$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/609e63b1-2542-3de6-b833-b56dd677893b.roa File: 609e63b1-2542-3de6-b833-b56dd677893b.roa (raw, json) Hash identifier: FheZbD+Ch7toNhy2Cj1ALDjuCtJsx5wMyiJjRKY4Gl0= Subject key identifier: 3D:21:25:02:E8:39:0C:94:19:44:BE:58:6A:3D:99:74:52:4A:6F:AD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CD6D21A7C747B847111059600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/609e63b1-2542-3de6-b833-b56dd677893b.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:1a:7c:74:7b:84:71:11:05:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=3edc99b5-e5d0-40b7-bbe4-1858939be834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:58:09:d8:4b:61:89:43:06:5b:3e:68:f3:25: 2f:bd:b2:f9:a0:1b:7e:59:4b:90:c5:c8:e8:b3:2c: 91:4b:70:1e:4c:ba:b0:dc:58:cb:75:d3:65:b6:31: 03:37:21:af:f4:59:45:ca:4f:e2:69:b6:49:56:7f: f2:7e:ee:42:f6:11:54:20:d2:6c:42:e9:32:52:54: 5b:8f:95:c8:f9:67:95:e0:72:42:d7:22:85:83:bd: 43:99:30:95:26:e3:a5:b1:99:89:5c:47:ec:87:4f: 86:e2:20:0c:60:44:1f:d1:10:6b:e9:7d:dd:9b:e2: db:0e:a7:41:b6:ed:88:b7:f0:55:38:af:56:87:11: 17:39:e2:56:30:24:f9:7b:2c:f5:a3:c3:20:9a:03: da:a1:3c:29:a0:40:16:62:51:88:90:b7:14:bf:e0: 15:21:00:84:a4:28:56:40:e3:44:c5:10:32:8f:a4: 80:16:f3:d2:1f:89:58:03:76:8d:81:3a:5c:37:60: ab:fd:9f:21:7f:02:d6:10:71:8d:fd:3d:e4:0c:da: 1d:97:5e:43:ce:ad:19:6a:3b:71:16:ff:29:a3:95: 0c:b4:64:04:8e:dc:f2:70:7a:f3:a7:97:f8:32:11: 60:f1:f1:2e:50:b2:52:b6:8b:9e:8c:8b:5e:0b:66: 3e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:21:25:02:E8:39:0C:94:19:44:BE:58:6A:3D:99:74:52:4A:6F:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/609e63b1-2542-3de6-b833-b56dd677893b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c7:94:92:93:5e:17:10:f1:42:23:9e:10:ef:e4:4b:aa:35: f6:61:34:58:a9:1b:81:45:f0:de:86:c0:5d:e2:08:ec:fd:8f: 21:46:41:b1:63:c1:bf:4e:ca:1b:46:d0:4b:14:35:4c:94:e3: fd:d4:73:d6:41:8e:d6:93:1d:78:5a:ad:d4:f1:54:f9:8d:fa: 75:f3:af:e6:f2:9c:36:c8:1c:57:ec:ac:dc:08:fb:08:11:58: 86:48:44:27:2d:d3:49:7a:73:ed:11:49:a6:c8:14:35:0b:ce: db:44:d8:68:58:09:c0:e9:d1:02:cb:86:7d:b4:15:87:06:b8: e8:19:d6:1b:1b:89:a0:9f:47:bd:75:4d:96:e3:f3:11:0d:a1: 5e:fc:65:35:73:d1:5f:ff:3d:91:2e:0a:c4:ab:e3:46:b7:15: f8:03:0d:bd:84:1f:dc:a1:fd:f5:2b:80:22:16:15:b1:0c:57: 7d:33:b3:14:af:aa:ee:fb:a3:a3:11:9f:3f:4c:fb:aa:72:7e: 94:de:65:39:22:d0:80:d7:97:d6:98:90:5d:61:2b:c7:99:1c: ce:0c:b8:1e:8d:82:08:78:70:46:3d:d1:80:5c:2c:94:62:19: cf:43:c5:ae:54:62:1b:9c:ed:f5:45:d9:f4:73:e1:7e:1e:6d: f7:05:e6:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0hp8dHuEcREFlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk M2VkYzk5YjUtZTVkMC00MGI3LWJiZTQtMTg1ODkzOWJlODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVgJ2EthiUMGWz5o8yUvvbL5oBt+WUuQxcjo syyRS3AeTLqw3FjLddNltjEDNyGv9FlFyk/iabZJVn/yfu5C9hFUINJsQukyUlRb j5XI+WeV4HJC1yKFg71DmTCVJuOlsZmJXEfsh0+G4iAMYEQf0RBr6X3dm+LbDqdB tu2It/BVOK9WhxEXOeJWMCT5eyz1o8MgmgPaoTwpoEAWYlGIkLcUv+AVIQCEpChW QONExRAyj6SAFvPSH4lYA3aNgTpcN2Cr/Z8hfwLWEHGN/T3kDNodl15Dzq0Zajtx Fv8po5UMtGQEjtzycHrzp5f4MhFg8fEuULJStouejIteC2Y+jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0hJQLoOQyUGUS+WGo9mXRSSm+tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjA5ZTYzYjEtMjU0Mi0z ZGU2LWI4MzMtYjU2ZGQ2Nzc4OTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnHlJKTXhcQ8UIjnhDv5EuqNfZhNFipG4FF8N6GwF3iCOz9jyFGQbFj wb9OyhtG0EsUNUyU4/3Uc9ZBjtaTHXhardTxVPmN+nXzr+bynDbIHFfsrNwI+wgR WIZIRCct00l6c+0RSabIFDULzttE2GhYCcDp0QLLhn20FYcGuOgZ1hsbiaCfR711 TZbj8xENoV78ZTVz0V//PZEuCsSr40a3FfgDDb2EH9yh/fUrgCIWFbEMV30zsxSv qu77o6MRnz9M+6pyfpTeZTki0IDXl9aYkF1hK8eZHM4MuB6Nggh4cEY90YBcLJRi Gc9Dxa5UYhuc7fVF2fRz4X4ebfcF5sU= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:17 2026 by rpki-client