$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa File: c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa (raw, json) Hash identifier: 29/Um0ValdY6Q+2JCpag8WQ62uWiukkAMHGmxPhRcgs= Subject key identifier: 07:50:6F:DF:E7:80:89:3C:F0:F8:C7:7A:03:09:DD:B2:1A:CE:F0:FA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB6B72507144CCB54B09BC9F0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.153.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:25:07:14:4c:cb:54:b0:9b:c9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=63c12876-a9c1-4527-9a14-7d4ec1db12fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:c5:25:29:c4:62:c7:f2:f2:77:b2:be:f4: 92:61:08:15:cf:17:b1:c3:54:ca:9a:73:a7:f0:bd: 60:e5:15:17:96:bb:1f:3e:73:70:49:eb:99:02:d3: 28:29:10:d5:11:98:9b:49:a2:b5:52:d4:52:d4:fb: 2e:be:57:e5:d7:a8:62:6c:06:50:20:30:52:8c:45: f7:70:be:a1:a1:29:15:b6:23:9c:5a:71:fd:3d:71: 9e:02:55:b2:f9:de:0f:2c:2f:dc:c3:93:91:48:54: 8e:6e:b3:3d:e2:4d:e6:db:0d:21:12:c1:63:24:aa: 64:01:3e:06:93:96:28:76:d4:3f:8a:58:06:54:d6: d0:0b:6c:92:08:62:11:69:d3:24:3a:7a:ff:c9:11: 09:17:39:69:9b:f2:a2:d1:c5:25:8f:57:7f:ad:22: b2:d8:6a:2a:07:1c:11:40:6b:18:1e:67:b2:04:4a: b3:6d:d1:5f:90:d8:75:cc:c9:d2:da:fa:bc:02:07: a1:6a:cc:a1:fa:cb:2b:ad:22:ad:14:40:18:1a:06: 3a:32:4b:a2:10:5f:8e:db:fb:1c:ce:8a:03:a9:af: a8:60:77:45:0c:7c:66:85:79:46:07:d9:7e:ef:33: 60:34:94:d7:5b:f8:ae:be:fa:d8:64:52:fa:02:14: c7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:50:6F:DF:E7:80:89:3C:F0:F8:C7:7A:03:09:DD:B2:1A:CE:F0:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a7:65:d6:2d:f8:1b:25:7e:7d:95:43:b5:96:c0:5f:6b:4c: b1:07:26:a6:37:e4:be:87:8b:6b:d8:23:3d:42:ad:65:43:ad: 5b:22:b0:e7:0a:3c:9b:63:29:68:c4:6f:78:63:3c:a4:2b:44: 42:5f:8f:78:a9:45:66:3e:ae:aa:b7:0b:ad:47:1d:58:06:29: 6e:37:42:7f:d9:e2:85:76:80:7f:a4:2a:74:39:b9:00:b6:1d: be:66:65:4e:4b:4f:3b:21:f3:de:d7:6f:71:b8:a5:89:b3:d4: 76:cc:ad:52:2c:a9:cc:24:91:27:6e:38:ad:d3:0b:a6:f2:51: 7d:29:a2:a3:d5:5c:14:3b:96:f8:e8:ab:f1:7c:cf:82:41:8d: 42:5d:b0:4c:f9:06:a5:72:28:76:ad:13:d6:b7:6f:f8:64:cb: d1:fa:b9:f2:38:1f:cd:84:b3:c6:9c:e3:c7:d4:d3:22:62:fb: 0f:c0:0f:40:e7:3a:34:c8:df:dc:dc:7e:7a:71:de:4f:99:66: e9:65:ff:80:26:fa:b0:08:05:ae:4e:37:fc:6c:d0:4b:2b:0f: 81:2f:ae:fb:af:8d:a7:fb:8c:a9:cd:3e:d4:43:cf:e8:40:47: 78:f6:34:c6:09:f5:e9:e5:45:6a:da:7d:71:25:21:88:6a:fe: 28:35:f7:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tyUHFEzLVLCbyfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk NjNjMTI4NzYtYTljMS00NTI3LTlhMTQtN2Q0ZWMxZGIxMmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV3FJSnEYsfy8neyvvSSYQgVzxexw1TKmnOn 8L1g5RUXlrsfPnNwSeuZAtMoKRDVEZibSaK1UtRS1Psuvlfl16hibAZQIDBSjEX3 cL6hoSkVtiOcWnH9PXGeAlWy+d4PLC/cw5ORSFSObrM94k3m2w0hEsFjJKpkAT4G k5YodtQ/ilgGVNbQC2ySCGIRadMkOnr/yREJFzlpm/Ki0cUlj1d/rSKy2GoqBxwR QGsYHmeyBEqzbdFfkNh1zMnS2vq8Agehasyh+ssrrSKtFEAYGgY6MkuiEF+O2/sc zooDqa+oYHdFDHxmhXlGB9l+7zNgNJTXW/iuvvrYZFL6AhTHBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdQb9/ngIk88PjHegMJ3bIazvD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzRjYzMyN2EtMTcyYS0z Yjc5LWFhMDgtZGQ1ZjJmZGQzZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIunZdYt+Bslfn2VQ7WWwF9rTLEHJqY35L6Hi2vYIz1CrWVDrVsisOcK PJtjKWjEb3hjPKQrREJfj3ipRWY+rqq3C61HHVgGKW43Qn/Z4oV2gH+kKnQ5uQC2 Hb5mZU5LTzsh897Xb3G4pYmz1HbMrVIsqcwkkSduOK3TC6byUX0poqPVXBQ7lvjo q/F8z4JBjUJdsEz5BqVyKHatE9a3b/hky9H6ufI4H82Es8ac48fU0yJi+w/AD0Dn OjTI39zcfnpx3k+ZZull/4Am+rAIBa5ON/xs0EsrD4Evrvuvjaf7jKnNPtRDz+hA R3j2NMYJ9enlRWrafXElIYhq/ig193g= -----END CERTIFICATE-----Generated at Mon Mar 2 16:30:23 2026 by rpki-client