$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4f65d6db-ce85-3b40-86e0-1e33116c9e73.roa File: 4f65d6db-ce85-3b40-86e0-1e33116c9e73.roa (raw, json) Hash identifier: PC1W5VQZtDLr8Gk/xPZDkyHfNsYUQHQkdAgd9FCgYaE= Subject key identifier: 3A:68:82:7F:77:57:7C:AC:A9:F5:8C:D3:C5:87:68:E5:80:B8:32:AB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D091270C177DEEA9EE542F580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4f65d6db-ce85-3b40-86e0-1e33116c9e73.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 8069 IP address blocks: 20.157.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:70:c1:77:de:ea:9e:e5:42:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=2c8ea38d-55ff-4b00-a90a-71fc92c2dcb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:d3:28:f9:bf:36:b9:15:f0:c1:48:b2:72: 6a:6f:32:88:e9:2f:08:8e:47:de:c0:ad:8b:cf:ca: 8b:24:34:47:5c:47:6b:8f:92:73:5c:fc:5e:7d:59: a2:24:c8:fb:8c:9d:97:e6:ae:5d:e9:c4:5d:cd:8f: be:66:02:1f:6f:2a:05:a8:78:8c:74:ac:23:f9:ef: e2:b7:42:cf:cf:3b:e4:ed:9f:74:19:73:05:f9:c5: f8:95:11:06:a2:21:05:03:a5:88:69:9b:56:79:54: cd:1d:6f:78:4a:f6:be:60:8f:0b:4c:bc:d3:5f:ab: d6:85:75:1c:9c:cc:a3:0a:3a:1f:b6:2e:85:ed:ec: e2:6f:76:0a:7c:d5:d4:55:48:8a:42:46:e2:69:43: 7e:c3:56:7e:6a:05:1e:b3:4e:ad:1d:22:9b:75:d9: df:0e:28:29:73:bf:51:82:8e:90:e1:be:de:c7:4d: 9b:69:a1:f8:7e:4a:db:d0:43:95:07:a9:d3:9b:cb: ab:84:42:23:c4:57:4e:55:b0:3b:1a:2b:4a:6d:e2: fc:09:fa:4d:2a:9b:39:84:7f:ef:1e:57:85:21:c9: 9e:23:e6:f3:35:c9:80:97:fd:5f:92:f4:9a:3c:c5: a8:4f:bf:76:e8:ba:84:88:4f:95:74:cf:e1:90:2e: ed:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:68:82:7F:77:57:7C:AC:A9:F5:8C:D3:C5:87:68:E5:80:B8:32:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4f65d6db-ce85-3b40-86e0-1e33116c9e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:bd:61:6e:e2:85:b6:15:30:c1:43:59:49:93:dc:19:92:a8: 3f:3e:76:d0:35:3f:df:84:34:70:de:7c:8d:ae:56:10:e5:b6: 57:64:f4:da:cc:15:2e:a6:57:b0:dc:74:9f:39:00:6d:1e:23: 3e:8e:94:a5:46:94:ab:f5:1d:98:05:fd:9a:8b:8b:b8:95:e2: f0:f2:d5:34:a7:5b:a2:27:32:fb:b6:3c:cd:72:a0:4d:3e:6a: c6:bc:ad:48:d6:7e:8e:30:53:af:ea:1a:13:9f:18:28:09:df: 06:a1:a5:40:f6:82:79:0c:8b:2c:aa:f1:93:d2:d3:99:2d:1d: 7c:3b:be:97:18:a7:d7:58:1f:b4:02:9d:42:df:a1:cb:e6:ba: 3d:49:69:08:f9:5f:d4:37:d7:7f:de:49:18:85:dd:a8:6b:e1: 65:23:19:9e:43:a6:d4:26:34:f7:42:98:b0:8e:b3:85:85:6c: 61:0d:18:a6:d9:2b:50:39:89:67:7a:55:d1:50:06:d5:f8:8e: e5:db:96:f1:1e:6d:0f:5a:91:e6:7b:06:0a:59:45:42:61:5b: 69:8e:69:95:48:e2:61:0c:52:ec:43:04:a4:64:2d:b6:d0:4c: c1:4b:9d:05:8b:cb:f1:d1:a9:1d:76:72:34:96:a2:e2:2f:2f: e2:af:76:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEnDBd97qnuVC9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MmM4ZWEzOGQtNTVmZi00YjAwLWE5MGEtNzFmYzkyYzJkY2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslLTKPm/NrkV8MFIsnJqbzKI6S8IjkfewK2L z8qLJDRHXEdrj5JzXPxefVmiJMj7jJ2X5q5d6cRdzY++ZgIfbyoFqHiMdKwj+e/i t0LPzzvk7Z90GXMF+cX4lREGoiEFA6WIaZtWeVTNHW94Sva+YI8LTLzTX6vWhXUc nMyjCjofti6F7ezib3YKfNXUVUiKQkbiaUN+w1Z+agUes06tHSKbddnfDigpc79R go6Q4b7ex02baaH4fkrb0EOVB6nTm8urhEIjxFdOVbA7GitKbeL8CfpNKps5hH/v HleFIcmeI+bzNcmAl/1fkvSaPMWoT7926LqEiE+VdM/hkC7tJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpogn93V3ysqfWM08WHaOWAuDKrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGY2NWQ2ZGItY2U4NS0z YjQwLTg2ZTAtMWUzMzExNmM5ZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK9YW7ihbYVMMFDWUmT3BmSqD8+dtA1P9+ENHDefI2uVhDltldk9NrM FS6mV7DcdJ85AG0eIz6OlKVGlKv1HZgF/ZqLi7iV4vDy1TSnW6InMvu2PM1yoE0+ asa8rUjWfo4wU6/qGhOfGCgJ3wahpUD2gnkMiyyq8ZPS05ktHXw7vpcYp9dYH7QC nULfocvmuj1JaQj5X9Q313/eSRiF3ahr4WUjGZ5DptQmNPdCmLCOs4WFbGENGKbZ K1A5iWd6VdFQBtX4juXblvEebQ9akeZ7BgpZRUJhW2mOaZVI4mEMUuxDBKRkLbbQ TMFLnQWLy/HRqR12cjSWouIvL+Kvdoc= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:11 2026 by rpki-client