$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea538004-6f2f-32c7-aa95-11998a593420.roa File: ea538004-6f2f-32c7-aa95-11998a593420.roa (raw, json) Hash identifier: dgsrwmGbM4AySwVKV8ySRZFoRBwxJ4bqNJQ/gCN2jO4= Subject key identifier: 2D:90:E8:D1:DB:7A:DC:FF:D7:51:DD:AC:D2:1C:70:C1:C4:90:15:DD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CD6D2064AF98C157E81746E80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea538004-6f2f-32c7-aa95-11998a593420.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:06:4a:f9:8c:15:7e:81:74:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=85f78592-d399-4e56-a06d-d7f43bde6971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:40:e2:8c:c2:3e:7f:77:19:ac:64:52:ff:36: 92:f0:48:39:1e:c7:4e:ba:ea:7e:ec:29:2f:07:45: 6f:0f:52:a4:b5:c9:4e:e8:c6:33:69:c0:e6:a0:4b: 8a:ce:ea:a8:97:98:9d:a3:73:a1:f6:12:5f:c3:05: 31:b1:77:12:59:c4:91:27:3c:ae:27:9b:d8:f2:06: 85:94:a7:72:a5:ec:75:f3:2f:2c:4f:3b:6c:29:a0: 6a:1f:4d:c7:22:77:0f:7e:6c:3a:91:0f:5d:98:7d: c5:5b:ba:a9:0d:9c:45:b5:c2:e0:65:ff:d1:21:31: 16:37:2e:b4:1c:a7:39:63:c2:f0:e0:fe:7f:63:78: d8:3e:f8:c0:4d:ce:90:5b:78:0c:72:c4:7a:91:18: 40:e6:e4:11:a2:61:3e:2d:34:c8:37:97:a2:29:72: a1:08:f2:22:bd:8e:f4:ca:a5:32:eb:11:a4:bc:80: 3a:e9:8d:dd:4d:07:e6:41:70:46:28:9e:b8:34:b2: f6:a2:40:b2:3b:f2:c4:36:4f:9a:e9:b5:28:f8:01: 40:fc:6b:c2:d1:44:10:bf:8b:5b:b8:b7:3d:8c:f7: b1:f1:9e:b4:b7:1f:a8:a7:6f:25:ed:3b:4c:31:ab: 67:1a:cf:a6:3c:c4:54:8e:f4:5a:be:22:54:34:4d: 1e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:90:E8:D1:DB:7A:DC:FF:D7:51:DD:AC:D2:1C:70:C1:C4:90:15:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea538004-6f2f-32c7-aa95-11998a593420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:37:88:c5:96:6e:93:d5:4b:36:6e:c1:59:14:36:e3:2a:58: 4f:46:d6:a5:e7:e4:46:5b:c4:f2:38:52:27:76:16:93:c4:32: b1:a5:94:83:65:14:f0:15:d1:2d:84:b0:6f:5a:34:6d:4d:d2: 10:c0:f6:55:6f:af:a8:8e:61:20:7c:5d:5a:86:75:6f:aa:84: e8:30:0d:df:20:60:a1:e2:e0:7a:41:01:2d:44:57:bd:b9:5e: 71:fe:c9:56:24:57:69:d6:de:67:48:7f:0a:ed:9d:1b:82:82: a5:55:ca:f7:26:51:4d:2b:3f:1d:27:3a:1c:8d:27:9a:0c:de: aa:63:85:ab:7a:ec:f0:24:50:b8:4a:34:b2:86:ec:c3:b3:dd: 19:fe:81:9f:a8:4b:8f:13:fb:24:c9:fd:05:5d:91:f2:c1:12: d0:94:a1:4c:65:5a:0a:2e:96:69:90:69:50:15:75:dc:00:48: 87:22:58:56:9a:5f:6a:11:25:09:ca:17:21:cb:69:7f:70:60: 34:95:f3:9f:c9:26:50:4c:8b:0c:af:b4:23:99:ea:c8:0a:82: a0:68:ac:0a:9d:2f:8b:c3:b8:1d:7e:aa:38:8f:94:3f:30:fa: d8:14:2f:55:83:67:f8:5c:e3:00:ac:60:5c:c0:d3:97:77:9e: 61:d9:c0:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0gZK+YwVfoF0boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk ODVmNzg1OTItZDM5OS00ZTU2LWEwNmQtZDdmNDNiZGU2OTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0DijMI+f3cZrGRS/zaS8Eg5HsdOuup+7Ckv B0VvD1KktclO6MYzacDmoEuKzuqol5ido3Oh9hJfwwUxsXcSWcSRJzyuJ5vY8gaF lKdypex18y8sTztsKaBqH03HIncPfmw6kQ9dmH3FW7qpDZxFtcLgZf/RITEWNy60 HKc5Y8Lw4P5/Y3jYPvjATc6QW3gMcsR6kRhA5uQRomE+LTTIN5eiKXKhCPIivY70 yqUy6xGkvIA66Y3dTQfmQXBGKJ64NLL2okCyO/LENk+a6bUo+AFA/GvC0UQQv4tb uLc9jPex8Z60tx+op28l7TtMMatnGs+mPMRUjvRaviJUNE0ePQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2Q6NHbetz/11HdrNIccMHEkBXdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWE1MzgwMDQtNmYyZi0z MmM3LWFhOTUtMTE5OThhNTkzNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHo3iMWWbpPVSzZuwVkUNuMqWE9G1qXn5EZbxPI4Uid2FpPEMrGllINl FPAV0S2EsG9aNG1N0hDA9lVvr6iOYSB8XVqGdW+qhOgwDd8gYKHi4HpBAS1EV725 XnH+yVYkV2nW3mdIfwrtnRuCgqVVyvcmUU0rPx0nOhyNJ5oM3qpjhat67PAkULhK NLKG7MOz3Rn+gZ+oS48T+yTJ/QVdkfLBEtCUoUxlWgoulmmQaVAVddwASIciWFaa X2oRJQnKFyHLaX9wYDSV85/JJlBMiwyvtCOZ6sgKgqBorAqdL4vDuB1+qjiPlD8w +tgUL1WDZ/hc4wCsYFzA05d3nmHZwPU= -----END CERTIFICATE-----Generated at Mon Mar 2 18:25:08 2026 by rpki-client