$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a520f29-bff6-34eb-b254-1d131d623d04.roa File: 9a520f29-bff6-34eb-b254-1d131d623d04.roa (raw, json) Hash identifier: W7gEJmad25y3om3Wp/04Xw1gTNlxPs04fizHrDGwFpI= Subject key identifier: 57:09:4B:61:3C:4D:10:C4:EC:5F:68:33:D2:98:F3:CF:F4:A9:29:DD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D22E9E54822ABC8A058C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a520f29-bff6-34eb-b254-1d131d623d04.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:22:e9:e5:48:22:ab:c8:a0:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=328cd412-7038-4ec0-831a-4d16b61f9a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7a:95:dd:64:2e:47:7a:28:91:ec:e3:4b:52: 5f:a5:69:8a:a8:26:99:85:95:1e:f1:25:2f:12:ea: 13:24:b9:5f:1f:cc:44:66:21:a1:9b:13:0a:9d:a5: d3:e9:ca:a7:d9:94:2e:f4:80:9a:ec:92:1f:29:59: 50:07:04:15:39:ae:91:f9:6a:76:fc:39:6c:35:1f: 1b:2d:26:08:d1:7f:84:80:ca:f9:9e:2f:d0:38:f9: ae:4d:c9:aa:0f:02:ce:cf:88:95:b9:65:7d:4b:4b: ef:d3:3f:27:49:6b:4f:cc:eb:e4:fe:8d:00:8b:7b: 70:7f:fd:d0:63:e1:79:d6:e7:01:21:89:8d:b4:f3: 5f:be:69:72:55:14:e1:db:37:2c:ea:c4:f9:ec:88: af:44:4f:fa:bf:46:d1:0d:df:11:f2:cc:96:13:e9: c9:e8:0a:1c:66:2b:d8:47:e4:31:4f:93:fa:92:c8: 3d:b0:9f:d1:82:d3:2e:e4:50:13:df:cd:b1:e1:9e: 2a:5e:5c:a0:0a:e6:4f:52:f2:8d:1b:9b:db:dc:95: ef:cb:a6:7d:b5:81:25:a8:10:48:46:73:2f:62:51: b5:0a:46:d3:4e:85:56:75:f1:b7:41:fe:a4:84:2b: 61:8d:20:aa:63:1c:4c:0a:b3:cb:7b:35:2a:df:65: 09:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:09:4B:61:3C:4D:10:C4:EC:5F:68:33:D2:98:F3:CF:F4:A9:29:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a520f29-bff6-34eb-b254-1d131d623d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a1:c6:3a:3e:ff:6b:2b:75:ae:e9:57:cf:7a:fc:fb:7b:8e: be:8e:54:15:30:58:6d:51:4d:0f:66:f8:cc:e7:cb:56:24:6d: 38:b1:b6:0d:bc:1a:08:a9:a4:8d:32:26:73:30:97:bd:d5:c3: 2f:11:8c:ac:84:73:96:e9:45:e5:e4:ad:fa:c1:bc:98:78:e5: 65:ae:aa:d2:04:c8:4a:ce:0a:54:fa:71:21:e0:ba:b2:4a:27: 42:1c:33:4c:02:c9:50:55:3d:0d:a1:73:97:09:18:3d:85:e4: 63:04:1b:ac:2c:4e:91:51:5a:b9:e7:7e:9a:42:97:fe:27:9b: 1b:07:4b:d9:b2:9c:7a:92:66:6c:d8:e9:13:d5:f9:bb:d5:76: 62:d9:e1:1f:83:4a:cf:b7:12:52:67:1f:a4:06:62:d6:52:f4: 76:5b:77:03:2b:f7:cb:9d:39:46:ff:f4:1a:af:35:40:95:c2: 4a:3b:d4:d9:0a:6c:35:11:58:22:ad:28:a9:e1:b7:de:c6:9e: ca:d5:83:3a:a7:e6:aa:4f:17:a7:f3:16:da:13:5e:54:16:8f: c3:1d:fd:f7:34:6c:03:c9:22:25:65:42:6d:61:cc:c2:90:85: a7:c9:85:80:17:c7:8e:85:c7:7e:41:2c:91:d7:66:99:b5:b6: 2f:e2:5b:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPSLp5Ugiq8igWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MzI4Y2Q0MTItNzAzOC00ZWMwLTgzMWEtNGQxNmI2MWY5YTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nqV3WQuR3ookezjS1JfpWmKqCaZhZUe8SUv EuoTJLlfH8xEZiGhmxMKnaXT6cqn2ZQu9ICa7JIfKVlQBwQVOa6R+Wp2/DlsNR8b LSYI0X+EgMr5ni/QOPmuTcmqDwLOz4iVuWV9S0vv0z8nSWtPzOvk/o0Ai3twf/3Q Y+F51ucBIYmNtPNfvmlyVRTh2zcs6sT57IivRE/6v0bRDd8R8syWE+nJ6AocZivY R+QxT5P6ksg9sJ/RgtMu5FAT382x4Z4qXlygCuZPUvKNG5vb3JXvy6Z9tYElqBBI RnMvYlG1CkbTToVWdfG3Qf6khCthjSCqYxxMCrPLezUq32UJIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcJS2E8TRDE7F9oM9KY88/0qSndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWE1MjBmMjktYmZmNi0z NGViLWIyNTQtMWQxMzFkNjIzZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIChxjo+/2srda7pV896/Pt7jr6OVBUwWG1RTQ9m+Mzny1YkbTixtg28 GgippI0yJnMwl73Vwy8RjKyEc5bpReXkrfrBvJh45WWuqtIEyErOClT6cSHgurJK J0IcM0wCyVBVPQ2hc5cJGD2F5GMEG6wsTpFRWrnnfppCl/4nmxsHS9mynHqSZmzY 6RPV+bvVdmLZ4R+DSs+3ElJnH6QGYtZS9HZbdwMr98udOUb/9BqvNUCVwko71NkK bDURWCKtKKnht97GnsrVgzqn5qpPF6fzFtoTXlQWj8Md/fc0bAPJIiVlQm1hzMKQ hafJhYAXx46Fx35BLJHXZpm1ti/iW+E= -----END CERTIFICATE-----Generated at Sat Mar 7 12:47:40 2026 by rpki-client