$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/312f2e5f-b35c-3eea-a603-29052d85ef87.roa File: 312f2e5f-b35c-3eea-a603-29052d85ef87.roa (raw, json) Hash identifier: 54zr9bLPM5eAo+l5aFYDHINaf/RDFnVPEE/ggmyZwX0= Subject key identifier: DE:82:E5:6E:81:6B:04:F3:A6:22:B4:3A:D2:AF:DC:9F:9B:1C:F0:FC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D07F7B14E4B3922E0A000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/312f2e5f-b35c-3eea-a603-29052d85ef87.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:07:f7:b1:4e:4b:39:22:e0:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=1f2278fb-16e3-4430-b46e-8c8dd39757c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:a7:e6:d4:87:33:1a:37:24:06:e7:b6:27: 5c:f1:06:d8:d0:91:3a:4f:4a:d2:46:da:e4:b0:bc: 27:98:d4:cb:a3:96:ee:cb:74:57:3f:91:a1:62:4f: 55:f0:a7:e9:83:c3:48:75:b6:40:db:04:68:a6:34: db:7a:16:22:87:14:69:4c:d5:94:27:20:df:33:c7: e8:c4:18:b8:c2:a6:d6:d6:48:fd:23:26:f7:ed:38: 9a:f0:31:33:5b:90:e6:19:fb:8f:ad:0c:1c:e1:39: 9c:5a:6c:d6:b8:11:d2:56:ad:d5:f2:b7:8f:70:ff: ce:b3:cd:f8:c5:2e:69:da:37:f0:e1:97:f8:fb:16: f7:86:d9:e8:db:a3:cf:0b:a6:6b:3a:81:d3:60:04: 0b:2d:e4:03:6c:ac:4e:d4:9e:a0:11:58:1d:d5:6a: 5c:9b:7c:a0:fc:10:7e:86:2e:97:0d:b5:fd:e7:0e: 83:5b:1f:1e:48:35:78:94:b8:b3:58:99:3b:eb:09: 3a:79:fd:c2:23:11:24:88:dd:61:4d:b9:2f:5a:40: 60:f1:63:a0:e0:14:5e:26:e3:f7:97:df:23:0b:e6: 26:6c:61:cc:b3:52:bb:6e:3f:2a:bd:6f:62:b6:06: 3a:72:5e:63:d2:dd:ec:c8:93:a0:9b:c9:a8:13:a8: 00:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:82:E5:6E:81:6B:04:F3:A6:22:B4:3A:D2:AF:DC:9F:9B:1C:F0:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/312f2e5f-b35c-3eea-a603-29052d85ef87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:10:ca:11:66:4a:a3:dc:c9:3f:ee:ae:52:47:63:73:83:66: 60:74:e2:16:13:85:3e:8b:8f:9f:4e:8a:2c:8b:d9:44:eb:82: 13:54:9e:0a:17:45:2e:2b:2b:e9:27:4e:cf:4d:a2:bf:6e:17: d0:7d:24:e0:45:65:04:6c:96:45:2c:8b:aa:6c:5a:dd:7a:87: e2:38:9f:04:9a:c7:b6:4c:00:f4:6b:bc:fb:73:f8:96:dd:54: 27:ba:9a:17:79:f0:5a:dc:ae:d5:66:d7:4f:26:48:13:25:cb: f9:71:24:e7:08:3f:74:fc:f9:c5:7f:73:eb:33:ab:cc:c0:1c: 48:d5:b2:6d:60:ca:6b:da:da:d1:9d:2c:a6:01:30:6e:21:78: 2f:5e:88:69:d4:fc:4b:3c:07:d7:cd:fb:27:7e:33:c8:83:01: 0d:0d:c1:88:19:c0:b5:b5:0b:ba:55:0b:1f:c6:5e:5a:00:d0: 39:95:47:a1:b5:55:9e:06:3f:09:eb:b9:5f:d6:76:8d:dd:06: f8:d9:b7:dd:ad:94:73:98:9c:1c:11:c0:d5:f4:b1:98:a9:d9: da:c1:e0:8a:2a:6c:5c:b7:9f:31:3c:06:3e:70:f9:d6:21:90: 84:4c:1c:04:49:4c:8d:89:1d:dd:81:82:29:24:fe:9d:74:9a: 49:af:cb:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPQf3sU5LOSLgoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MWYyMjc4ZmItMTZlMy00NDMwLWI0NmUtOGM4ZGQzOTc1N2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhqn5tSHMxo3JAbntidc8QbY0JE6T0rSRtrk sLwnmNTLo5buy3RXP5GhYk9V8Kfpg8NIdbZA2wRopjTbehYihxRpTNWUJyDfM8fo xBi4wqbW1kj9Iyb37Tia8DEzW5DmGfuPrQwc4TmcWmzWuBHSVq3V8rePcP/Os834 xS5p2jfw4Zf4+xb3htno26PPC6ZrOoHTYAQLLeQDbKxO1J6gEVgd1Wpcm3yg/BB+ hi6XDbX95w6DWx8eSDV4lLizWJk76wk6ef3CIxEkiN1hTbkvWkBg8WOg4BReJuP3 l98jC+YmbGHMs1K7bj8qvW9itgY6cl5j0t3syJOgm8moE6gAswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6C5W6BawTzpiK0OtKv3J+bHPD8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzEyZjJlNWYtYjM1Yy0z ZWVhLWE2MDMtMjkwNTJkODVlZjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwQyhFmSqPcyT/urlJHY3ODZmB04hYThT6Lj59OiiyL2UTrghNUngoX RS4rK+knTs9Nor9uF9B9JOBFZQRslkUsi6psWt16h+I4nwSax7ZMAPRrvPtz+Jbd VCe6mhd58FrcrtVm108mSBMly/lxJOcIP3T8+cV/c+szq8zAHEjVsm1gymva2tGd LKYBMG4heC9eiGnU/Es8B9fN+yd+M8iDAQ0NwYgZwLW1C7pVCx/GXloA0DmVR6G1 VZ4GPwnruV/Wdo3dBvjZt92tlHOYnBwRwNX0sZip2drB4IoqbFy3nzE8Bj5w+dYh kIRMHARJTI2JHd2Bgikk/p10mkmvy74= -----END CERTIFICATE-----Generated at Sat Mar 7 12:44:08 2026 by rpki-client