3Cnp6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMWNlNmU3ODEtNWMwZC0z NmJhLTgxNGMtNjc5ZjVhNDFhZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2Wkr3F6grBL90olw7Ce7nNBGg2SL/UMizDRuxulgUc0ES2Z5VOOiGG 6PurvT2CYnGAm0ozEthUXmceL3QTdEkk+lxHDL4MTWoCEoLUAixJSH12UT3v2V7x i4dX1zCjF3tRgjWUo/gPIChyNWrRd4vPUNsrIz5oUTR29UbZvBRks2jaRJTBb6DR v68ttuTrmSrGtveKAFPIoYTzQDYLlEYGvg/1MEanPU+5bIMX+MgwfykSVnoKJnFx KGN8i7HNP3FZxEQXjWIhDAfDe/on/UBlW7/ijDXoAlYP44xV9w7mGso3AQmM1Tu2 3ocBvCKEexrqayjU17VoOAevSeSvVoA= -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:27 2026 by rpki-client