$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/686bda1e-0667-3f81-bc55-7f44920b456a.roa File: 686bda1e-0667-3f81-bc55-7f44920b456a.roa (raw, json) Hash identifier: py2ckjGk6PMpdB/UJVDeCf9whiuul6TCKXVNMpymsko= Subject key identifier: AD:3F:00:A9:3F:20:61:57:B9:B0:C7:87:40:DE:4C:FE:FA:E9:76:83 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC3474A701971879343F79400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/686bda1e-0667-3f81-bc55-7f44920b456a.roa Signing time: Thu 05 Feb 2026 14:00:40 +0000 ROA not before: Thu 05 Feb 2026 14:00:40 +0000 ROA not after: Wed 06 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c3:47:4a:70:19:71:87:93:43:f7:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 5 14:00:40 2026 GMT Not After : May 6 13:00:40 2026 GMT Subject: CN=b67c1089-ed10-4c87-9098-081fb2d4eb3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:a9:3f:a2:a8:df:d6:f3:60:f4:48:cc:3f: 97:f6:f6:73:8e:2d:06:fc:ad:26:ce:ef:40:9e:99: 51:1b:3f:03:5b:3b:e0:7f:b3:bd:b2:45:84:a7:66: 0a:00:8e:e8:75:ee:bf:96:06:f8:5e:e1:5c:8a:1e: fd:23:90:e3:47:47:c1:15:c7:b4:a6:91:39:0d:bd: 17:88:45:ed:4a:4f:3d:21:d6:ae:52:e7:1b:ee:cc: d2:5c:78:04:06:8f:cc:54:40:28:c7:a9:d5:e0:eb: 22:2b:1c:5b:e7:16:14:83:38:44:72:0a:ea:85:3e: 98:71:b6:75:51:7f:75:1e:85:f6:1a:84:d4:f8:20: a5:b6:30:62:00:7e:c7:e9:ae:1a:ba:1c:d4:1b:a9: 88:34:8a:94:fd:eb:d7:68:94:f2:1c:eb:c8:3f:7c: 06:39:28:c6:d0:90:ad:28:b6:9e:62:8d:f3:2f:20: 9d:a9:04:80:d0:1c:e5:c3:b3:3b:26:d6:e8:b9:ce: eb:87:72:86:3f:b4:13:a3:ac:80:b6:c5:05:ca:38: c6:b4:e4:ae:31:a6:6f:5c:22:ca:dc:02:58:89:60: e2:9b:a7:cc:c4:5f:3b:41:cd:ca:d9:f0:57:36:91: 0c:78:ef:d0:8b:47:71:01:34:e3:05:f9:ef:67:a2: 00:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3F:00:A9:3F:20:61:57:B9:B0:C7:87:40:DE:4C:FE:FA:E9:76:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/686bda1e-0667-3f81-bc55-7f44920b456a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e1:b5:4f:87:f9:85:54:f2:fc:04:ff:49:61:f4:11:11:3b: 42:2a:97:2d:4e:5d:e2:1d:28:68:ac:20:bb:1c:07:e5:3a:a3: cb:2a:1a:e5:09:5b:3c:1e:81:b9:d1:4c:4d:e0:f4:c4:a9:be: 88:8a:ec:e5:53:9b:2c:a2:fc:a3:48:6e:84:dd:01:5f:f6:13: 8e:a2:8d:19:85:47:9d:df:60:cb:3b:dd:65:66:8b:36:af:36: 39:8a:0e:db:0b:e6:92:e5:3b:99:99:b7:63:12:9d:70:f2:9b: dd:6d:97:1b:bd:2d:15:7e:1b:34:57:1f:e0:41:db:0e:bc:16: 62:79:be:71:7c:83:df:cb:61:d6:9e:1e:a8:2d:14:a8:7f:9a: aa:12:6b:7a:60:57:3b:97:ab:6f:f3:c2:ed:e7:fc:bd:00:a9: ed:28:eb:5b:eb:3a:02:02:25:43:7e:c3:fd:d6:27:ca:e7:d0: 57:ec:2a:8e:ed:07:8f:0f:c1:50:94:df:ad:22:d4:b9:ee:75: a1:85:83:e2:37:a5:93:5d:b5:ec:01:7d:94:ff:4b:df:60:fc: a2:de:a1:cb:28:8d:9d:71:27:31:93:af:14:98:b7:91:9e:d2: d8:73:ee:5e:b2:c2:80:3e:19:50:87:e7:5d:d4:e4:75:9f:92: 09:5f:a1:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzDR0pwGXGHk0P3lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk YjY3YzEwODktZWQxMC00Yzg3LTkwOTgtMDgxZmIyZDRlYjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx76pP6Ko39bzYPRIzD+X9vZzji0G/K0mzu9A nplRGz8DWzvgf7O9skWEp2YKAI7ode6/lgb4XuFcih79I5DjR0fBFce0ppE5Db0X iEXtSk89IdauUucb7szSXHgEBo/MVEAox6nV4OsiKxxb5xYUgzhEcgrqhT6YcbZ1 UX91HoX2GoTU+CCltjBiAH7H6a4auhzUG6mINIqU/evXaJTyHOvIP3wGOSjG0JCt KLaeYo3zLyCdqQSA0Bzlw7M7Jtbouc7rh3KGP7QTo6yAtsUFyjjGtOSuMaZvXCLK 3AJYiWDim6fMxF87Qc3K2fBXNpEMeO/Qi0dxATTjBfnvZ6IA4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0/AKk/IGFXubDHh0DeTP766XaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjg2YmRhMWUtMDY2Ny0z ZjgxLWJjNTUtN2Y0NDkyMGI0NTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvhtU+H+YVU8vwE/0lh9BERO0Iqly1OXeIdKGisILscB+U6o8sqGuUJ WzwegbnRTE3g9MSpvoiK7OVTmyyi/KNIboTdAV/2E46ijRmFR53fYMs73WVmizav NjmKDtsL5pLlO5mZt2MSnXDym91tlxu9LRV+GzRXH+BB2w68FmJ5vnF8g9/LYdae HqgtFKh/mqoSa3pgVzuXq2/zwu3n/L0Aqe0o61vrOgICJUN+w/3WJ8rn0FfsKo7t B48PwVCU360i1LnudaGFg+I3pZNdtewBfZT/S99g/KLeocsojZ1xJzGTrxSYt5Ge 0thz7l6ywoA+GVCH513U5HWfkglfoeE= -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:27 2026 by rpki-client