$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2d246d-a182-371a-bc59-9c907d654829.roa File: ab2d246d-a182-371a-bc59-9c907d654829.roa (raw, json) Hash identifier: kpIG2NXEFFRECbzmCU0xYGNSIZQo2L18osDnpxD4HZ8= Subject key identifier: C5:E2:7E:DB:F0:48:66:6A:2F:70:0F:3B:68:E0:36:1A:E6:80:D8:43 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB6B724B5CEEA150A684FFB00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2d246d-a182-371a-bc59-9c907d654829.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.153.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:24:b5:ce:ea:15:0a:68:4f:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=8a3cbe08-cea7-466d-981e-8e5c4bf64db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:98:06:fa:82:33:6e:73:49:4e:ca:e7:26:b2: a6:0d:6c:ef:60:0f:5b:e9:22:d4:d9:da:54:bb:c1: 75:4e:69:57:a0:57:a9:ce:e7:d5:b4:69:b0:82:0f: 8b:3b:b9:14:4c:53:d1:3a:ec:85:a2:0f:9c:52:3d: dd:9c:0d:13:a7:03:05:90:63:d7:73:bc:6c:01:19: 0c:83:06:b9:28:3a:d7:10:f6:3f:10:7c:fb:77:4e: aa:5a:e6:80:d0:56:57:a6:b1:a4:64:84:93:d7:cd: 68:b2:6e:b6:e9:1a:0e:0c:34:ec:34:68:94:f0:bf: 27:26:95:89:14:35:ba:61:31:87:b8:29:02:f2:5e: f6:cb:de:63:6f:4b:c0:60:22:9a:51:8e:64:ee:29: 9a:fe:e5:56:52:59:5e:be:e5:fd:09:81:56:ce:f2: b6:cc:8c:49:2c:a3:e5:db:91:5a:21:3f:ab:1a:ac: c0:ed:7f:db:4d:2d:12:69:7d:8d:7f:fa:0c:ce:2c: fc:f0:71:54:05:b9:80:11:33:71:c9:47:fc:ec:a6: f0:1f:06:86:29:14:c4:61:0c:88:f7:71:b6:11:81: 58:fb:a1:39:31:7d:d1:2f:a5:c0:07:ab:8b:21:10: 7d:1c:19:78:8e:a0:92:88:47:8c:03:9f:64:ad:dc: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E2:7E:DB:F0:48:66:6A:2F:70:0F:3B:68:E0:36:1A:E6:80:D8:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2d246d-a182-371a-bc59-9c907d654829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:64:95:93:4b:4f:e4:37:f2:c2:df:db:2f:aa:82:13:4e:4a: 92:b6:5d:fd:a6:f2:f4:ae:bc:38:ea:2b:f4:3c:ba:bb:06:e1: 2d:61:8f:76:c4:42:92:ae:96:3e:9d:87:72:c3:2a:cf:0d:bd: 10:15:43:a6:6d:7a:0a:06:96:e3:6b:6e:10:38:bd:07:16:ca: 27:cc:ee:ae:0c:2a:c5:09:18:23:b3:f6:60:1c:03:ab:70:e9: 79:bf:bc:52:e6:43:10:35:37:9c:bd:b7:1a:7e:f6:bd:66:62: 00:2e:34:2a:b5:aa:10:24:e6:0b:67:68:5e:e7:4f:82:62:42: 8b:a3:f8:59:53:a0:b1:3e:26:6d:d8:9e:8a:55:c8:7a:96:99: 8e:a2:b4:88:94:c8:bd:11:0e:5e:1b:c4:1c:55:b0:01:49:8b: a2:8f:56:b5:44:23:8c:95:71:2f:8a:74:28:59:0a:68:4f:97: bc:3d:ff:16:9e:49:32:96:00:e4:71:7b:2b:2c:28:2f:e8:c3: e5:70:6d:65:06:90:31:05:e1:d1:f4:a0:16:94:97:33:f8:97: 75:f5:79:5d:a4:37:9f:2a:38:b6:a7:61:cd:75:7c:bf:b0:cd: 39:45:83:0b:ad:a0:69:0e:a2:36:df:08:cf:01:d0:0f:4d:e3: 62:9c:47:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tyS1zuoVCmhP+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk OGEzY2JlMDgtY2VhNy00NjZkLTk4MWUtOGU1YzRiZjY0ZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZgG+oIzbnNJTsrnJrKmDWzvYA9b6SLU2dpU u8F1TmlXoFepzufVtGmwgg+LO7kUTFPROuyFog+cUj3dnA0TpwMFkGPXc7xsARkM gwa5KDrXEPY/EHz7d06qWuaA0FZXprGkZIST181osm626RoODDTsNGiU8L8nJpWJ FDW6YTGHuCkC8l72y95jb0vAYCKaUY5k7ima/uVWUllevuX9CYFWzvK2zIxJLKPl 25FaIT+rGqzA7X/bTS0SaX2Nf/oMziz88HFUBbmAETNxyUf87KbwHwaGKRTEYQyI 93G2EYFY+6E5MX3RL6XAB6uLIRB9HBl4jqCSiEeMA59krdyCbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXiftvwSGZqL3APO2jgNhrmgNhDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWIyZDI0NmQtYTE4Mi0z NzFhLWJjNTktOWM5MDdkNjU0ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdklZNLT+Q38sLf2y+qghNOSpK2Xf2m8vSuvDjqK/Q8ursG4S1hj3bE QpKulj6dh3LDKs8NvRAVQ6ZtegoGluNrbhA4vQcWyifM7q4MKsUJGCOz9mAcA6tw 6Xm/vFLmQxA1N5y9txp+9r1mYgAuNCq1qhAk5gtnaF7nT4JiQouj+FlToLE+Jm3Y nopVyHqWmY6itIiUyL0RDl4bxBxVsAFJi6KPVrVEI4yVcS+KdChZCmhPl7w9/xae STKWAORxeyssKC/ow+VwbWUGkDEF4dH0oBaUlzP4l3X1eV2kN58qOLanYc11fL+w zTlFgwutoGkOojbfCM8B0A9N42KcR1w= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:29 2026 by rpki-client