$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a0d833cb-ebc1-309a-a1c5-612ae3226a6e.roa File: a0d833cb-ebc1-309a-a1c5-612ae3226a6e.roa (raw, json) Hash identifier: Hdrr+x8BF3P+r9VE7QBjtj09XJq2mT70lxy8I0q6W4o= Subject key identifier: D2:BE:79:37:71:AA:3E:C5:3F:05:2B:2B:01:F2:D0:E7:28:00:8D:86 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CD6D216DE8E3598D3EF31DF80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a0d833cb-ebc1-309a-a1c5-612ae3226a6e.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:16:de:8e:35:98:d3:ef:31:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=eaa30459-4e07-4930-8526-97ca0d37756c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b6:c7:20:d9:cc:be:9f:21:16:00:cc:60:8a: 6b:7a:d8:a5:d5:08:58:f8:62:44:11:5d:aa:db:d0: 9c:62:b4:b9:16:58:9f:4e:95:01:9c:e4:42:7a:9d: a6:13:49:a6:17:af:18:05:8a:3d:20:d1:68:22:06: cb:5e:c6:39:1e:89:b2:3c:b1:7d:ec:bb:44:94:38: 05:22:88:80:00:1f:ab:6d:70:c1:28:9a:c0:0d:de: da:59:38:28:21:46:35:b6:d0:10:52:24:93:d4:9f: f7:1c:34:5d:45:94:6b:fd:c0:16:1e:d8:97:d9:1b: 4c:86:47:69:41:fd:84:14:a3:d4:d5:d9:f2:db:3f: 21:ef:bd:bb:7f:aa:ff:09:16:1c:69:ba:f9:26:c5: b9:fd:ac:15:c7:2e:54:3d:a8:33:55:bc:e9:08:25: 84:18:15:90:7d:77:ba:2b:51:4f:0b:69:ea:d4:5e: 3e:9e:cf:8a:2e:ee:f6:f6:e1:75:2f:8a:e4:93:c0: 85:4a:b5:45:e8:af:41:04:10:b7:ac:6a:36:1f:e9: e1:7e:d7:2e:82:e7:25:ab:0e:64:f1:28:47:fe:81: 50:1a:85:fa:16:9d:3f:b7:00:c5:bc:32:5a:c3:9c: 94:1b:31:40:02:1a:99:b0:48:85:bf:04:80:48:33: c2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BE:79:37:71:AA:3E:C5:3F:05:2B:2B:01:F2:D0:E7:28:00:8D:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a0d833cb-ebc1-309a-a1c5-612ae3226a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:e4:55:cf:be:aa:5b:3c:36:7f:52:0e:e5:7c:c4:88:74:34: 4b:5e:d8:92:28:42:50:55:22:5c:69:33:aa:5f:ac:4d:e8:76: 2f:dc:5d:61:65:36:cb:80:0d:a7:e4:1f:13:3d:12:82:2e:c2: c2:8f:b8:0c:58:5e:2f:da:de:95:e0:18:b6:be:85:03:91:50: 19:00:06:f1:33:23:ef:ea:ab:10:04:05:e2:3e:e0:14:50:1f: 52:34:d8:1a:47:0c:7e:fb:5e:f8:7b:2a:ed:87:b4:72:b8:9b: 04:78:d2:2f:f2:10:f9:71:e1:a0:55:51:a7:e5:c7:97:b1:b1: ee:26:4b:18:b5:b8:a2:f4:0f:de:99:a1:05:66:7e:d0:05:a4: ab:ce:34:e7:9b:c2:29:fa:b9:79:d7:5b:3c:c5:92:c3:e1:c3: 5b:87:b3:6a:f3:38:ff:84:8b:7d:41:d6:c0:6f:7e:59:ac:24: a7:f5:f6:bf:29:5d:4a:d9:10:d1:b5:65:6b:7a:8f:24:66:38: d5:2d:8d:1c:ee:9a:8d:60:a5:72:8e:ec:4f:c0:8c:97:1d:fd: aa:03:0d:4a:08:de:eb:9c:83:3f:9f:96:ba:a5:99:db:12:0c: d7:b3:fc:f8:f4:ba:5c:64:ec:eb:43:ea:7d:5f:f3:a0:5f:1b: c1:72:41:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0hbejjWY0+8x34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk ZWFhMzA0NTktNGUwNy00OTMwLTg1MjYtOTdjYTBkMzc3NTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbbHINnMvp8hFgDMYIpretil1QhY+GJEEV2q 29CcYrS5FlifTpUBnORCep2mE0mmF68YBYo9INFoIgbLXsY5HomyPLF97LtElDgF IoiAAB+rbXDBKJrADd7aWTgoIUY1ttAQUiST1J/3HDRdRZRr/cAWHtiX2RtMhkdp Qf2EFKPU1dny2z8h7727f6r/CRYcabr5JsW5/awVxy5UPagzVbzpCCWEGBWQfXe6 K1FPC2nq1F4+ns+KLu729uF1L4rkk8CFSrVF6K9BBBC3rGo2H+nhftcuguclqw5k 8ShH/oFQGoX6Fp0/twDFvDJaw5yUGzFAAhqZsEiFvwSASDPCjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNK+eTdxqj7FPwUrKwHy0OcoAI2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTBkODMzY2ItZWJjMS0z MDlhLWExYzUtNjEyYWUzMjI2YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrkVc++qls8Nn9SDuV8xIh0NEte2JIoQlBVIlxpM6pfrE3odi/cXWFl NsuADafkHxM9EoIuwsKPuAxYXi/a3pXgGLa+hQORUBkABvEzI+/qqxAEBeI+4BRQ H1I02BpHDH77Xvh7Ku2HtHK4mwR40i/yEPlx4aBVUaflx5exse4mSxi1uKL0D96Z oQVmftAFpKvONOebwin6uXnXWzzFksPhw1uHs2rzOP+Ei31B1sBvflmsJKf19r8p XUrZENG1ZWt6jyRmONUtjRzumo1gpXKO7E/AjJcd/aoDDUoI3uucgz+flrqlmdsS DNez/Pj0ulxk7OtD6n1f86BfG8FyQXs= -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:43 2026 by rpki-client