$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3fc124b-95da-3ef8-a27d-46036565139c.roa File: d3fc124b-95da-3ef8-a27d-46036565139c.roa (raw, json) Hash identifier: vPLLm05DlVH5fk9Ks23WiOjWa4UkprxUVPdgmNnKLsE= Subject key identifier: FA:D0:DF:94:94:67:15:93:D8:DC:0C:C8:1A:BB:6E:F1:BF:95:57:62 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CD6D1FE1C4686D719DA4624C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3fc124b-95da-3ef8-a27d-46036565139c.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d1:fe:1c:46:86:d7:19:da:46:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=b29e978b-fe3d-4c8f-b264-1be0a3e5aad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:88:95:58:21:45:ec:c3:21:8f:bf:aa:7f: 59:2f:17:de:5f:a8:53:bb:19:56:3f:a8:a7:e8:e5: c8:76:0e:06:ab:12:dc:51:de:e7:fc:6c:d0:db:a2: dc:66:5b:a5:c8:b5:9c:3c:5b:d5:cc:aa:1c:da:78: a9:bc:56:1d:93:ad:9b:18:a4:c4:95:95:6c:28:ee: 2b:74:59:e7:49:67:3f:87:73:8f:35:c4:9c:b1:cb: 1d:e6:ea:a3:f0:d5:8b:57:cd:91:14:a6:23:b3:1f: b1:2e:c0:16:ff:02:d5:24:cb:a4:34:22:3e:66:6c: f4:c0:ae:15:dc:f4:5a:21:92:99:d7:e0:01:8f:94: a4:34:e1:fc:d5:a9:49:9e:9a:7f:57:9d:fc:d8:77: c2:81:49:8d:ef:6a:e4:e5:c6:23:3e:df:94:55:33: 1d:c2:ee:b2:b7:78:0a:6d:44:2f:3d:67:6e:fd:6c: 5e:23:e6:02:bb:19:1d:18:51:ca:e8:83:a3:dc:ec: 35:d8:85:c2:5f:a3:8d:9a:54:b2:c9:52:02:35:5a: 65:8c:37:a9:e0:99:25:76:a8:61:08:c9:e4:3d:ef: 75:7c:86:e8:3c:f7:e7:87:4d:75:43:84:64:1f:02: d3:a7:85:70:c0:ed:f0:13:d6:1c:59:18:02:5d:f4: 5a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D0:DF:94:94:67:15:93:D8:DC:0C:C8:1A:BB:6E:F1:BF:95:57:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3fc124b-95da-3ef8-a27d-46036565139c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:e4:23:58:7a:7b:7a:7a:28:b5:61:77:02:33:f5:e0:db:25: 80:9b:65:7d:63:10:9e:77:5a:90:b2:8b:f5:f6:c5:bf:bc:f1: 13:9a:cb:8f:19:5f:bc:77:e5:b8:d4:e0:01:2f:71:5c:29:5b: 8a:dc:e8:ed:6b:f7:ce:a2:43:96:59:8f:99:c6:21:69:49:03: 0a:b0:79:db:a9:41:8d:60:3f:13:dc:af:ff:3e:b9:ae:4f:22: c3:7f:d8:4e:2f:24:6d:fc:5a:97:36:3c:f8:87:0a:bb:e2:2c: 2d:bb:b5:35:8b:d0:8b:38:24:c5:6b:e5:ac:0b:94:8a:93:29: 68:73:36:76:b2:21:1f:d6:09:f5:60:89:c5:93:0d:c8:b4:33: 82:eb:95:bf:8a:b5:cb:d5:c5:03:8b:7a:78:a5:b0:e4:a6:79: f5:66:fd:4c:85:b5:66:da:56:75:67:62:64:60:89:c5:3b:fa: 8a:fa:37:40:10:f8:95:30:da:81:be:fd:22:c0:df:9c:b1:95: b5:1a:6b:9e:7a:8e:fd:fe:bf:a8:5d:62:27:6f:aa:c5:6b:59: f9:8a:d3:35:66:04:fe:e9:07:18:69:ed:11:04:04:7b:95:bd: f9:e7:c2:b5:3d:ec:96:3d:55:28:8c:69:8e:7e:95:59:3e:03: c5:9b:69:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0f4cRobXGdpGJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk YjI5ZTk3OGItZmUzZC00YzhmLWIyNjQtMWJlMGEzZTVhYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPiIlVghRezDIY+/qn9ZLxfeX6hTuxlWP6in 6OXIdg4GqxLcUd7n/GzQ26LcZlulyLWcPFvVzKoc2nipvFYdk62bGKTElZVsKO4r dFnnSWc/h3OPNcScscsd5uqj8NWLV82RFKYjsx+xLsAW/wLVJMukNCI+Zmz0wK4V 3PRaIZKZ1+ABj5SkNOH81alJnpp/V5382HfCgUmN72rk5cYjPt+UVTMdwu6yt3gK bUQvPWdu/WxeI+YCuxkdGFHK6IOj3Ow12IXCX6ONmlSyyVICNVpljDep4Jkldqhh CMnkPe91fIboPPfnh011Q4RkHwLTp4VwwO3wE9YcWRgCXfRa1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrQ35SUZxWT2NwMyBq7bvG/lVdiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDNmYzEyNGItOTVkYS0z ZWY4LWEyN2QtNDYwMzY1NjUxMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3kI1h6e3p6KLVhdwIz9eDbJYCbZX1jEJ53WpCyi/X2xb+88ROay48Z X7x35bjU4AEvcVwpW4rc6O1r986iQ5ZZj5nGIWlJAwqwedupQY1gPxPcr/8+ua5P IsN/2E4vJG38Wpc2PPiHCrviLC27tTWL0Is4JMVr5awLlIqTKWhzNnayIR/WCfVg icWTDci0M4Lrlb+KtcvVxQOLenilsOSmefVm/UyFtWbaVnVnYmRgicU7+or6N0AQ +JUw2oG+/SLA35yxlbUaa556jv3+v6hdYidvqsVrWfmK0zVmBP7pBxhp7REEBHuV vfnnwrU97JY9VSiMaY5+lVk+A8WbaaM= -----END CERTIFICATE-----Generated at Mon Mar 2 18:27:12 2026 by rpki-client