$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa File: b7b843e5-1b24-372c-a453-258435c10dbf.roa (raw, json) Hash identifier: TttovErKxbEHPkTq8/Kdxtk77XiQKc+86XevwOcef18= Subject key identifier: 6E:2B:1D:4D:C8:5D:CC:11:37:A1:9A:24:E0:64:99:B1:1F:AE:18:88 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CD6D20452CCAF83CFE08321A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:04:52:cc:af:83:cf:e0:83:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=3c881412-6a04-407e-9bba-25907eb27e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:cd:55:ee:e4:00:00:bd:c5:6e:22:80:36: 8f:c1:73:4c:da:ca:54:f3:b3:fc:be:8a:9a:89:0e: 00:1a:b0:a7:49:8b:57:80:8d:87:c8:4b:b5:01:55: 3a:96:05:66:3d:ac:d7:06:0a:95:40:f3:5c:8f:97: f1:07:47:77:e7:79:52:15:d2:16:04:14:05:c0:62: 38:b2:87:08:28:0d:dc:e3:ac:09:1f:f1:75:f4:3f: 21:48:9b:65:18:ff:89:8f:c9:5a:2f:9a:4f:20:f5: f4:f3:a8:09:09:d9:f4:05:7a:38:13:48:1c:56:79: e0:d0:25:a9:53:78:69:51:54:a5:f5:4b:85:b1:64: b1:61:bb:68:8c:13:8e:ac:2a:5d:a9:78:92:38:81: b5:0e:03:40:54:ef:1a:a2:97:27:92:15:23:89:29: e8:41:7b:18:54:7b:0a:0f:21:d7:8c:c3:39:13:bf: ef:4f:12:b4:ca:78:2c:30:69:06:ef:60:cb:25:f6: e9:8a:7c:d3:01:fc:e1:95:15:04:aa:15:97:a0:cc: 93:6b:32:3a:bf:82:6a:8a:fb:57:3c:32:e6:95:1d: f4:e5:10:f6:31:27:e6:43:71:32:56:0c:3a:6f:bf: c7:f6:79:21:d4:49:3b:14:19:c3:fa:83:65:a1:35: de:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2B:1D:4D:C8:5D:CC:11:37:A1:9A:24:E0:64:99:B1:1F:AE:18:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:1f:5f:75:21:48:f4:5e:2f:10:62:f0:a0:ff:bc:21:f8:66: f3:8e:e7:4b:6d:2a:58:a5:0c:fd:62:95:27:99:bb:da:a3:39: cb:2d:14:eb:96:38:de:24:ae:49:7e:80:33:07:f6:f3:31:54: 1b:fc:64:41:45:f4:0f:ed:fd:c7:70:9d:e2:e9:fb:91:c3:47: 54:f6:e1:19:55:e2:5b:42:25:e5:fe:65:37:b7:c0:ac:6e:4f: 2d:a8:71:70:4b:9d:98:35:db:de:96:d6:84:ef:a5:39:50:a4: 10:48:ca:52:ce:52:1d:5e:43:4c:5d:71:7e:fd:2c:b6:2d:a7: 2d:79:dd:e7:ad:b0:3f:6f:8b:b5:3d:0a:05:e0:43:42:08:a0: ae:5d:45:9c:73:cd:1f:72:c1:f1:dc:75:9e:ac:e7:45:8c:f5: 44:5a:08:05:0d:1c:29:50:83:8e:74:83:4a:bd:6e:40:5f:af: 0a:76:53:3e:03:7f:00:64:53:1d:ae:74:33:00:cc:20:f5:08: 4c:b9:b1:10:f7:23:bf:8e:71:c9:81:5e:43:d8:3c:2c:ef:fb: be:64:3c:17:4c:ca:9b:62:c0:c4:d3:0e:a9:f3:cd:45:e2:27: 53:ab:e1:f3:0e:6e:92:41:ea:8a:6c:e8:32:d7:50:79:24:77: 5a:8b:33:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0gRSzK+Dz+CDIaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk M2M4ODE0MTItNmEwNC00MDdlLTliYmEtMjU5MDdlYjI3ZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLDNVe7kAAC9xW4igDaPwXNM2spU87P8voqa iQ4AGrCnSYtXgI2HyEu1AVU6lgVmPazXBgqVQPNcj5fxB0d353lSFdIWBBQFwGI4 socIKA3c46wJH/F19D8hSJtlGP+Jj8laL5pPIPX086gJCdn0BXo4E0gcVnng0CWp U3hpUVSl9UuFsWSxYbtojBOOrCpdqXiSOIG1DgNAVO8aopcnkhUjiSnoQXsYVHsK DyHXjMM5E7/vTxK0yngsMGkG72DLJfbpinzTAfzhlRUEqhWXoMyTazI6v4JqivtX PDLmlR305RD2MSfmQ3EyVgw6b7/H9nkh1Ek7FBnD+oNloTXe0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4rHU3IXcwRN6GaJOBkmbEfrhiIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjdiODQzZTUtMWIyNC0z NzJjLWE0NTMtMjU4NDM1YzEwZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcfX3UhSPReLxBi8KD/vCH4ZvOO50ttKlilDP1ilSeZu9qjOcstFOuW ON4krkl+gDMH9vMxVBv8ZEFF9A/t/cdwneLp+5HDR1T24RlV4ltCJeX+ZTe3wKxu Ty2ocXBLnZg1296W1oTvpTlQpBBIylLOUh1eQ0xdcX79LLYtpy153eetsD9vi7U9 CgXgQ0IIoK5dRZxzzR9ywfHcdZ6s50WM9URaCAUNHClQg450g0q9bkBfrwp2Uz4D fwBkUx2udDMAzCD1CEy5sRD3I7+OccmBXkPYPCzv+75kPBdMyptiwMTTDqnzzUXi J1Or4fMObpJB6ops6DLXUHkkd1qLM+M= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:18 2026 by rpki-client