$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa File: 25af00ca-4f76-3e40-b823-c83ad676aaa2.roa (raw, json) Hash identifier: 2F4SZiKKpjgnykrNlKdvfmplCC6A7t4K/nl1Xy8kfms= Subject key identifier: 57:03:0C:AD:D4:73:20:B1:E5:EB:08:D6:0B:6D:D7:62:7A:83:93:59 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB6B723A26868B6239BB86300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.153.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:23:a2:68:68:b6:23:9b:b8:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=301f3b4d-74d5-4366-8429-253bc8fb75ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:89:cf:82:82:38:30:f7:e5:09:45:a9:a0:26: 7a:d2:1a:e4:63:e9:b4:9b:2b:ab:2d:76:f6:e4:12: e1:50:c9:95:bb:f0:6a:13:5b:f4:ff:72:a7:c2:24: 39:33:ad:b8:7f:cb:46:75:8d:b1:54:66:36:c9:79: dc:c5:ea:45:74:0f:a3:52:00:da:97:b9:c7:99:8b: 7b:3c:13:c6:b0:89:1e:d9:38:83:03:d9:de:53:81: fb:9e:0b:be:25:20:20:e1:9d:4f:5a:b4:41:da:07: 29:8d:c6:c0:ae:68:4c:e4:49:27:d9:6f:11:84:c8: f5:e7:31:87:11:6a:d7:a5:1f:15:94:4b:08:5c:6b: 79:e5:93:23:ea:93:e4:dd:04:c1:5f:53:cb:5d:b8: 34:7f:53:5c:03:25:10:7d:fc:2c:65:22:15:0a:cf: 4e:bc:07:d8:48:bb:1a:63:36:31:55:53:65:1f:89: 1e:28:55:44:88:f8:85:d5:5d:0b:3b:47:2b:61:dc: b6:cc:de:5e:fa:5e:ed:6a:21:c5:e8:9d:e1:f0:10: e5:c2:a6:0c:05:a9:cf:6c:5e:1e:d7:67:56:bc:73: d0:52:b6:1c:db:3b:ab:ae:fd:a7:8d:ac:b6:06:bf: 0f:81:a4:20:13:fc:f6:9d:2b:8b:ee:6a:c2:7b:83: fb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:03:0C:AD:D4:73:20:B1:E5:EB:08:D6:0B:6D:D7:62:7A:83:93:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:57:0a:e0:68:16:3f:36:83:05:f7:d7:81:90:d1:75:15:26: b7:30:6e:76:fd:ac:5d:52:47:27:03:eb:62:4f:30:8c:0d:cb: 55:ca:42:48:05:f9:4c:86:3f:d9:5a:5e:41:5b:33:3a:53:db: 0b:8b:84:c2:df:95:2a:aa:b3:ce:a7:eb:4a:a9:90:0b:98:5a: 3a:b4:d3:e7:38:78:62:74:2a:22:71:0f:47:11:9c:d0:1e:20: b3:8e:a4:c1:a1:4d:a8:2a:0d:bd:98:7c:26:a7:ac:5e:67:71: 0d:1b:eb:62:36:69:82:0c:d4:1a:d2:c5:80:2a:a0:f9:8a:93: 5e:7f:b9:ad:c8:5d:df:21:e1:76:09:cb:c4:83:b7:05:33:de: 26:dc:60:62:c7:8f:b2:6d:3c:0c:ac:6e:75:a6:f7:00:c6:ff: 7c:52:39:38:36:26:94:a2:80:01:15:66:22:8c:d6:c9:16:41: 20:78:5c:3a:16:32:79:51:64:20:ac:8a:f3:df:5d:3d:f9:f5: ae:39:06:fa:bf:d0:f5:e6:bf:0f:c6:ae:a1:1f:6f:28:ae:5d: 2a:64:92:5b:5e:00:09:55:d3:6f:13:7b:08:84:27:70:91:e1: 22:b5:dc:04:30:77:a7:42:98:e4:9f:b1:11:6b:a2:df:96:54: c7:d2:38:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tyOiaGi2I5u4YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk MzAxZjNiNGQtNzRkNS00MzY2LTg0MjktMjUzYmM4ZmI3NWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkonPgoI4MPflCUWpoCZ60hrkY+m0myurLXb2 5BLhUMmVu/BqE1v0/3KnwiQ5M624f8tGdY2xVGY2yXncxepFdA+jUgDal7nHmYt7 PBPGsIke2TiDA9neU4H7ngu+JSAg4Z1PWrRB2gcpjcbArmhM5Ekn2W8RhMj15zGH EWrXpR8VlEsIXGt55ZMj6pPk3QTBX1PLXbg0f1NcAyUQffwsZSIVCs9OvAfYSLsa YzYxVVNlH4keKFVEiPiF1V0LO0crYdy2zN5e+l7taiHF6J3h8BDlwqYMBanPbF4e 12dWvHPQUrYc2zurrv2njay2Br8PgaQgE/z2nSuL7mrCe4P71wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcDDK3UcyCx5esI1gtt12J6g5NZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjVhZjAwY2EtNGY3Ni0z ZTQwLWI4MjMtYzgzYWQ2NzZhYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtXCuBoFj82gwX314GQ0XUVJrcwbnb9rF1SRycD62JPMIwNy1XKQkgF +UyGP9laXkFbMzpT2wuLhMLflSqqs86n60qpkAuYWjq00+c4eGJ0KiJxD0cRnNAe ILOOpMGhTagqDb2YfCanrF5ncQ0b62I2aYIM1BrSxYAqoPmKk15/ua3IXd8h4XYJ y8SDtwUz3ibcYGLHj7JtPAysbnWm9wDG/3xSOTg2JpSigAEVZiKM1skWQSB4XDoW MnlRZCCsivPfXT359a45Bvq/0PXmvw/GrqEfbyiuXSpkklteAAlV028TewiEJ3CR 4SK13AQwd6dCmOSfsRFrot+WVMfSOB4= -----END CERTIFICATE-----Generated at Mon Mar 2 16:30:14 2026 by rpki-client