$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3457f2c-3a55-3e62-87a9-8e24926a0545.roa File: b3457f2c-3a55-3e62-87a9-8e24926a0545.roa (raw, json) Hash identifier: lt7e+TjrkAjCGGBamE9h6gCmq8GaNXRQaIB9Gs61Zz8= Subject key identifier: 63:A9:FD:CC:02:05:78:28:18:29:C3:A2:58:94:39:30:2E:CB:F6:1B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC6121D5175321C98582B3B00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3457f2c-3a55-3e62-87a9-8e24926a0545.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:1d:51:75:32:1c:98:58:2b:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=a5ffd401-5e29-44b7-bb02-818dc46365ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b3:5e:1d:aa:a3:aa:51:d3:91:02:08:6e:b7: cd:6b:4d:56:69:15:92:20:03:75:e1:f3:e2:d7:b0: f9:3e:7c:7e:5c:91:ca:cc:0a:5b:be:3f:ad:4f:8a: b3:75:af:43:49:43:38:a2:80:9f:3e:a5:bc:ea:41: 25:22:f0:f7:7f:de:58:f5:d6:de:af:70:cf:5a:a4: 79:ff:b7:12:24:70:8a:ed:74:da:ed:43:0f:fb:2b: 19:44:93:a7:da:cb:fb:6e:b3:cf:f8:2d:d2:9b:5f: a7:4e:85:95:0f:dc:98:8b:ab:fd:37:d7:95:4e:4c: ed:f0:21:7b:90:ca:dc:6b:68:e6:65:27:0a:3a:91: ad:d6:7c:69:fd:17:4f:6c:40:70:42:42:f8:79:f7: 5a:60:be:36:dc:07:39:d8:d2:9e:98:bf:69:41:59: 7b:55:e2:5e:40:08:c2:41:f8:fc:38:7c:f1:26:29: bd:0f:a1:07:5e:a0:d3:0e:7b:88:93:8b:0b:83:47: fc:2b:c9:50:89:3a:96:f4:23:62:56:10:fd:08:fd: 65:d8:c1:27:10:d3:49:97:f1:7b:75:96:51:3d:26: 1f:46:10:74:fe:93:7c:f8:f7:3e:52:18:dd:b6:7c: 78:c3:c1:ac:2c:2d:b4:ff:47:88:b3:f5:ab:02:aa: a0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A9:FD:CC:02:05:78:28:18:29:C3:A2:58:94:39:30:2E:CB:F6:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3457f2c-3a55-3e62-87a9-8e24926a0545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:5c:5c:b4:b5:c5:18:65:56:31:69:06:e4:c5:d7:46:76:ea: a7:0d:00:9c:b5:66:04:1e:89:ec:c0:c5:ad:69:c4:da:ca:f2: 14:7e:50:0b:81:8b:8f:13:18:18:92:41:2a:ae:af:e0:e5:cc: f2:d5:c9:bc:b5:32:9c:8f:65:d4:66:4b:ec:12:67:79:6c:e5: 12:bd:e0:07:d1:18:54:d5:83:4c:a6:15:2d:48:5e:12:9c:64: 79:60:2c:ee:09:8b:e5:df:f2:63:d0:38:cf:28:45:70:22:15: cc:df:23:6e:28:14:21:05:68:9e:f1:ed:0e:b5:f9:52:be:25: eb:05:83:4e:1e:92:71:31:72:52:f0:66:32:d8:5f:33:84:90: a6:44:4a:7d:fb:3f:52:b8:22:df:3c:5b:03:ca:00:3d:56:09: 60:8f:52:d5:4f:5a:36:c0:ec:a3:7e:cd:16:d5:0a:72:19:76: 3b:59:01:f4:e0:5e:a1:c2:92:cd:7b:ca:c1:c7:b0:69:fe:fa: 8d:e9:72:23:e2:87:b1:9c:01:9a:5d:63:45:90:ed:36:93:6f: d3:11:73:45:e1:89:58:ad:32:96:60:1b:29:58:18:c1:6e:ad: a5:79:67:3d:2f:61:6d:23:de:92:06:93:7d:0d:f2:16:2c:4c: b2:de:e3:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEh1RdTIcmFgrOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk YTVmZmQ0MDEtNWUyOS00NGI3LWJiMDItODE4ZGM0NjM2NWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7NeHaqjqlHTkQIIbrfNa01WaRWSIAN14fPi 17D5Pnx+XJHKzApbvj+tT4qzda9DSUM4ooCfPqW86kElIvD3f95Y9dber3DPWqR5 /7cSJHCK7XTa7UMP+ysZRJOn2sv7brPP+C3Sm1+nToWVD9yYi6v9N9eVTkzt8CF7 kMrca2jmZScKOpGt1nxp/RdPbEBwQkL4efdaYL423Ac52NKemL9pQVl7VeJeQAjC Qfj8OHzxJim9D6EHXqDTDnuIk4sLg0f8K8lQiTqW9CNiVhD9CP1l2MEnENNJl/F7 dZZRPSYfRhB0/pN8+Pc+Uhjdtnx4w8GsLC20/0eIs/WrAqqgUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOp/cwCBXgoGCnDoliUOTAuy/YbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjM0NTdmMmMtM2E1NS0z ZTYyLTg3YTktOGUyNDkyNmEwNTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZcXLS1xRhlVjFpBuTF10Z26qcNAJy1ZgQeiezAxa1pxNrK8hR+UAuB i48TGBiSQSqur+DlzPLVyby1MpyPZdRmS+wSZ3ls5RK94AfRGFTVg0ymFS1IXhKc ZHlgLO4Ji+Xf8mPQOM8oRXAiFczfI24oFCEFaJ7x7Q61+VK+JesFg04eknExclLw ZjLYXzOEkKZESn37P1K4It88WwPKAD1WCWCPUtVPWjbA7KN+zRbVCnIZdjtZAfTg XqHCks17ysHHsGn++o3pciPih7GcAZpdY0WQ7TaTb9MRc0XhiVitMpZgGylYGMFu raV5Zz0vYW0j3pIGk30N8hYsTLLe47o= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:23 2026 by rpki-client