$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/74b8f18a-03af-3efd-855d-08cd5d5beccf.roa File: 74b8f18a-03af-3efd-855d-08cd5d5beccf.roa (raw, json) Hash identifier: wFe92MwacrwmmiHH6zQebuv8Xw75DWIiFhSW1QPzJ5o= Subject key identifier: FA:2F:0E:8C:0D:1E:FD:2E:F4:92:32:3E:13:3B:BD:AC:05:89:3A:08 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CD6D1FD225EDE3695842215C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/74b8f18a-03af-3efd-855d-08cd5d5beccf.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d1:fd:22:5e:de:36:95:84:22:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=539a2fd1-f907-4c04-9623-a612f6f84847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4d:56:aa:13:78:51:f7:d4:a3:92:1a:6e:73: 36:46:06:9d:33:e0:18:ec:c4:3f:17:5d:f7:ef:f0: 7f:57:34:f9:47:3f:b1:a1:5a:cf:06:e5:7f:70:09: d5:cd:c1:73:51:8a:71:9c:8e:dc:3d:da:cc:74:25: cd:3b:4e:d0:a4:76:7f:c7:4a:da:00:8f:7c:e2:14: a4:d3:28:e0:db:f0:30:f4:99:95:fb:38:d2:9c:ff: 29:24:78:73:c2:03:66:7f:09:42:9d:7c:98:c5:34: 21:11:ea:2c:37:fd:98:c0:b9:3d:1d:be:01:28:fb: 74:2f:a3:0e:28:ba:53:33:f6:16:6a:b7:8f:48:14: 50:06:40:17:c7:d2:13:80:9d:54:22:6e:9c:cb:26: 8f:f8:e0:0c:fa:d6:41:e7:5a:63:31:a1:94:35:f5: 75:16:b3:a6:f0:e2:02:5d:5d:91:2f:f5:88:b7:e5: 1d:82:52:41:d5:1b:0c:58:c0:87:64:ff:78:09:99: d4:65:ea:ce:4f:e6:0c:1a:d7:8e:fc:ca:73:b2:9a: 23:29:18:d5:2a:3d:e0:be:59:cb:9d:ed:23:20:ad: 6b:a6:88:6a:0e:12:c9:1b:09:69:8d:5b:3f:71:30: fa:49:cd:85:92:12:e9:a8:ff:20:43:fa:87:be:bd: 89:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2F:0E:8C:0D:1E:FD:2E:F4:92:32:3E:13:3B:BD:AC:05:89:3A:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/74b8f18a-03af-3efd-855d-08cd5d5beccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4e:65:b9:78:dd:52:17:1b:bb:a5:d7:9d:b2:3b:df:ab:89: 7a:70:c9:11:0e:17:2a:72:30:be:22:c5:60:54:a5:1f:66:d3: 7e:14:0e:93:16:ec:20:0f:5b:97:98:28:0b:2f:58:74:72:c0: 29:ee:5a:05:32:04:09:05:32:0a:6e:8c:03:d0:7b:45:a5:0f: a9:53:2f:c7:c3:62:53:53:7e:91:63:cb:f5:50:c9:28:f6:f2: 4d:29:5e:b6:19:45:44:01:ad:32:61:11:91:f2:af:c1:e9:7b: 6b:a4:bb:ec:ea:a3:21:32:47:03:11:af:d6:09:04:37:e2:50: a1:26:c0:93:80:23:68:ac:00:3a:e4:6a:a6:49:0b:ab:b9:87: 9d:c5:e1:5c:c2:ab:00:83:34:5e:dc:51:80:1d:fe:01:0c:4e: 3a:60:fa:f7:88:47:cb:65:a2:27:2b:88:34:54:ab:29:d3:47: 7e:62:83:0d:88:12:18:45:e5:60:f2:70:51:18:70:22:f4:90: 28:8c:08:90:cc:2e:60:0c:b1:2d:48:08:30:df:83:1d:0c:00: 89:74:7b:d0:fc:bc:19:72:6e:36:1a:51:60:49:1d:97:91:0a: 08:3f:c8:7d:29:4e:d1:29:79:af:55:20:5c:87:74:de:8a:4a: 2c:06:87:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0f0iXt42lYQiFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk NTM5YTJmZDEtZjkwNy00YzA0LTk2MjMtYTYxMmY2Zjg0ODQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE1WqhN4UffUo5IabnM2RgadM+AY7MQ/F133 7/B/VzT5Rz+xoVrPBuV/cAnVzcFzUYpxnI7cPdrMdCXNO07QpHZ/x0raAI984hSk 0yjg2/Aw9JmV+zjSnP8pJHhzwgNmfwlCnXyYxTQhEeosN/2YwLk9Hb4BKPt0L6MO KLpTM/YWarePSBRQBkAXx9ITgJ1UIm6cyyaP+OAM+tZB51pjMaGUNfV1FrOm8OIC XV2RL/WIt+UdglJB1RsMWMCHZP94CZnUZerOT+YMGteO/MpzspojKRjVKj3gvlnL ne0jIK1rpohqDhLJGwlpjVs/cTD6Sc2FkhLpqP8gQ/qHvr2JowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPovDowNHv0u9JIyPhM7vawFiToIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzRiOGYxOGEtMDNhZi0z ZWZkLTg1NWQtMDhjZDVkNWJlY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFOZbl43VIXG7ul152yO9+riXpwyREOFypyML4ixWBUpR9m034UDpMW 7CAPW5eYKAsvWHRywCnuWgUyBAkFMgpujAPQe0WlD6lTL8fDYlNTfpFjy/VQySj2 8k0pXrYZRUQBrTJhEZHyr8Hpe2uku+zqoyEyRwMRr9YJBDfiUKEmwJOAI2isADrk aqZJC6u5h53F4VzCqwCDNF7cUYAd/gEMTjpg+veIR8tloicriDRUqynTR35igw2I EhhF5WDycFEYcCL0kCiMCJDMLmAMsS1ICDDfgx0MAIl0e9D8vBlybjYaUWBJHZeR Cgg/yH0pTtEpea9VIFyHdN6KSiwGhzg= -----END CERTIFICATE-----Generated at Mon Mar 2 18:12:42 2026 by rpki-client