$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4af6ee65-a317-31e4-86f2-256ca1753db8.roa File: 4af6ee65-a317-31e4-86f2-256ca1753db8.roa (raw, json) Hash identifier: JXqXTEI3dZrAhudHBZBAWC9QIBF7J0TAQg5woCZBrkc= Subject key identifier: D1:78:A1:A0:0F:D8:72:12:4D:8E:42:E1:54:55:21:7D:51:6B:9F:38 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC34749644409DD5F1BDD2A40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4af6ee65-a317-31e4-86f2-256ca1753db8.roa Signing time: Thu 05 Feb 2026 14:00:40 +0000 ROA not before: Thu 05 Feb 2026 14:00:40 +0000 ROA not after: Wed 06 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c3:47:49:64:44:09:dd:5f:1b:dd:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 5 14:00:40 2026 GMT Not After : May 6 13:00:40 2026 GMT Subject: CN=3ef2bb10-38e4-4dff-8f3f-4ae5412ab55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1a:63:d3:77:4f:9c:5b:c4:ea:02:bd:34:31: fd:9b:4f:55:03:15:a7:da:ae:81:6e:6a:e7:cd:e6: c5:fc:af:8f:3f:e0:af:65:62:30:9b:24:2f:32:18: ad:0c:1f:d8:c3:92:b9:ba:c4:bd:21:24:63:55:05: ad:dc:40:c9:f3:28:60:40:68:b2:be:39:cd:17:f7: 8c:c0:3b:f4:dd:a8:14:43:91:fb:69:bb:44:26:89: 38:70:75:11:da:c3:28:bc:fd:ff:de:c5:57:c4:bc: 4c:0a:67:71:7d:10:4d:d7:fc:a8:0d:44:80:3e:4c: 67:49:4a:b7:03:c0:47:38:98:96:f0:80:4d:73:40: 81:13:a5:1c:e1:af:70:85:d4:63:e1:fd:6f:f5:a4: 35:e1:10:cd:df:e2:92:1d:ba:5b:12:29:ea:c1:fe: 60:b6:ba:11:9b:8a:a3:63:aa:53:f1:3d:ba:82:86: 77:ba:d2:53:3d:c3:12:3d:7a:9b:ad:35:9f:8b:2c: 94:15:17:bf:df:dc:b6:72:c8:f0:00:12:c7:e1:4b: 0c:9b:b9:6c:f9:e9:d6:2f:28:68:49:11:c0:af:c1: a1:77:e2:1a:db:97:10:a1:11:1a:bd:94:ad:d5:4e: d0:60:de:70:96:f7:df:31:c1:59:ff:21:28:66:88: 6f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:78:A1:A0:0F:D8:72:12:4D:8E:42:E1:54:55:21:7D:51:6B:9F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4af6ee65-a317-31e4-86f2-256ca1753db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:05:2e:e9:c2:2a:ab:49:1d:81:d8:cf:47:38:3a:57:7c:9d: 35:72:d3:4f:62:43:e7:1f:80:da:53:47:39:04:e5:95:86:9e: 20:4f:4f:5a:69:f8:80:3d:19:14:27:79:a1:6c:bd:8b:50:95: 5b:95:87:b9:f1:af:42:31:aa:c9:03:a2:d5:5d:5e:20:db:95: 13:f3:83:8b:9d:94:fa:74:87:2e:de:6d:2b:7c:c5:bf:00:68: d1:da:ad:c4:af:80:db:f3:0e:92:77:82:61:68:b6:30:32:f2: ca:2b:d2:7a:e3:b8:95:bf:eb:6e:23:e7:eb:3e:29:53:fb:19: d5:e7:96:de:f3:3f:35:cb:8f:6b:1a:f0:24:c8:9f:22:4b:82: 04:ac:4d:bd:be:aa:19:56:5a:22:cd:7b:44:f6:b2:a9:78:b7: c8:60:c1:5f:19:cb:cd:e6:89:f5:45:b1:a2:53:d3:8a:f3:28: c2:2c:db:c4:d1:e2:4b:10:36:88:a5:05:0a:91:c8:43:d4:e3: 29:fe:c2:18:b7:55:13:35:25:be:21:ce:85:b2:37:fb:42:7a: 1b:4a:7f:cd:ae:9b:30:b8:10:0d:12:eb:d3:6e:33:1d:c2:0e: 3c:34:33:75:ac:88:f3:0e:65:6f:fa:79:06:14:eb:2f:ea:76: 03:2e:98:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzDR0lkRAndXxvdKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk M2VmMmJiMTAtMzhlNC00ZGZmLThmM2YtNGFlNTQxMmFiNTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBpj03dPnFvE6gK9NDH9m09VAxWn2q6Bbmrn zebF/K+PP+CvZWIwmyQvMhitDB/Yw5K5usS9ISRjVQWt3EDJ8yhgQGiyvjnNF/eM wDv03agUQ5H7abtEJok4cHUR2sMovP3/3sVXxLxMCmdxfRBN1/yoDUSAPkxnSUq3 A8BHOJiW8IBNc0CBE6Uc4a9whdRj4f1v9aQ14RDN3+KSHbpbEinqwf5gtroRm4qj Y6pT8T26goZ3utJTPcMSPXqbrTWfiyyUFRe/39y2csjwABLH4UsMm7ls+enWLyho SRHAr8Ghd+Ia25cQoREavZSt1U7QYN5wlvffMcFZ/yEoZohvjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNF4oaAP2HISTY5C4VRVIX1Ra584MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGFmNmVlNjUtYTMxNy0z MWU0LTg2ZjItMjU2Y2ExNzUzZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwFLunCKqtJHYHYz0c4Old8nTVy009iQ+cfgNpTRzkE5ZWGniBPT1pp +IA9GRQneaFsvYtQlVuVh7nxr0IxqskDotVdXiDblRPzg4udlPp0hy7ebSt8xb8A aNHarcSvgNvzDpJ3gmFotjAy8sor0nrjuJW/624j5+s+KVP7GdXnlt7zPzXLj2sa 8CTInyJLggSsTb2+qhlWWiLNe0T2sql4t8hgwV8Zy83mifVFsaJT04rzKMIs28TR 4ksQNoilBQqRyEPU4yn+whi3VRM1Jb4hzoWyN/tCehtKf82umzC4EA0S69NuMx3C Djw0M3WsiPMOZW/6eQYU6y/qdgMumDk= -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:50 2026 by rpki-client