$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6952396b-a10f-3821-b98d-b381344b9d00.roa File: 6952396b-a10f-3821-b98d-b381344b9d00.roa (raw, json) Hash identifier: DZwUJJRG+ZQkTNjQPdlBJkPgBg+NvvSX+cpaX25U1v0= Subject key identifier: EE:64:02:5E:3C:6C:27:91:14:C1:8C:27:2C:87:66:EE:1D:32:8A:7F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC6121DD285FE01DAB18AAB00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6952396b-a10f-3821-b98d-b381344b9d00.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:1d:d2:85:fe:01:da:b1:8a:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=43a60c83-3fc3-48ff-ac14-cc3be30e22af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:10:92:77:6b:72:34:1b:dd:99:20:b1:65:73: f9:bc:45:da:a2:9b:75:a9:56:27:ae:7d:99:bc:08: 06:e9:33:a0:8c:aa:1a:7b:8f:1f:7f:aa:27:f4:b4: f4:7a:92:15:53:19:3a:db:ee:ad:4f:50:34:2b:85: 61:6f:c6:53:2f:1d:06:0a:a5:e4:df:05:35:6c:75: f5:0e:c7:bb:a4:19:37:20:31:1e:50:50:9b:c5:19: ca:ed:1e:4f:d8:ef:23:56:53:c0:5b:27:74:8f:8e: 89:5a:ce:63:6d:2d:aa:a7:6e:1e:bd:9a:6d:18:86: 5e:bd:38:b6:7f:6d:f8:d8:4c:d8:e0:d7:99:cb:74: 13:55:a2:fd:2a:5e:56:ab:16:de:50:13:33:0d:e1: 44:f4:bc:bc:2a:40:e0:ac:81:90:41:e6:93:a6:1e: b0:ee:95:77:f0:e0:7f:6a:a8:c4:d0:1e:f9:a1:aa: 81:b0:93:24:43:cd:ec:f3:97:79:de:70:10:ba:d1: 0a:48:bf:a3:52:27:97:3c:4c:c5:4b:e3:7d:5b:71: a8:61:d5:f5:1f:ed:8a:c8:46:d0:ee:81:ed:33:f7: 8b:c4:d3:ff:fc:ea:5d:16:06:5f:06:b5:34:cb:d1: 4e:09:e5:b6:48:39:21:32:d8:62:29:16:98:eb:e1: 3a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:64:02:5E:3C:6C:27:91:14:C1:8C:27:2C:87:66:EE:1D:32:8A:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6952396b-a10f-3821-b98d-b381344b9d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:25:64:d3:19:81:3f:a0:dd:56:c4:0e:0d:38:47:0a:7e:1f: b4:27:43:b8:28:3e:01:95:72:be:a2:3c:09:00:d3:f4:f5:13: 2a:f6:02:af:97:6f:76:4f:b3:2b:a7:6f:d8:69:0f:5f:2d:fb: ec:33:92:a0:12:66:51:b9:67:d4:73:0d:d5:24:0e:be:cc:1f: 32:ce:d3:78:5f:ec:f8:30:ba:76:aa:75:ce:bb:17:65:ed:e4: a0:e5:a1:d4:b1:bd:45:b3:b6:de:23:f3:4e:3c:29:d3:97:e0: d6:f8:a6:d7:8d:12:46:72:99:5a:95:c4:f4:2a:4f:c3:29:8a: c0:bd:80:9a:4b:bc:19:d6:58:cc:72:bb:89:33:ea:6f:2d:ee: 21:7c:08:26:32:3c:66:1b:3f:b3:e8:16:af:aa:c4:ef:30:97: db:a0:4f:c8:ea:71:44:6f:c0:23:9d:2b:09:02:bf:22:4f:80: 29:10:5f:e5:a1:58:4a:26:73:d8:d0:c8:df:e0:61:b7:2d:9c: 11:c0:e9:a2:f1:08:d3:70:2d:b6:b6:05:e0:85:81:84:5e:8f: 68:14:36:d4:f3:da:13:67:ec:41:72:68:35:7c:50:0e:df:3b: 15:be:06:f0:b4:a8:db:01:18:9e:e8:a1:ad:63:df:2b:b8:88: 48:bb:c7:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEh3Shf4B2rGKqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk NDNhNjBjODMtM2ZjMy00OGZmLWFjMTQtY2MzYmUzMGUyMmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxCSd2tyNBvdmSCxZXP5vEXaopt1qVYnrn2Z vAgG6TOgjKoae48ff6on9LT0epIVUxk62+6tT1A0K4Vhb8ZTLx0GCqXk3wU1bHX1 Dse7pBk3IDEeUFCbxRnK7R5P2O8jVlPAWyd0j46JWs5jbS2qp24evZptGIZevTi2 f2342EzY4NeZy3QTVaL9Kl5WqxbeUBMzDeFE9Ly8KkDgrIGQQeaTph6w7pV38OB/ aqjE0B75oaqBsJMkQ83s85d53nAQutEKSL+jUieXPEzFS+N9W3GoYdX1H+2KyEbQ 7oHtM/eLxNP//OpdFgZfBrU0y9FOCeW2SDkhMthiKRaY6+E6HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5kAl48bCeRFMGMJyyHZu4dMop/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjk1MjM5NmItYTEwZi0z ODIxLWI5OGQtYjM4MTM0NGI5ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMlZNMZgT+g3VbEDg04Rwp+H7QnQ7goPgGVcr6iPAkA0/T1Eyr2Aq+X b3ZPsyunb9hpD18t++wzkqASZlG5Z9RzDdUkDr7MHzLO03hf7Pgwunaqdc67F2Xt 5KDlodSxvUWztt4j8048KdOX4Nb4pteNEkZymVqVxPQqT8MpisC9gJpLvBnWWMxy u4kz6m8t7iF8CCYyPGYbP7PoFq+qxO8wl9ugT8jqcURvwCOdKwkCvyJPgCkQX+Wh WEomc9jQyN/gYbctnBHA6aLxCNNwLba2BeCFgYRej2gUNtTz2hNn7EFyaDV8UA7f OxW+BvC0qNsBGJ7ooa1j3yu4iEi7x0M= -----END CERTIFICATE-----Generated at Mon Mar 2 21:57:40 2026 by rpki-client