$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa File: 16646b1c-7273-3e1a-9ca3-efedf58284e9.roa (raw, json) Hash identifier: QHPcDLX/dBKBtiy6tHGzPDwPcvBdQnRSLjv7gVHM/b4= Subject key identifier: ED:71:34:BE:89:9F:EB:4C:60:F7:4D:5F:10:A6:DA:A8:6B:BE:AF:66 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB6B7237F2C119B5FD3772A80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.153.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:23:7f:2c:11:9b:5f:d3:77:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=fa07be26-0877-41e2-a14d-2cd4cd39e6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:94:83:ee:5f:5c:fd:b7:45:27:e5:93:fe:32: 31:fc:3f:3c:50:6a:87:4c:80:07:5b:5d:e9:43:b3: d1:b0:ed:5a:b6:6e:fd:2e:ec:6b:1d:db:f2:67:3f: fa:42:46:cf:42:db:52:58:ef:1a:3e:2d:84:8e:8b: 80:d9:55:af:cf:6f:fa:f8:c9:26:b2:e2:dd:e8:b9: 24:16:39:aa:c3:e2:e4:63:34:fc:f3:9f:68:04:0d: 61:8e:e2:4c:c8:12:0d:7c:b7:fe:e0:1c:90:4c:dd: 58:c7:7a:db:5e:4a:cb:d1:c5:1e:76:ff:b6:d4:1b: 95:93:12:78:1a:cf:51:0a:18:09:c9:11:5f:be:33: 2e:fe:ad:61:e2:41:a9:47:22:81:42:7f:ef:a8:8b: 01:07:0f:93:31:32:6b:b4:57:43:2e:af:d0:30:ad: 7b:e6:18:5b:d0:94:52:c9:1e:bb:3c:82:83:26:a9: c6:8f:be:b5:fe:cd:0d:71:1a:54:50:65:39:a0:5f: 2b:36:9d:25:a5:2c:48:57:34:c7:83:cc:71:46:fc: 93:44:01:a7:9e:0c:bd:41:18:0a:c4:43:ee:7a:3d: 6b:ca:11:94:3a:cb:2c:15:6a:5c:15:04:6c:03:d8: 34:1d:aa:a8:d2:9b:87:d3:56:35:b6:b1:48:2c:ac: 52:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:71:34:BE:89:9F:EB:4C:60:F7:4D:5F:10:A6:DA:A8:6B:BE:AF:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:ba:71:61:72:ad:cf:fb:36:f3:a3:d5:50:49:e0:f7:1c:d6: 97:43:c6:00:bd:4b:1e:a5:3d:c6:ed:79:fb:14:ee:ff:2f:1c: 39:e9:68:8b:35:04:f3:9f:25:da:c0:d3:03:23:52:f6:a1:83: 75:ef:fe:88:d4:04:8b:a7:98:d1:bb:a9:e9:cc:84:68:7a:35: d3:3e:1f:dd:bd:57:33:a4:4b:0a:91:2d:cd:70:38:e6:94:29: 60:a9:0a:ec:4b:e1:73:95:a2:03:44:9a:be:c3:c8:fb:41:18: 3d:a8:86:b5:91:7e:e1:15:d2:83:b9:a9:86:79:c0:20:0d:6d: 6d:2b:e2:89:0a:ab:70:27:5a:fa:3b:35:6b:fe:32:2f:8e:d1: 9f:8c:71:fa:87:ea:ff:4f:50:cc:71:b9:1e:ed:e2:47:02:e5: 48:c5:4a:de:f6:bf:2d:6a:52:28:d8:d5:37:6e:d5:59:06:8a: 86:6f:8a:0c:70:61:56:07:ee:32:97:f2:13:c3:ba:3f:cc:dd: 0a:fa:58:79:2d:e9:f6:7d:26:b7:85:32:29:5f:da:08:99:95: 89:96:93:66:1d:00:46:f6:75:39:9e:2c:fa:32:31:f8:be:ef: 9d:cc:6d:62:c1:00:d8:ce:83:e1:de:44:d3:7d:f0:d4:96:50: 33:4a:c7:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tyN/LBGbX9N3KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZmEwN2JlMjYtMDg3Ny00MWUyLWExNGQtMmNkNGNkMzllNmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpSD7l9c/bdFJ+WT/jIx/D88UGqHTIAHW13p Q7PRsO1atm79LuxrHdvyZz/6QkbPQttSWO8aPi2EjouA2VWvz2/6+MkmsuLd6Lkk Fjmqw+LkYzT8859oBA1hjuJMyBINfLf+4ByQTN1Yx3rbXkrL0cUedv+21BuVkxJ4 Gs9RChgJyRFfvjMu/q1h4kGpRyKBQn/vqIsBBw+TMTJrtFdDLq/QMK175hhb0JRS yR67PIKDJqnGj761/s0NcRpUUGU5oF8rNp0lpSxIVzTHg8xxRvyTRAGnngy9QRgK xEPuej1ryhGUOsssFWpcFQRsA9g0Haqo0puH01Y1trFILKxS4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1xNL6Jn+tMYPdNXxCm2qhrvq9mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTY2NDZiMWMtNzI3My0z ZTFhLTljYTMtZWZlZGY1ODI4NGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJu6cWFyrc/7NvOj1VBJ4Pcc1pdDxgC9Sx6lPcbtefsU7v8vHDnpaIs1 BPOfJdrA0wMjUvahg3Xv/ojUBIunmNG7qenMhGh6NdM+H929VzOkSwqRLc1wOOaU KWCpCuxL4XOVogNEmr7DyPtBGD2ohrWRfuEV0oO5qYZ5wCANbW0r4okKq3AnWvo7 NWv+Mi+O0Z+McfqH6v9PUMxxuR7t4kcC5UjFSt72vy1qUijY1Tdu1VkGioZvigxw YVYH7jKX8hPDuj/M3Qr6WHkt6fZ9JreFMilf2giZlYmWk2YdAEb2dTmeLPoyMfi+ 753MbWLBANjOg+HeRNN98NSWUDNKx9k= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:19 2026 by rpki-client