$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa File: 9682b18d-084f-339c-8a00-ef1f480f78c1.roa (raw, json) Hash identifier: jZelaDAEF4mNa6UWU8WmhfdEUAvzTiR2Xcn9D4ZEpAM= Subject key identifier: EA:B6:A1:09:63:5D:BF:E8:AA:E2:FA:13:8C:E9:27:7A:C7:6C:8B:F4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CFC82358AFA415B899EC6EC00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.153.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:35:8a:fa:41:5b:89:9e:c6:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=39e32d2a-81af-4924-a103-3b6c20ba6a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:26:b7:c1:63:b9:ac:eb:b9:c7:36:1a:21:e1: 30:8e:db:3c:01:cd:45:9c:d9:56:68:8f:8a:2a:d7: d5:a7:13:d9:5a:53:41:4f:6a:42:84:67:09:87:51: c0:c3:01:d8:c6:97:13:df:65:a4:d7:2c:44:70:51: 28:9e:41:c4:d5:58:ec:4d:e3:27:6c:de:e5:5b:f3: ba:0a:2a:ac:6a:f4:a0:1c:20:1d:7f:b9:8d:2b:13: 7d:3a:59:0e:dc:a1:cc:a5:96:e0:56:21:49:86:1f: a7:1a:ba:e9:37:4d:fd:dc:44:66:c3:6a:40:18:09: 8c:54:8d:60:d5:98:b5:08:91:01:3e:8f:ba:67:c3: 26:06:58:5c:e9:b5:99:b2:7a:d1:1e:c1:08:3f:da: 75:bf:c4:ae:3a:a8:c4:10:f8:84:01:d9:22:cb:5e: 2a:af:72:5f:61:91:eb:08:62:38:de:1a:62:c8:8c: 90:9e:2e:14:1f:01:78:19:29:3c:04:6d:1d:3d:33: 51:1a:7a:86:b4:70:23:f0:33:e4:72:d7:83:37:bb: 9d:e2:7d:28:81:4e:df:f3:f0:72:52:0b:00:0d:5c: b9:21:c6:7b:39:01:01:9a:9a:9e:59:bf:e2:65:1e: b2:6c:e1:27:42:ad:25:05:27:7f:db:60:b2:8d:0d: df:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B6:A1:09:63:5D:BF:E8:AA:E2:FA:13:8C:E9:27:7A:C7:6C:8B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:8d:1c:49:ba:21:27:bc:aa:75:4e:53:b3:3c:fb:a4:21:8d: bb:08:a3:1e:cb:03:b8:03:51:77:07:8c:00:70:78:62:6c:17: a0:e6:ca:ab:92:6d:72:a3:ea:85:34:ff:57:ba:fd:50:3e:ad: 3c:46:4d:f2:a8:5c:aa:cd:35:b5:df:44:d2:a1:cc:ff:a9:2e: 14:67:a9:94:ee:51:d1:ad:2e:3f:8e:c1:84:14:af:4b:ce:2c: 22:df:ad:cf:0c:1b:c3:1d:ab:99:d5:ee:dc:9b:24:5e:da:a1: c3:a7:6e:92:9d:a1:dd:11:77:79:11:eb:d4:46:f9:a6:6a:f9: cc:83:df:cd:c2:9c:f7:22:64:3d:e4:3f:4c:e5:60:5c:c8:2e: 1e:c5:8e:a2:24:7a:e9:23:b2:3d:99:c9:71:ef:e5:a3:cc:aa: 3e:e5:07:19:a7:42:be:70:02:6e:f1:d0:b7:8c:bd:7f:67:15: 48:0d:d4:3b:5e:d1:57:b1:67:6c:00:05:c9:46:e8:5f:02:b4: 4e:b4:25:7d:3c:d4:75:1d:c0:8f:bc:9e:f8:2c:4c:35:f4:e9: 88:2d:be:35:48:ef:5e:38:2f:86:cd:82:94:2b:f4:2e:1e:0b: ed:d9:1c:98:e5:84:6f:1e:50:36:86:59:b3:3c:3a:d8:db:07: e5:10:bc:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gjWK+kFbiZ7G7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk MzllMzJkMmEtODFhZi00OTI0LWExMDMtM2I2YzIwYmE2YTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ya3wWO5rOu5xzYaIeEwjts8Ac1FnNlWaI+K KtfVpxPZWlNBT2pChGcJh1HAwwHYxpcT32Wk1yxEcFEonkHE1VjsTeMnbN7lW/O6 CiqsavSgHCAdf7mNKxN9OlkO3KHMpZbgViFJhh+nGrrpN0393ERmw2pAGAmMVI1g 1Zi1CJEBPo+6Z8MmBlhc6bWZsnrRHsEIP9p1v8SuOqjEEPiEAdkiy14qr3JfYZHr CGI43hpiyIyQni4UHwF4GSk8BG0dPTNRGnqGtHAj8DPkcteDN7ud4n0ogU7f8/By UgsADVy5IcZ7OQEBmpqeWb/iZR6ybOEnQq0lBSd/22CyjQ3fjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOq2oQljXb/oquL6E4zpJ3rHbIv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTY4MmIxOGQtMDg0Zi0z MzljLThhMDAtZWYxZjQ4MGY3OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+NHEm6ISe8qnVOU7M8+6QhjbsIox7LA7gDUXcHjABweGJsF6DmyquS bXKj6oU0/1e6/VA+rTxGTfKoXKrNNbXfRNKhzP+pLhRnqZTuUdGtLj+OwYQUr0vO LCLfrc8MG8Mdq5nV7tybJF7aocOnbpKdod0Rd3kR69RG+aZq+cyD383CnPciZD3k P0zlYFzILh7FjqIkeukjsj2ZyXHv5aPMqj7lBxmnQr5wAm7x0LeMvX9nFUgN1Dte 0VexZ2wABclG6F8CtE60JX081HUdwI+8nvgsTDX06YgtvjVI7144L4bNgpQr9C4e C+3ZHJjlhG8eUDaGWbM8OtjbB+UQvJA= -----END CERTIFICATE-----Generated at Mon Mar 2 21:55:28 2026 by rpki-client