$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/29f8e2b8-20ab-3389-be34-ce6826b0bc51.roa File: 29f8e2b8-20ab-3389-be34-ce6826b0bc51.roa (raw, json) Hash identifier: 4O1VJZa1ZYiS0YSyUNPomDI5oLYLBgGpRBPoUKTEoxU= Subject key identifier: 27:C6:82:C9:E1:D7:3A:0D:3C:DE:E9:A8:5A:90:CB:C9:01:EB:A5:E8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D1B49CE91BD3FA9745000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/29f8e2b8-20ab-3389-be34-ce6826b0bc51.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:1b:49:ce:91:bd:3f:a9:74:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=d3067701-e46d-4b61-b523-55fc9874f8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:96:fb:67:98:c5:2b:0e:ae:83:ae:4b:60: 5c:1c:da:80:8a:3f:8e:da:c4:10:6e:5d:61:22:0f: 63:c9:63:e0:03:68:09:96:61:63:f4:7b:36:20:55: d6:8b:55:79:43:40:1c:d2:0a:27:40:b2:d1:86:62: 60:33:04:8b:eb:4d:c9:1e:ea:55:06:ac:0d:cd:a8: 2c:ba:ee:32:f7:9b:2b:24:1a:5e:1b:08:d2:2f:99: 0b:3e:39:4b:2b:70:7b:54:c0:59:7f:f0:00:6e:3d: 9f:9b:ea:c4:da:d8:c6:31:5b:f3:65:65:87:2a:48: 25:58:5e:ae:51:3e:4e:7e:23:40:69:61:47:5d:1f: ef:94:d7:ab:55:3c:4f:5a:8a:85:9e:70:90:68:2e: ae:8b:6e:d3:0f:35:5f:6a:6a:c9:c7:69:d6:bd:56: 74:95:d6:3a:64:eb:01:0e:80:1e:9c:2b:93:50:d7: b7:7e:d1:52:ef:67:e6:f2:5f:25:24:5e:9f:ef:37: 54:bf:08:3b:bc:94:99:ac:c9:c1:b3:5c:b7:eb:ed: ce:29:de:bd:d9:26:ec:f7:a4:1d:f0:9f:0b:7b:98: 91:a3:69:6b:c1:96:62:48:eb:52:91:9e:0c:bf:60: 7e:e5:a0:a6:ce:1e:a8:fb:46:37:22:d0:a5:08:25: 4d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C6:82:C9:E1:D7:3A:0D:3C:DE:E9:A8:5A:90:CB:C9:01:EB:A5:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/29f8e2b8-20ab-3389-be34-ce6826b0bc51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:4f:20:90:c4:c4:d2:89:cb:ea:4e:c0:3b:22:1f:19:20:a2: cf:eb:1b:42:21:fc:50:eb:d1:79:ab:2f:e4:1f:f0:59:5e:b8: 7a:d0:db:ad:db:f1:bd:fe:bf:a3:9d:87:37:30:b6:e1:7a:3a: 87:5c:56:c6:3b:a0:98:52:de:1e:aa:a5:3c:eb:d1:db:cc:ed: 48:e9:ea:32:85:1d:83:d3:7c:95:d4:b1:ab:f6:d1:d8:30:e5: 8d:79:2f:5a:32:58:48:b1:3d:8d:87:c4:bc:4b:9d:37:6f:96: e1:7d:b2:a7:10:4e:b6:6a:c5:1f:83:70:dc:ad:ce:8e:70:1d: 1f:5f:6e:c1:3d:d5:73:b4:ef:05:a6:77:8b:ed:fb:d5:d4:58: 82:c1:57:ed:be:cb:89:14:90:c3:3a:7a:c6:40:13:73:a4:cd: ae:99:d1:ae:c3:01:04:90:02:6b:ab:9e:41:54:d3:03:5b:cf: 46:21:10:df:ea:8c:dd:97:0a:db:20:f1:79:ea:d8:17:32:37: ec:fb:e4:3d:8c:6b:7a:23:98:20:17:fd:d5:64:ce:2e:df:c7: f3:a6:50:a4:5e:d1:0f:02:9f:07:e8:f2:6d:9d:7d:a3:5a:00: bc:b1:dd:94:d8:e4:57:e2:cd:17:9e:ef:da:d1:6b:45:04:94: 57:ec:d7:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPRtJzpG9P6l0UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDMwNjc3MDEtZTQ2ZC00YjYxLWI1MjMtNTVmYzk4NzRmOGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWeW+2eYxSsOroOuS2BcHNqAij+O2sQQbl1h Ig9jyWPgA2gJlmFj9Hs2IFXWi1V5Q0Ac0gonQLLRhmJgMwSL603JHupVBqwNzags uu4y95srJBpeGwjSL5kLPjlLK3B7VMBZf/AAbj2fm+rE2tjGMVvzZWWHKkglWF6u UT5OfiNAaWFHXR/vlNerVTxPWoqFnnCQaC6ui27TDzVfamrJx2nWvVZ0ldY6ZOsB DoAenCuTUNe3ftFS72fm8l8lJF6f7zdUvwg7vJSZrMnBs1y36+3OKd692Sbs96Qd 8J8Le5iRo2lrwZZiSOtSkZ4Mv2B+5aCmzh6o+0Y3ItClCCVNsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfGgsnh1zoNPN7pqFqQy8kB66XoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjlmOGUyYjgtMjBhYi0z Mzg5LWJlMzQtY2U2ODI2YjBiYzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJltMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJPIJDExNKJy+pOwDsiHxkgos/rG0Ih/FDr0XmrL+Qf8FleuHrQ263b 8b3+v6OdhzcwtuF6OodcVsY7oJhS3h6qpTzr0dvM7Ujp6jKFHYPTfJXUsav20dgw 5Y15L1oyWEixPY2HxLxLnTdvluF9sqcQTrZqxR+DcNytzo5wHR9fbsE91XO07wWm d4vt+9XUWILBV+2+y4kUkMM6esZAE3Okza6Z0a7DAQSQAmurnkFU0wNbz0YhEN/q jN2XCtsg8Xnq2BcyN+z75D2Ma3ojmCAX/dVkzi7fx/OmUKRe0Q8Cnwfo8m2dfaNa ALyx3ZTY5FfizRee79rRa0UElFfs17Y= -----END CERTIFICATE-----Generated at Sat Mar 7 12:46:59 2026 by rpki-client