$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/634d5c06-38cc-328c-b749-6599f74d293f.roa File: 634d5c06-38cc-328c-b749-6599f74d293f.roa (raw, json) Hash identifier: yE7mUiKrTobIdc8jUT7DMvNYU/qodXyhIuvOjxi9D5Q= Subject key identifier: B4:AA:49:13:D4:62:CB:5D:65:7E:DD:E2:55:1B:FF:4C:3C:8A:95:C9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CD6D200DD02573DB22522E920 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/634d5c06-38cc-328c-b749-6599f74d293f.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:00:dd:02:57:3d:b2:25:22:e9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=cb7e0d21-e1bb-406c-91ce-29e1f10809a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1a:90:07:60:f4:52:5e:36:9d:91:1a:15:eb: 1c:60:64:49:8f:df:b9:f0:b0:49:f4:87:ec:fe:4a: 3f:e8:7c:19:de:b5:df:4f:54:75:7e:da:01:bc:b6: f5:c6:46:57:86:8e:71:3f:50:d8:37:1d:06:22:ea: 28:69:3f:77:67:e2:67:26:35:23:45:83:ec:85:15: 90:7f:39:30:ef:93:48:ab:3f:37:44:63:dc:37:70: 15:18:92:ba:97:d9:98:f8:26:2d:6f:2e:8d:1d:94: 66:25:25:eb:0f:4b:75:8d:87:c7:8e:e7:93:f0:bc: 6d:8f:1b:1a:d4:93:ff:72:d4:2c:60:18:85:90:d9: 0e:7f:3d:49:b8:d9:7f:b1:53:d0:50:06:a0:ee:ce: 4f:7e:41:41:08:6d:d8:b0:c1:45:a0:00:b6:07:2f: 27:e2:f9:0a:82:9f:b2:13:5a:c2:5f:d1:ad:e4:de: 6d:46:aa:31:94:a0:82:f7:b9:6f:56:63:8c:c3:49: bd:27:51:6b:bc:20:70:69:55:c8:94:eb:e8:f8:e0: e7:ae:57:52:18:69:c2:0d:67:47:df:5f:eb:ff:9c: 16:59:cd:f6:38:63:0d:66:9e:c8:f6:d1:ea:9a:f7: 2e:da:93:f6:f4:80:63:a6:e4:01:e8:16:27:da:05: 95:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AA:49:13:D4:62:CB:5D:65:7E:DD:E2:55:1B:FF:4C:3C:8A:95:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/634d5c06-38cc-328c-b749-6599f74d293f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ae:77:1d:f1:f6:11:f9:a8:0e:8b:12:cf:1f:67:02:f5:e7: 31:7c:4f:34:46:81:00:64:5f:b1:5c:93:78:8e:4c:85:d7:01: 9f:2e:4c:27:a1:0d:11:d0:86:81:4f:5d:0d:2b:07:57:28:b6: b3:3b:dd:36:7a:60:4c:6f:ea:5f:07:e8:8c:0e:cf:f6:f7:68: d4:2b:a5:5d:a1:59:b6:12:80:96:4a:3a:1d:8e:59:22:e1:eb: dd:c6:1b:ab:71:db:6b:ca:fc:b2:7c:64:5e:bb:3d:55:59:11: 52:04:5d:f1:f7:78:66:60:6c:ed:24:2b:81:8a:a0:db:b8:33: 8c:bf:57:cc:a9:58:c4:26:78:00:b6:6c:a3:84:b6:78:d6:c8: 1d:0a:20:f3:e0:b4:a3:cb:34:5d:fb:c7:9e:f9:f8:6f:f5:3f: 76:8e:52:f4:f1:50:e9:67:12:d2:9f:0e:39:07:dd:14:f2:61: c1:64:ac:aa:e9:77:0b:cb:9c:56:f2:91:1c:16:d8:0e:88:6f: cd:93:04:81:83:f9:4f:b9:f0:0c:90:65:ec:89:01:b2:80:75: 9f:c1:d7:1e:f8:c6:18:8d:ea:e4:fb:f0:be:d6:01:49:83:f5: 52:88:d8:77:06:57:98:c1:7c:c3:f7:d4:ad:c5:3f:70:93:2f: 64:40:ac:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0gDdAlc9siUi6SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk Y2I3ZTBkMjEtZTFiYi00MDZjLTkxY2UtMjllMWYxMDgwOWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hqQB2D0Ul42nZEaFescYGRJj9+58LBJ9Ifs /ko/6HwZ3rXfT1R1ftoBvLb1xkZXho5xP1DYNx0GIuooaT93Z+JnJjUjRYPshRWQ fzkw75NIqz83RGPcN3AVGJK6l9mY+CYtby6NHZRmJSXrD0t1jYfHjueT8Lxtjxsa 1JP/ctQsYBiFkNkOfz1JuNl/sVPQUAag7s5PfkFBCG3YsMFFoAC2By8n4vkKgp+y E1rCX9Gt5N5tRqoxlKCC97lvVmOMw0m9J1FrvCBwaVXIlOvo+ODnrldSGGnCDWdH 31/r/5wWWc32OGMNZp7I9tHqmvcu2pP29IBjpuQB6BYn2gWV+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSqSRPUYstdZX7d4lUb/0w8ipXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjM0ZDVjMDYtMzhjYy0z MjhjLWI3NDktNjU5OWY3NGQyOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASudx3x9hH5qA6LEs8fZwL15zF8TzRGgQBkX7Fck3iOTIXXAZ8uTCeh DRHQhoFPXQ0rB1cotrM73TZ6YExv6l8H6IwOz/b3aNQrpV2hWbYSgJZKOh2OWSLh 693GG6tx22vK/LJ8ZF67PVVZEVIEXfH3eGZgbO0kK4GKoNu4M4y/V8ypWMQmeAC2 bKOEtnjWyB0KIPPgtKPLNF37x575+G/1P3aOUvTxUOlnEtKfDjkH3RTyYcFkrKrp dwvLnFbykRwW2A6Ib82TBIGD+U+58AyQZeyJAbKAdZ/B1x74xhiN6uT78L7WAUmD 9VKI2HcGV5jBfMP31K3FP3CTL2RArD4= -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:11 2026 by rpki-client