$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/40ac426f-0ecd-3eb5-853c-a79964bd6501.roa File: 40ac426f-0ecd-3eb5-853c-a79964bd6501.roa (raw, json) Hash identifier: AtPl/K08iLRYLpjCHXAC3ZiEsXMzPNSGjby8GAU392Y= Subject key identifier: 66:6D:94:82:82:85:69:D2:80:F9:C3:52:09:F7:4C:E7:B6:05:14:85 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D6F1CDCA26DDC0E913020 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/40ac426f-0ecd-3eb5-853c-a79964bd6501.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:6f:1c:dc:a2:6d:dc:0e:91:30:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=1205874a-be0a-4dca-bedd-726ac82559c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9d:3f:8a:c9:95:40:68:e2:7b:9f:fe:e8:28: 85:73:58:67:fc:dd:1d:a8:7d:dd:4e:49:7f:e4:3b: 3d:84:03:5a:f5:89:d7:85:98:70:a2:59:80:a9:0c: 75:39:83:37:65:9e:98:26:69:0b:77:59:d3:64:fb: 87:82:57:ec:94:b5:c4:4f:12:4e:37:ce:a3:6e:e4: df:1c:0c:03:5d:c4:0a:36:c4:37:2f:cd:25:3d:f5: 0a:e2:fa:fd:86:e2:3c:1e:16:dc:d4:a5:f4:99:2a: b9:34:af:f2:57:b2:ee:67:62:a3:ac:37:f1:f7:a8: 1a:ad:e7:0e:2c:24:6f:d7:8e:82:66:a0:66:2f:f1: 1c:65:4b:df:86:bf:26:78:03:28:5d:7f:80:5b:0a: e6:36:f5:e4:db:3a:2c:69:1a:f6:ca:28:1d:af:97: 24:76:30:c1:6b:e9:71:24:81:6d:bf:b2:ba:9f:cb: bc:8a:5b:3c:ff:72:93:ec:e7:42:b7:73:35:66:7c: 67:21:51:98:ee:d7:80:2b:f2:c8:15:fc:b2:09:51: 48:85:52:75:db:0a:57:ce:66:25:7f:d0:56:ca:88: 5d:1e:42:7a:05:7e:16:5e:d9:db:80:e5:61:e7:66: 11:ce:99:8c:b0:2e:9f:87:6f:7d:33:03:68:fc:7e: e2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6D:94:82:82:85:69:D2:80:F9:C3:52:09:F7:4C:E7:B6:05:14:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/40ac426f-0ecd-3eb5-853c-a79964bd6501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:29:20:23:79:6f:5f:d5:95:e5:65:29:bf:e4:a1:60:6f:1a: 7b:35:1a:a5:64:aa:7a:a8:f4:7c:e1:15:58:49:79:de:dc:54: 7e:49:6a:3f:86:63:e5:8c:34:d6:f0:91:35:12:6c:39:90:f2: d6:2a:dc:c8:dc:3f:14:b4:96:bf:b6:4b:68:b6:16:d7:95:c0: f9:89:6d:52:e1:82:83:68:65:bb:6d:13:fd:91:9a:dc:30:6f: 1b:eb:b8:0c:fe:83:47:d9:90:55:ac:81:e2:d9:5e:8d:fa:7f: c1:5e:ba:ad:9a:18:23:b8:88:0f:ae:62:db:a1:47:03:b1:15: 32:be:41:a7:dc:8a:53:27:77:cf:34:9b:80:0e:4f:53:12:23: af:50:a2:91:2d:9b:e1:e2:ad:3d:2a:0d:02:af:65:cd:de:40: c7:00:c0:6b:a4:d7:98:e4:c6:e3:1f:e1:2a:6f:00:ba:88:ab: 9d:bc:70:2e:f6:77:98:82:49:eb:2f:7e:d2:72:23:da:8a:81: ad:66:10:84:a8:fc:86:f2:e6:85:3e:02:e3:29:5b:79:e5:de: e4:c5:43:d2:b9:db:61:86:19:3b:1a:84:d3:f9:0c:8a:84:17: a5:3c:73:db:54:71:05:33:c0:42:06:2d:e9:df:2e:15:cf:57: df:f7:8a:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPW8c3KJt3A6RMCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MTIwNTg3NGEtYmUwYS00ZGNhLWJlZGQtNzI2YWM4MjU1OWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ0/ismVQGjie5/+6CiFc1hn/N0dqH3dTkl/ 5Ds9hANa9YnXhZhwolmAqQx1OYM3ZZ6YJmkLd1nTZPuHglfslLXETxJON86jbuTf HAwDXcQKNsQ3L80lPfUK4vr9huI8Hhbc1KX0mSq5NK/yV7LuZ2KjrDfx96garecO LCRv146CZqBmL/EcZUvfhr8meAMoXX+AWwrmNvXk2zosaRr2yigdr5ckdjDBa+lx JIFtv7K6n8u8ils8/3KT7OdCt3M1ZnxnIVGY7teAK/LIFfyyCVFIhVJ12wpXzmYl f9BWyohdHkJ6BX4WXtnbgOVh52YRzpmMsC6fh299MwNo/H7iUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZtlIKChWnSgPnDUgn3TOe2BRSFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDBhYzQyNmYtMGVjZC0z ZWI1LTg1M2MtYTc5OTY0YmQ2NTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4pICN5b1/VleVlKb/koWBvGns1GqVkqnqo9HzhFVhJed7cVH5Jaj+G Y+WMNNbwkTUSbDmQ8tYq3MjcPxS0lr+2S2i2FteVwPmJbVLhgoNoZbttE/2Rmtww bxvruAz+g0fZkFWsgeLZXo36f8Feuq2aGCO4iA+uYtuhRwOxFTK+QafcilMnd880 m4AOT1MSI69QopEtm+HirT0qDQKvZc3eQMcAwGuk15jkxuMf4SpvALqIq528cC72 d5iCSesvftJyI9qKga1mEISo/Iby5oU+AuMpW3nl3uTFQ9K522GGGTsahNP5DIqE F6U8c9tUcQUzwEIGLenfLhXPV9/3inc= -----END CERTIFICATE-----Generated at Sat Mar 7 12:47:32 2026 by rpki-client