$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2d6c3da3-b8d2-3ca8-ad42-671a0b26b4e5.roa File: 2d6c3da3-b8d2-3ca8-ad42-671a0b26b4e5.roa (raw, json) Hash identifier: xVg3w97yyBD+09EoFkAIE97zaUsZWjo+hZ8sbVpbNNM= Subject key identifier: D5:90:73:C4:EB:F4:06:61:B9:4A:5B:2E:6F:6F:A5:30:F1:3A:4C:CC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CD6D2173A2B723F766D3A0B80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2d6c3da3-b8d2-3ca8-ad42-671a0b26b4e5.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:17:3a:2b:72:3f:76:6d:3a:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=665c9264-84a9-462f-94ca-c9390594c61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:23:b7:0a:0f:2c:3d:df:70:b4:d3:56:a5:cf: 6a:c9:52:dc:f6:ba:8b:c0:79:95:8e:4b:65:b8:7b: ed:d1:a4:8a:9f:1a:70:35:65:e5:08:fc:5a:b4:2a: 62:59:46:90:69:17:e3:cf:1f:c8:ff:9c:e2:5a:6c: 7a:6b:ee:91:a2:cb:0e:c6:cf:79:1f:cd:5e:23:c1: 33:a5:7b:84:cb:33:48:86:af:22:e8:be:1e:50:aa: b6:71:18:9c:a0:07:e4:05:44:6a:ca:37:49:c1:0b: 3c:a1:21:65:2d:75:fb:46:73:fb:17:2e:b2:59:02: 70:c4:b9:04:98:c0:b1:b8:60:c6:13:2c:18:2b:6e: 88:34:e3:43:7c:28:c6:af:20:0f:96:f3:d0:d2:e8: 6f:a9:95:2a:d6:8f:e6:96:8f:e6:46:2d:e6:05:68: 13:75:b7:16:b2:02:15:06:d3:24:5f:71:ea:90:77: d7:d1:2f:34:fb:4e:b4:de:1a:bb:84:0d:fb:9b:a3: b4:c4:9f:e1:b9:2c:98:f0:c2:93:d8:c0:4d:10:a7: 75:00:d3:c5:99:1c:4a:e2:a5:a6:51:5b:6c:12:6b: 18:36:d4:f9:a2:12:ed:5b:d9:2a:c0:9d:df:7b:7c: 07:01:0f:a0:b7:60:08:5a:cd:57:17:30:f5:1a:d7: ea:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:90:73:C4:EB:F4:06:61:B9:4A:5B:2E:6F:6F:A5:30:F1:3A:4C:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2d6c3da3-b8d2-3ca8-ad42-671a0b26b4e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:7c:ee:e4:15:e7:dc:9c:d0:aa:d0:54:ab:94:66:0b:e6:ca: 81:1e:c3:e0:ef:c5:a4:f6:bf:27:63:1b:02:bc:f7:ba:5d:0e: 46:7e:58:75:89:7d:24:3a:7e:01:61:24:c3:09:23:4f:d4:6b: 49:10:ba:92:21:9c:5e:87:13:3d:36:8a:51:a7:d5:00:14:f6: 4b:85:d2:91:ef:7a:1c:72:25:ff:f8:98:a2:60:44:b2:0d:df: 39:19:2e:81:63:21:0a:7b:2a:4f:bc:02:3a:29:86:83:3c:9e: d3:b2:82:a3:a1:b1:9e:0e:32:a7:e5:1b:e4:f2:65:26:61:46: 0c:6c:12:9f:0f:78:b0:9b:94:df:2a:03:a1:95:d2:a0:d2:5c: 08:8f:e8:99:c3:62:8e:57:ff:6d:1f:4d:bc:19:ce:a5:8d:9f: 22:e8:f5:21:96:29:c2:1f:a1:46:06:f4:a0:db:69:8f:cb:ea: 22:5d:38:99:b7:56:65:ff:df:e6:57:d0:c4:0a:b1:9c:ef:27: 7b:34:df:0c:63:00:29:2f:3e:37:5d:16:3f:4c:d6:8d:83:a5: 6d:f3:2e:4d:67:23:5a:1b:32:e2:51:a7:94:44:28:59:5a:e1: f1:da:bf:b6:da:40:59:94:e1:3e:67:aa:37:a3:4c:d5:18:d8: c9:5f:10:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0hc6K3I/dm06C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk NjY1YzkyNjQtODRhOS00NjJmLTk0Y2EtYzkzOTA1OTRjNjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyO3Cg8sPd9wtNNWpc9qyVLc9rqLwHmVjktl uHvt0aSKnxpwNWXlCPxatCpiWUaQaRfjzx/I/5ziWmx6a+6RossOxs95H81eI8Ez pXuEyzNIhq8i6L4eUKq2cRicoAfkBURqyjdJwQs8oSFlLXX7RnP7Fy6yWQJwxLkE mMCxuGDGEywYK26INONDfCjGryAPlvPQ0uhvqZUq1o/mlo/mRi3mBWgTdbcWsgIV BtMkX3HqkHfX0S80+0603hq7hA37m6O0xJ/huSyY8MKT2MBNEKd1ANPFmRxK4qWm UVtsEmsYNtT5ohLtW9kqwJ3fe3wHAQ+gt2AIWs1XFzD1GtfqEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWQc8Tr9AZhuUpbLm9vpTDxOkzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmQ2YzNkYTMtYjhkMi0z Y2E4LWFkNDItNjcxYTBiMjZiNGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFp87uQV59yc0KrQVKuUZgvmyoEew+DvxaT2vydjGwK897pdDkZ+WHWJ fSQ6fgFhJMMJI0/Ua0kQupIhnF6HEz02ilGn1QAU9kuF0pHvehxyJf/4mKJgRLIN 3zkZLoFjIQp7Kk+8AjophoM8ntOygqOhsZ4OMqflG+TyZSZhRgxsEp8PeLCblN8q A6GV0qDSXAiP6JnDYo5X/20fTbwZzqWNnyLo9SGWKcIfoUYG9KDbaY/L6iJdOJm3 VmX/3+ZX0MQKsZzvJ3s03wxjACkvPjddFj9M1o2DpW3zLk1nI1obMuJRp5REKFla 4fHav7baQFmU4T5nqjejTNUY2MlfEHQ= -----END CERTIFICATE-----Generated at Mon Mar 2 18:07:38 2026 by rpki-client