$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3adf06ea-c564-32c5-aad1-7e75e56f5c8a.roa File: 3adf06ea-c564-32c5-aad1-7e75e56f5c8a.roa (raw, json) Hash identifier: 0RKlPersJB3LtiJP0NGk7KJRQ/2Kue2QUIWfUmPtVsI= Subject key identifier: 67:E4:AA:F1:5B:0E:FA:D6:8A:8F:6B:A7:7F:23:40:3C:68:A4:E5:59 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB6B72371A1AAAE8FAC1CE580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3adf06ea-c564-32c5-aad1-7e75e56f5c8a.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.153.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:23:71:a1:aa:ae:8f:ac:1c:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=b22f8a49-c52e-45dd-a316-d20e799ae0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e0:dc:46:c2:dc:4d:d8:5b:7d:09:97:34:b4: 0f:b2:9d:9a:15:01:25:85:f4:ae:64:ea:f4:be:7f: 02:bb:2d:d5:50:e7:2b:fa:c1:62:18:ac:60:ef:d0: c7:3e:75:1b:3e:4d:2e:e3:da:0b:b2:1c:c9:bf:8a: 05:85:9a:70:73:32:65:ec:e7:ef:1b:0d:53:a8:2b: 65:0d:33:16:45:b4:1f:10:fd:82:3d:bc:5f:ae:71: ab:ca:ae:de:c9:c4:5f:dd:43:e2:14:1d:08:a2:71: 94:53:44:76:bf:a7:33:8d:99:01:0a:2a:44:88:54: dd:84:46:7e:8e:03:80:7b:84:02:19:37:48:e1:92: 6e:f3:95:83:bc:d9:f7:87:7b:96:23:9a:93:25:67: c5:9a:cb:1e:c7:2d:df:59:09:07:e7:0b:1f:36:d1: 3c:f4:a3:12:63:5e:bd:6f:64:7e:3f:5b:7c:89:45: 14:95:69:9b:ff:0d:c1:9e:10:10:6b:9c:6d:90:d6: 25:ad:b6:68:32:1a:07:a4:2f:ef:a7:85:42:d6:07: 84:1e:47:cd:4b:3f:e5:d3:a9:c7:53:3d:3b:66:f1: df:96:31:04:78:c6:f8:39:74:f5:4d:3c:bc:35:d1: d9:70:c4:44:b5:d6:e6:2a:05:d1:18:03:d1:f0:ff: 1a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E4:AA:F1:5B:0E:FA:D6:8A:8F:6B:A7:7F:23:40:3C:68:A4:E5:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3adf06ea-c564-32c5-aad1-7e75e56f5c8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:eb:0b:6e:69:a3:85:d6:5a:c7:4b:58:c7:27:6d:53:86:23: 2c:99:be:2e:e2:77:ec:c2:63:d8:2c:af:68:8b:bf:e9:48:9c: 38:e2:ab:55:0b:36:90:9d:9c:0b:8c:b2:11:c3:8f:ed:f3:f4: 0c:09:64:71:85:b3:2c:c0:94:00:af:4c:af:f7:20:f0:75:52: 68:8c:4e:0a:49:e2:35:82:6a:b5:07:86:55:d3:23:64:fc:2e: c7:e1:f8:64:7a:32:8d:ea:ba:09:e2:03:96:ee:7e:a5:f5:e9: 82:a5:11:16:09:22:a4:44:80:3b:89:fe:d9:4f:63:cb:96:1e: de:02:01:73:92:15:d3:3f:cb:3a:5d:4f:79:26:d5:54:22:9f: 66:cd:b8:79:24:13:f4:9d:9b:8b:04:9e:b2:13:ba:47:38:85: 89:4a:36:9c:ed:a2:2a:d2:90:1d:0b:bf:0c:5a:ae:46:27:09: 86:5d:72:a4:0d:cf:7a:40:ec:4b:6f:77:79:1a:9b:cb:27:4b: 8f:a3:e2:cf:83:cb:81:21:83:ee:30:fe:1a:0a:ef:81:1c:5a: 49:a1:55:74:0f:02:5c:01:69:63:9d:e8:8f:87:dd:2f:e5:be: 8d:14:56:47:8d:38:5b:7b:22:fb:fd:97:c9:4c:3b:80:6f:48: 05:c3:ab:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tyNxoaquj6wc5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk YjIyZjhhNDktYzUyZS00NWRkLWEzMTYtZDIwZTc5OWFlMGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnODcRsLcTdhbfQmXNLQPsp2aFQElhfSuZOr0 vn8Cuy3VUOcr+sFiGKxg79DHPnUbPk0u49oLshzJv4oFhZpwczJl7OfvGw1TqCtl DTMWRbQfEP2CPbxfrnGryq7eycRf3UPiFB0IonGUU0R2v6czjZkBCipEiFTdhEZ+ jgOAe4QCGTdI4ZJu85WDvNn3h3uWI5qTJWfFmssexy3fWQkH5wsfNtE89KMSY169 b2R+P1t8iUUUlWmb/w3BnhAQa5xtkNYlrbZoMhoHpC/vp4VC1geEHkfNSz/l06nH Uz07ZvHfljEEeMb4OXT1TTy8NdHZcMREtdbmKgXRGAPR8P8aEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfkqvFbDvrWio9rp38jQDxopOVZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2FkZjA2ZWEtYzU2NC0z MmM1LWFhZDEtN2U3NWU1NmY1YzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjrC25po4XWWsdLWMcnbVOGIyyZvi7id+zCY9gsr2iLv+lInDjiq1UL NpCdnAuMshHDj+3z9AwJZHGFsyzAlACvTK/3IPB1UmiMTgpJ4jWCarUHhlXTI2T8 Lsfh+GR6Mo3qugniA5bufqX16YKlERYJIqREgDuJ/tlPY8uWHt4CAXOSFdM/yzpd T3km1VQin2bNuHkkE/Sdm4sEnrITukc4hYlKNpztoirSkB0LvwxarkYnCYZdcqQN z3pA7Etvd3kam8snS4+j4s+Dy4Ehg+4w/hoK74EcWkmhVXQPAlwBaWOd6I+H3S/l vo0UVkeNOFt7Ivv9l8lMO4BvSAXDq8M= -----END CERTIFICATE-----Generated at Mon Mar 2 20:01:54 2026 by rpki-client