$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/287659a3-4e2a-3743-b4b5-973d707c8517.roa File: 287659a3-4e2a-3743-b4b5-973d707c8517.roa (raw, json) Hash identifier: 3FFJorhXbgKy19rCBSxLHmNeAErap1Exx7WnNU7JHgI= Subject key identifier: 4D:79:74:E4:7F:24:4C:74:A0:F6:E9:75:14:5C:4A:93:36:73:50:4B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC6121C145AC2FCC13B8B6400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/287659a3-4e2a-3743-b4b5-973d707c8517.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:1c:14:5a:c2:fc:c1:3b:8b:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=c472ffdf-d1d2-45d4-9769-201148feebce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:51:57:1a:3f:f8:b8:15:4e:95:d8:90:81:2c: 6c:d3:23:24:5e:a5:df:83:af:62:95:3e:51:72:ee: d3:ec:c4:2b:05:be:2b:37:28:15:5c:e1:79:75:18: f0:6a:27:9e:03:4e:90:11:92:d6:59:f6:a1:66:bc: 90:09:c1:1e:89:1a:df:70:8c:47:59:46:1e:62:90: 1f:b4:25:0b:83:ae:2e:04:07:af:0a:82:44:65:42: 66:73:f1:de:7b:70:13:30:6b:c3:0f:a4:74:2a:8c: 9e:de:a3:77:d5:a4:2e:a6:9a:a6:5a:03:22:03:99: 5d:f9:32:9a:9f:df:76:47:d6:db:bd:3d:c0:8b:eb: 2e:c2:13:f8:cb:3d:8e:00:91:c0:48:43:f1:af:f9: f0:f2:61:47:b8:e4:38:99:f6:02:c9:2c:13:51:33: ea:0a:e5:47:9c:59:eb:a4:31:b4:14:be:5c:ec:12: e7:8c:8a:48:18:37:f7:ac:b9:a4:51:0d:bb:fd:6f: 45:fc:4a:47:d5:73:b9:b4:38:c0:19:44:73:3b:3a: 9c:be:45:27:d0:7c:bd:b1:f4:4c:13:27:bd:f9:d7: 0a:e9:bc:7f:2f:a9:22:97:11:b3:9b:98:ba:3c:4f: 48:e8:5e:1d:4a:79:27:e1:6d:6c:56:c0:45:61:cd: e7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:79:74:E4:7F:24:4C:74:A0:F6:E9:75:14:5C:4A:93:36:73:50:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/287659a3-4e2a-3743-b4b5-973d707c8517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ac:a6:50:85:d3:ba:fe:3f:ad:d6:a6:73:e4:51:f5:34:97: 57:00:26:9a:41:51:b1:57:1b:21:20:48:49:f8:ce:f5:d5:fb: 58:19:2b:8a:a7:27:b8:2a:f7:b9:e4:7f:73:ed:66:d9:ca:ec: 69:eb:b4:70:c2:89:79:2d:b9:64:d7:ff:45:44:70:10:e5:4c: 16:14:eb:57:e3:ca:17:90:5f:b9:cd:53:50:47:1f:82:8d:d0: ce:4c:44:68:4f:71:74:bb:30:ca:ca:c7:9c:61:0d:9a:29:19: 06:bf:b7:91:df:00:84:d9:f4:33:35:79:29:b8:99:da:de:0c: e8:b0:94:e3:b0:33:e1:91:45:42:2f:7c:ec:88:da:79:e6:1a: a8:f6:bf:79:b2:55:67:c7:16:c2:f4:f1:06:54:6d:40:e1:9a: 96:ba:49:7a:1d:9f:6c:82:cf:fa:f6:31:b5:23:12:32:ac:04: 88:4d:16:47:e7:ea:05:f9:fb:ec:b5:b3:34:ea:e3:07:16:4c: dd:36:6e:49:e1:77:9a:61:93:c3:b1:d4:34:6d:1e:3e:de:be: b2:25:38:e8:ca:68:b8:d6:6e:37:23:2d:09:5c:f4:50:89:b2: b6:ec:08:4a:95:ae:41:09:c9:fe:69:53:38:23:20:4a:a1:db: 46:20:42:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEhwUWsL8wTuLZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk YzQ3MmZmZGYtZDFkMi00NWQ0LTk3NjktMjAxMTQ4ZmVlYmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1FXGj/4uBVOldiQgSxs0yMkXqXfg69ilT5R cu7T7MQrBb4rNygVXOF5dRjwaieeA06QEZLWWfahZryQCcEeiRrfcIxHWUYeYpAf tCULg64uBAevCoJEZUJmc/Hee3ATMGvDD6R0Koye3qN31aQuppqmWgMiA5ld+TKa n992R9bbvT3Ai+suwhP4yz2OAJHASEPxr/nw8mFHuOQ4mfYCySwTUTPqCuVHnFnr pDG0FL5c7BLnjIpIGDf3rLmkUQ27/W9F/EpH1XO5tDjAGURzOzqcvkUn0Hy9sfRM Eye9+dcK6bx/L6kilxGzm5i6PE9I6F4dSnkn4W1sVsBFYc3nRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE15dOR/JEx0oPbpdRRcSpM2c1BLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjg3NjU5YTMtNGUyYS0z NzQzLWI0YjUtOTczZDcwN2M4NTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJn6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGsplCF07r+P63WpnPkUfU0l1cAJppBUbFXGyEgSEn4zvXV+1gZK4qn J7gq97nkf3PtZtnK7GnrtHDCiXktuWTX/0VEcBDlTBYU61fjyheQX7nNU1BHH4KN 0M5MRGhPcXS7MMrKx5xhDZopGQa/t5HfAITZ9DM1eSm4mdreDOiwlOOwM+GRRUIv fOyI2nnmGqj2v3myVWfHFsL08QZUbUDhmpa6SXodn2yCz/r2MbUjEjKsBIhNFkfn 6gX5++y1szTq4wcWTN02bknhd5phk8Ox1DRtHj7evrIlOOjKaLjWbjcjLQlc9FCJ srbsCEqVrkEJyf5pUzgjIEqh20YgQiU= -----END CERTIFICATE-----Generated at Mon Mar 2 16:28:03 2026 by rpki-client