$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3a298cc3-0efd-37b4-91d3-1e3697d6a370.roa File: 3a298cc3-0efd-37b4-91d3-1e3697d6a370.roa (raw, json) Hash identifier: 60eKxcUtN5y9k+pPicvCSshUTKChC0KU6vE1nJWvhy8= Subject key identifier: AD:6F:B8:CF:60:1D:F0:AB:51:FF:07:11:F5:33:0F:DF:3E:2A:DE:DD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB6B7238E5234A37D8D7B7880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3a298cc3-0efd-37b4-91d3-1e3697d6a370.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.153.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:23:8e:52:34:a3:7d:8d:7b:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=c83a2616-226b-4f25-a912-2590c7d09dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ea:6e:6b:68:84:a1:ed:9d:02:7e:38:e4:d4: 8c:f1:45:72:80:99:a2:18:7b:31:6c:11:58:82:88: 65:9d:e5:1b:b9:35:af:43:c7:3d:f3:be:5a:33:15: 35:37:f3:44:86:47:71:a2:a2:07:00:a8:8e:d1:6a: 2b:5f:d7:b5:a6:e6:bf:63:d8:a0:b7:87:0a:6f:cf: 2a:13:61:42:de:51:ac:c3:94:33:df:4c:1e:ae:90: b4:c5:64:1d:02:ff:bc:7e:60:a5:d5:4f:3c:02:8d: 3b:89:67:b9:ed:6c:ac:83:41:23:12:99:e5:77:d0: 1e:1b:7b:f7:0c:42:9b:c0:dc:5c:55:d4:b6:4f:c9: 98:db:54:31:25:20:23:1e:c5:ee:62:aa:f5:0c:e8: fc:a3:7f:4f:9d:13:91:2d:4d:e6:6b:d3:14:6c:7f: d1:2c:69:cf:64:d3:94:0f:c2:d0:7c:64:32:26:ca: 46:3a:76:d3:a5:36:4d:1e:e5:b4:c2:69:f0:e4:96: 2b:95:63:4a:63:ec:74:0b:f3:77:94:cb:57:49:db: 6f:7c:cf:5d:5b:9d:1d:39:4f:fa:f7:15:b4:85:e9: d6:db:21:3b:89:8c:2c:82:4b:7e:e1:70:d8:bb:2f: ee:1f:a2:3a:31:38:0a:ee:7d:8d:d8:cc:54:63:84: e0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6F:B8:CF:60:1D:F0:AB:51:FF:07:11:F5:33:0F:DF:3E:2A:DE:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3a298cc3-0efd-37b4-91d3-1e3697d6a370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:35:cf:9d:18:d8:36:42:5c:02:82:13:b9:bd:56:81:f4:6b: 40:1b:de:94:02:68:2c:7e:c3:35:0c:a7:f4:b1:0e:01:b4:b1: b6:f9:aa:14:05:38:46:b1:e8:d3:30:8b:fe:e0:94:11:b0:d1: 86:ba:7b:1e:9f:31:e8:ec:24:8b:07:40:22:4f:9f:3b:ec:5a: 8b:ea:7e:8e:74:ce:fc:1e:75:7a:02:b2:27:4c:5e:9d:1e:b4: 6d:d6:36:0d:d0:10:83:63:51:b2:85:10:55:7a:82:a1:7d:9a: e2:df:24:cf:17:b6:0f:e6:ed:43:a4:79:62:1f:b2:0a:7c:16: 2b:b4:d3:77:4b:c1:89:84:c5:9a:16:78:1d:0b:79:6f:7b:00: 58:02:ca:a4:51:c9:2f:c1:a3:d3:12:81:10:8d:61:fb:0c:0a: 52:b3:c4:a0:a2:69:a4:c4:f3:f2:68:79:21:8c:8f:39:c8:a2: e0:f4:f9:5d:e2:4b:79:f9:cc:64:66:53:db:e5:cf:a7:ea:9e: 74:cd:97:15:80:50:ea:68:71:a9:70:c9:4a:77:53:51:d4:64: f9:b5:07:dc:5a:e9:05:bf:c0:73:1f:b9:42:42:74:3e:33:cb: c8:fc:ab:38:03:b6:2b:6b:65:c3:15:42:f0:3e:30:e0:3e:7d: 77:59:bc:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tyOOUjSjfY17eIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk YzgzYTI2MTYtMjI2Yi00ZjI1LWE5MTItMjU5MGM3ZDA5ZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgupua2iEoe2dAn445NSM8UVygJmiGHsxbBFY gohlneUbuTWvQ8c9875aMxU1N/NEhkdxoqIHAKiO0WorX9e1pua/Y9igt4cKb88q E2FC3lGsw5Qz30werpC0xWQdAv+8fmCl1U88Ao07iWe57Wysg0EjEpnld9AeG3v3 DEKbwNxcVdS2T8mY21QxJSAjHsXuYqr1DOj8o39PnRORLU3ma9MUbH/RLGnPZNOU D8LQfGQyJspGOnbTpTZNHuW0wmnw5JYrlWNKY+x0C/N3lMtXSdtvfM9dW50dOU/6 9xW0henW2yE7iYwsgkt+4XDYuy/uH6I6MTgK7n2N2MxUY4TgeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1vuM9gHfCrUf8HEfUzD98+Kt7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2EyOThjYzMtMGVmZC0z N2I0LTkxZDMtMWUzNjk3ZDZhMzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs1z50Y2DZCXAKCE7m9VoH0a0Ab3pQCaCx+wzUMp/SxDgG0sbb5qhQF OEax6NMwi/7glBGw0Ya6ex6fMejsJIsHQCJPnzvsWovqfo50zvwedXoCsidMXp0e tG3WNg3QEINjUbKFEFV6gqF9muLfJM8Xtg/m7UOkeWIfsgp8Fiu003dLwYmExZoW eB0LeW97AFgCyqRRyS/Bo9MSgRCNYfsMClKzxKCiaaTE8/JoeSGMjznIouD0+V3i S3n5zGRmU9vlz6fqnnTNlxWAUOpocalwyUp3U1HUZPm1B9xa6QW/wHMfuUJCdD4z y8j8qzgDtitrZcMVQvA+MOA+fXdZvIY= -----END CERTIFICATE-----Generated at Mon Mar 2 21:55:32 2026 by rpki-client