$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ae21d155-9407-3def-b665-6cf578e3230e.roa File: ae21d155-9407-3def-b665-6cf578e3230e.roa (raw, json) Hash identifier: K+x8FkYDoFlmj6szWZ0HrUHfLuwygXCivkjCFrhGip0= Subject key identifier: 14:A8:1F:51:8B:81:69:80:68:F8:4C:82:14:EE:87:8B:D7:53:54:94 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC6121C88EC2DEEAF4C675200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ae21d155-9407-3def-b665-6cf578e3230e.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:1c:88:ec:2d:ee:af:4c:67:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=de8b59bc-400c-41e5-a5dc-1f17b89835bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fe:43:30:12:a1:be:d1:b3:71:7b:c2:ec:0e: 22:d3:cd:e6:b6:ee:1a:5d:60:e5:0f:8c:d2:5f:9c: a2:de:3e:95:6c:13:e2:70:6c:a8:05:38:fc:94:ca: f4:8c:ed:22:de:55:9a:b8:8e:ba:2a:7a:b9:00:9c: e9:93:b4:41:f0:1a:e6:79:90:af:12:5c:22:2e:78: ca:96:13:67:ee:8e:18:84:90:d3:c4:f1:20:53:60: b2:91:e7:1e:f6:a1:ef:3e:28:a4:63:ef:f1:6a:a1: 00:86:df:49:11:90:a1:47:9b:8c:54:bd:53:03:6b: d4:8e:67:5b:b3:8e:54:07:55:14:d1:38:de:97:ba: 2b:59:52:54:e5:2f:18:b0:24:c7:95:04:b5:e6:3a: 73:c5:3f:f9:9c:04:37:f9:d9:9e:32:57:2f:c0:ae: 03:e3:20:4f:37:35:ef:68:8b:5f:52:49:d9:4b:b8: 8f:e3:b6:de:99:1c:d6:63:bf:5b:90:06:2d:79:b4: 73:6d:84:1a:7d:7a:d4:e5:fd:6e:c2:af:d0:20:cc: de:81:64:c6:c0:bd:8e:c3:cb:3c:bc:c9:95:07:f4: fb:2b:f5:75:84:de:b5:01:c1:2f:6e:46:11:ef:a6: 93:7d:6c:23:22:ea:c8:19:4e:8f:b8:ea:45:3d:ae: 8a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A8:1F:51:8B:81:69:80:68:F8:4C:82:14:EE:87:8B:D7:53:54:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ae21d155-9407-3def-b665-6cf578e3230e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:5a:d9:bb:29:79:98:29:32:2c:7e:7f:14:fa:aa:00:0b:7e: 47:b1:1c:8a:03:b5:b7:a7:bd:5c:20:d8:8e:bd:1c:c1:ee:e5: 78:a6:96:e2:7a:6a:14:52:e9:27:2b:5c:e8:72:96:36:be:23: a0:f7:40:02:05:dc:f9:6d:9e:6b:43:26:ff:67:cb:bf:cd:98: 88:91:a4:e2:d9:61:9e:2b:c4:30:10:7c:08:72:c2:fa:20:29: 84:82:9b:c0:7a:9c:88:bd:07:52:2b:51:82:ac:0b:26:d6:4a: 6c:40:1d:9b:0b:48:66:51:7c:9c:99:60:f6:bd:46:01:89:e4: 80:1e:ca:48:9d:66:da:8d:ea:2e:e5:0a:98:a4:72:b7:ee:53: 70:3e:dd:cf:cd:31:52:aa:fe:90:03:b7:5b:b3:8c:93:c8:5a: 65:03:d1:52:cf:e0:4c:bb:88:cd:1d:e6:f5:74:f7:3d:c2:72: 60:a1:83:aa:82:49:c2:a9:cb:a7:6c:b5:9e:d8:e1:5e:77:98: 7b:dd:6c:9e:f3:de:92:4c:34:fa:fc:33:8e:bc:84:40:28:62: 00:48:0e:d3:1f:81:45:a5:98:43:71:ec:b1:00:44:1a:dc:e8: 0c:e3:af:73:54:a6:1f:aa:65:aa:b7:03:7e:d6:70:ab:3a:a1: f0:41:ed:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEhyI7C3ur0xnUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk ZGU4YjU5YmMtNDAwYy00MWU1LWE1ZGMtMWYxN2I4OTgzNWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/5DMBKhvtGzcXvC7A4i083mtu4aXWDlD4zS X5yi3j6VbBPicGyoBTj8lMr0jO0i3lWauI66Knq5AJzpk7RB8BrmeZCvElwiLnjK lhNn7o4YhJDTxPEgU2Cykece9qHvPiikY+/xaqEAht9JEZChR5uMVL1TA2vUjmdb s45UB1UU0Tjel7orWVJU5S8YsCTHlQS15jpzxT/5nAQ3+dmeMlcvwK4D4yBPNzXv aItfUknZS7iP47bemRzWY79bkAYtebRzbYQafXrU5f1uwq/QIMzegWTGwL2Ow8s8 vMmVB/T7K/V1hN61AcEvbkYR76aTfWwjIurIGU6PuOpFPa6KSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSoH1GLgWmAaPhMghTuh4vXU1SUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWUyMWQxNTUtOTQwNy0z ZGVmLWI2NjUtNmNmNTc4ZTMyMzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJnsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1a2bspeZgpMix+fxT6qgALfkexHIoDtbenvVwg2I69HMHu5XimluJ6 ahRS6ScrXOhylja+I6D3QAIF3PltnmtDJv9ny7/NmIiRpOLZYZ4rxDAQfAhywvog KYSCm8B6nIi9B1IrUYKsCybWSmxAHZsLSGZRfJyZYPa9RgGJ5IAeykidZtqN6i7l CpikcrfuU3A+3c/NMVKq/pADt1uzjJPIWmUD0VLP4Ey7iM0d5vV09z3CcmChg6qC ScKpy6dstZ7Y4V53mHvdbJ7z3pJMNPr8M468hEAoYgBIDtMfgUWlmENx7LEARBrc 6Azjr3NUph+qZaq3A37WcKs6ofBB7Vs= -----END CERTIFICATE-----Generated at Mon Mar 2 21:55:29 2026 by rpki-client