$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/405e4284-f69f-3e95-b871-67ba6fa28d23.roa File: 405e4284-f69f-3e95-b871-67ba6fa28d23.roa (raw, json) Hash identifier: 52i1DIvCF2Kwrd9yCar5+xcLZlykJ3U5O3SDXwl2+ik= Subject key identifier: 42:9B:13:B7:9A:15:65:75:67:99:3E:E9:AE:70:AF:A3:78:07:7B:39 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC6121CCCA363983B4B58FBF8 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/405e4284-f69f-3e95-b871-67ba6fa28d23.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:1c:cc:a3:63:98:3b:4b:58:fb:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=b5974258-1808-4fc4-ad55-61ff824dc879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c7:e8:37:e9:97:8f:71:5e:84:c7:08:64:45: 38:c2:35:17:a6:86:e8:76:52:ba:33:28:81:73:5e: 20:08:35:33:3c:ab:69:b6:23:d3:fc:f5:1c:e1:fe: 6b:48:2b:40:79:e8:36:fe:3f:46:c8:f5:1f:79:79: 47:a3:4f:aa:7f:e8:42:ef:67:12:a8:8e:03:c8:47: d9:95:8e:f1:52:36:25:06:bc:06:d6:a0:1e:dd:12: 56:d5:80:40:c7:cc:6e:d1:2c:ef:80:2d:6f:53:1c: b6:2a:cf:71:19:a5:12:72:07:8c:e0:08:c9:72:59: e5:00:6c:df:50:85:81:2b:17:75:26:9d:d3:6c:6c: 42:66:19:d8:7c:ac:c7:75:5a:6d:76:67:1f:54:95: 2a:d5:77:39:7f:d5:90:ad:ab:21:19:9e:bd:3b:e2: 49:85:76:78:5f:7a:a7:f3:fb:3e:0c:18:40:03:e7: f1:e1:48:49:87:c8:b4:44:5a:5e:93:35:ce:5c:27: 1d:31:08:7e:de:59:6a:55:dd:79:dc:c9:ec:3d:e3: 67:50:a5:6f:5a:67:6e:79:79:4e:be:72:4c:4d:ab: 57:92:df:b4:a4:78:4c:f6:5f:73:31:72:b1:b4:0d: 68:c8:67:16:5e:f2:7e:58:f8:59:28:d2:9c:0f:b5: 81:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9B:13:B7:9A:15:65:75:67:99:3E:E9:AE:70:AF:A3:78:07:7B:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/405e4284-f69f-3e95-b871-67ba6fa28d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:2b:8a:7f:72:1b:b8:fa:0b:41:2f:54:95:bd:ad:07:2a:ed: 45:6e:33:54:15:df:e1:e9:9d:f7:e2:a1:f5:2e:be:4e:a6:b9: 76:1c:a3:a4:20:bf:f7:43:18:2e:16:e0:11:0d:87:f4:36:de: a2:52:74:dc:40:bd:c9:bd:89:d3:5f:81:62:cd:1b:08:7e:00: bb:61:fa:51:1c:61:02:bd:d1:fb:2d:48:f8:b2:ec:74:4c:65: dc:65:77:44:02:87:e2:90:a7:6a:90:57:2e:b7:68:15:32:8c: 8a:37:4c:a9:2b:73:43:85:bc:28:5c:0a:3f:d4:9c:15:60:d6: d4:20:18:20:b4:00:a8:b4:a6:71:34:b1:c2:94:69:49:ca:d8: 69:3c:1e:d7:59:6f:ef:f1:8d:28:ed:ac:ac:e4:4c:27:a6:4a: 41:57:5d:47:6a:24:ab:e9:35:06:48:1c:43:3c:b4:98:d9:02: 52:12:87:3e:0e:30:0c:e4:31:7f:83:a4:06:22:3a:b4:2c:e3: 4f:9c:52:8f:d7:79:2d:55:85:15:43:39:68:5d:06:98:75:4b: d6:77:f6:ac:9a:65:be:1d:0e:cc:1c:c8:d2:d8:ba:a8:c0:af: 5f:2f:77:ff:6a:0a:57:d4:9a:40:c4:7a:1b:a3:99:bd:6d:cf: 1f:8b:d5:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEhzMo2OYO0tY+/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk YjU5NzQyNTgtMTgwOC00ZmM0LWFkNTUtNjFmZjgyNGRjODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcfoN+mXj3FehMcIZEU4wjUXpobodlK6MyiB c14gCDUzPKtptiPT/PUc4f5rSCtAeeg2/j9GyPUfeXlHo0+qf+hC72cSqI4DyEfZ lY7xUjYlBrwG1qAe3RJW1YBAx8xu0SzvgC1vUxy2Ks9xGaUScgeM4AjJclnlAGzf UIWBKxd1Jp3TbGxCZhnYfKzHdVptdmcfVJUq1Xc5f9WQrashGZ69O+JJhXZ4X3qn 8/s+DBhAA+fx4UhJh8i0RFpekzXOXCcdMQh+3llqVd153MnsPeNnUKVvWmdueXlO vnJMTatXkt+0pHhM9l9zMXKxtA1oyGcWXvJ+WPhZKNKcD7WBnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKbE7eaFWV1Z5k+6a5wr6N4B3s5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDA1ZTQyODQtZjY5Zi0z ZTk1LWI4NzEtNjdiYTZmYTI4ZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJn8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkrin9yG7j6C0EvVJW9rQcq7UVuM1QV3+HpnffiofUuvk6muXYco6Qg v/dDGC4W4BENh/Q23qJSdNxAvcm9idNfgWLNGwh+ALth+lEcYQK90fstSPiy7HRM Zdxld0QCh+KQp2qQVy63aBUyjIo3TKkrc0OFvChcCj/UnBVg1tQgGCC0AKi0pnE0 scKUaUnK2Gk8HtdZb+/xjSjtrKzkTCemSkFXXUdqJKvpNQZIHEM8tJjZAlIShz4O MAzkMX+DpAYiOrQs40+cUo/XeS1VhRVDOWhdBph1S9Z39qyaZb4dDswcyNLYuqjA r18vd/9qClfUmkDEehujmb1tzx+L1WI= -----END CERTIFICATE-----Generated at Mon Mar 2 18:29:41 2026 by rpki-client