$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823f884b-6301-377e-8d28-5834d52ead5c.roa File: 823f884b-6301-377e-8d28-5834d52ead5c.roa (raw, json) Hash identifier: CP7b+XVrA2qHBIli8n4dW8YxXf6pzOySvxY2gyDTYtM= Subject key identifier: 0D:32:6B:93:AA:83:6C:BB:BB:05:E6:08:52:65:EA:24:05:BE:EF:84 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D4013BB9D76F7E5282E00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823f884b-6301-377e-8d28-5834d52ead5c.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:40:13:bb:9d:76:f7:e5:28:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=1f09d034-1f72-48da-966c-074132509afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1a:f6:9f:72:98:96:53:13:d4:cf:25:a4:64: 10:87:eb:04:5d:d5:f2:68:c1:49:49:fa:62:7c:ab: 70:c3:76:21:98:bb:bd:c7:08:0a:7d:d2:f4:6f:db: 35:57:fe:1e:46:2d:a6:2f:6a:c3:d3:59:3e:79:2f: e7:b7:f9:f9:dc:a0:7a:b3:64:4c:83:01:87:1b:9e: 6c:a2:0e:a8:16:0a:64:de:6e:f1:aa:20:5a:a5:11: 28:60:b2:f0:2b:c2:25:99:7f:82:90:7b:0e:15:1b: ac:72:0c:7d:e2:11:48:5a:3e:bf:62:47:60:5c:fb: 17:67:69:a5:8c:2c:60:8d:d9:4b:b1:69:f5:04:bc: 10:f3:30:37:fa:e7:59:5b:7a:85:99:8e:d9:c0:6e: a2:09:1e:5a:f2:ed:20:28:cb:d4:06:0a:19:2e:d1: 25:eb:a6:40:d6:6e:85:59:1f:47:bb:b1:4e:86:86: 6a:ee:9c:2b:3d:ff:ea:c9:31:28:73:cf:25:4f:d9: 8c:5a:3c:ed:ed:b8:60:1a:ba:52:38:86:1d:05:3e: 2c:c8:52:3c:d0:0a:d2:d6:72:fb:5b:fc:3f:42:54: 46:13:65:ff:bf:20:7e:a0:ee:35:f5:da:c1:54:34: 4c:2d:a7:91:6b:fc:40:fa:84:6e:86:81:5b:ba:40: 7f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:32:6B:93:AA:83:6C:BB:BB:05:E6:08:52:65:EA:24:05:BE:EF:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823f884b-6301-377e-8d28-5834d52ead5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:df:26:0f:d6:e0:6f:93:39:97:32:54:43:32:0a:4c:72:ba: 73:f1:8c:57:83:c3:e4:7f:af:f5:b3:cb:b9:4e:6c:25:70:5e: 99:4f:da:15:e6:5e:37:82:13:60:82:1c:25:83:ed:20:42:d6: 26:dc:15:ed:b1:f9:f0:37:a0:89:7e:2b:ff:3f:e0:ea:64:76: 88:39:ee:93:cf:19:0e:61:dc:d7:8d:88:68:f0:76:3a:47:d0: ba:0d:14:87:28:a0:88:76:1a:06:8c:27:11:a0:2e:ad:de:b6: 38:91:6e:e9:36:ec:d4:1b:cd:73:45:10:a9:4a:fb:27:a5:17: c3:33:b4:96:d0:10:b5:ef:63:54:4f:ff:ce:08:e7:60:89:a7: 96:a6:42:13:97:db:61:70:df:98:1d:d8:a4:87:b4:bb:b9:eb: 86:31:62:22:ff:5c:bb:80:6a:46:ec:40:31:65:ae:6a:4c:97: d4:a8:f3:ac:3e:f9:c0:ad:9d:70:fe:fc:30:48:fe:87:96:1b: 11:f3:11:2d:53:5d:de:42:1c:5f:c9:78:1e:e9:b5:67:2f:17: db:98:52:f1:5d:e0:c5:42:2d:7e:ba:a3:fd:3e:e3:77:83:bb: c2:47:d5:c2:c4:e5:cf:57:db:ef:59:b0:1e:57:a2:3b:10:84: 5d:67:d9:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUATu5129+UoLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MWYwOWQwMzQtMWY3Mi00OGRhLTk2NmMtMDc0MTMyNTA5YWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxr2n3KYllMT1M8lpGQQh+sEXdXyaMFJSfpi fKtww3YhmLu9xwgKfdL0b9s1V/4eRi2mL2rD01k+eS/nt/n53KB6s2RMgwGHG55s og6oFgpk3m7xqiBapREoYLLwK8IlmX+CkHsOFRuscgx94hFIWj6/YkdgXPsXZ2ml jCxgjdlLsWn1BLwQ8zA3+udZW3qFmY7ZwG6iCR5a8u0gKMvUBgoZLtEl66ZA1m6F WR9Hu7FOhoZq7pwrPf/qyTEoc88lT9mMWjzt7bhgGrpSOIYdBT4syFI80ArS1nL7 W/w/QlRGE2X/vyB+oO419drBVDRMLaeRa/xA+oRuhoFbukB/5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0ya5Oqg2y7uwXmCFJl6iQFvu+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODIzZjg4NGItNjMwMS0z NzdlLThkMjgtNTgzNGQ1MmVhZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPfJg/W4G+TOZcyVEMyCkxyunPxjFeDw+R/r/Wzy7lObCVwXplP2hXm XjeCE2CCHCWD7SBC1ibcFe2x+fA3oIl+K/8/4Opkdog57pPPGQ5h3NeNiGjwdjpH 0LoNFIcooIh2GgaMJxGgLq3etjiRbuk27NQbzXNFEKlK+yelF8MztJbQELXvY1RP /84I52CJp5amQhOX22Fw35gd2KSHtLu564YxYiL/XLuAakbsQDFlrmpMl9So86w+ +cCtnXD+/DBI/oeWGxHzES1TXd5CHF/JeB7ptWcvF9uYUvFd4MVCLX66o/0+43eD u8JH1cLE5c9X2+9ZsB5XojsQhF1n2S8= -----END CERTIFICATE-----Generated at Sat Mar 7 12:49:06 2026 by rpki-client