$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c94cb722-73e6-3d84-8ff9-c329ac78b958.roa File: c94cb722-73e6-3d84-8ff9-c329ac78b958.roa (raw, json) Hash identifier: 0YDYsh8Uj45wx8yxp25GyzK7MvHJYEUi++Hsw2pKf6Q= Subject key identifier: 1A:EC:76:85:32:71:55:C1:2B:52:E4:1F:DC:6F:BB:45:31:FB:D1:5C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB6B7254FBCDB770C4FA765C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c94cb722-73e6-3d84-8ff9-c329ac78b958.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.153.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:25:4f:bc:db:77:0c:4f:a7:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=68411623-fa2b-4b6c-941f-66160ddac134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4a:e8:30:44:79:55:ea:be:70:6e:8c:12:b8: 6d:f8:cf:cb:e9:2a:88:f5:0a:7a:00:f5:7e:07:c3: fd:56:d6:f2:99:1a:44:d5:aa:f1:38:1d:d8:5c:3e: fd:5c:4c:20:ea:a7:e4:91:9c:db:8f:47:d9:e7:b4: 97:04:f1:7b:e5:99:6b:aa:fb:f8:6a:22:30:8c:03: 94:ea:06:02:7a:29:fc:4e:12:93:1f:66:27:6c:36: 9e:a4:01:5a:f1:f4:57:c8:45:1b:21:3f:16:a4:22: d2:5b:38:58:f3:e6:84:40:88:a1:a7:cc:a3:37:be: c8:a8:aa:ce:9d:ee:20:72:38:74:75:46:f1:02:af: 2e:99:82:ab:e0:e1:34:c9:f3:5c:e3:50:3e:e5:df: 30:40:05:a3:a1:72:4d:13:23:11:ae:15:03:ac:30: c9:a7:4a:4e:2c:bc:0f:0e:31:ef:ce:58:4d:58:3d: 33:9a:1a:66:35:63:62:8b:ed:ef:95:1e:cb:16:01: bf:e1:c0:16:53:34:cc:64:d3:22:a7:aa:0a:2b:27: d1:27:cc:bc:a8:60:c7:20:45:9c:2d:f6:46:fb:77: 3b:e2:12:5a:22:48:b1:e9:c5:56:34:ee:c9:40:8c: ac:3d:40:47:7f:6d:6e:10:c7:ee:84:9a:5c:74:0f: d5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EC:76:85:32:71:55:C1:2B:52:E4:1F:DC:6F:BB:45:31:FB:D1:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c94cb722-73e6-3d84-8ff9-c329ac78b958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:33:e0:53:b2:8f:e7:57:a3:31:c1:56:b2:5e:10:1e:a2:67: 2f:4f:4b:03:ce:22:54:ca:a2:81:f8:d8:98:ad:11:9d:1c:27: 56:60:85:7f:1b:13:f6:26:12:57:37:34:29:25:c2:07:fe:71: fe:f8:58:43:54:79:e4:4e:c9:3f:20:e5:d1:1f:08:86:8a:66: 79:a5:5c:f1:d9:42:18:72:ff:14:a6:23:df:03:f2:ab:c4:d2: 48:4d:46:ec:18:a6:01:98:24:f6:a6:3b:dc:c7:2f:bf:34:b3: 14:63:27:9b:3c:56:38:94:4d:06:c5:7f:42:51:3c:c9:03:f4: 2e:0f:06:f8:e0:cc:21:39:7b:ab:31:07:32:56:8e:83:11:d9: d1:eb:e4:00:f8:d6:60:34:46:89:13:7b:68:fb:72:5a:7e:07: 7e:7f:c1:48:92:48:6d:57:ed:d6:43:77:ae:a3:10:1e:48:2e: 85:20:f9:a0:2c:d3:cc:37:04:75:7f:56:ab:58:13:6b:ab:63: 40:79:f6:97:85:82:72:f4:85:43:f1:db:51:3b:60:e6:e1:8a: 3d:d5:5f:c4:03:a9:4b:f6:4e:f2:1a:be:ef:0c:81:73:24:de: df:77:af:5a:1f:98:13:4a:61:74:d4:37:3c:85:ee:0c:18:c4: 06:d7:da:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tyVPvNt3DE+nZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk Njg0MTE2MjMtZmEyYi00YjZjLTk0MWYtNjYxNjBkZGFjMTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0roMER5Veq+cG6MErht+M/L6SqI9Qp6APV+ B8P9VtbymRpE1arxOB3YXD79XEwg6qfkkZzbj0fZ57SXBPF75Zlrqvv4aiIwjAOU 6gYCein8ThKTH2YnbDaepAFa8fRXyEUbIT8WpCLSWzhY8+aEQIihp8yjN77IqKrO ne4gcjh0dUbxAq8umYKr4OE0yfNc41A+5d8wQAWjoXJNEyMRrhUDrDDJp0pOLLwP DjHvzlhNWD0zmhpmNWNii+3vlR7LFgG/4cAWUzTMZNMip6oKKyfRJ8y8qGDHIEWc LfZG+3c74hJaIkix6cVWNO7JQIysPUBHf21uEMfuhJpcdA/VZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrsdoUycVXBK1LkH9xvu0Ux+9FcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzk0Y2I3MjItNzNlNi0z ZDg0LThmZjktYzMyOWFjNzhiOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcz4FOyj+dXozHBVrJeEB6iZy9PSwPOIlTKooH42JitEZ0cJ1ZghX8b E/YmElc3NCklwgf+cf74WENUeeROyT8g5dEfCIaKZnmlXPHZQhhy/xSmI98D8qvE 0khNRuwYpgGYJPamO9zHL780sxRjJ5s8VjiUTQbFf0JRPMkD9C4PBvjgzCE5e6sx BzJWjoMR2dHr5AD41mA0RokTe2j7clp+B35/wUiSSG1X7dZDd66jEB5ILoUg+aAs 08w3BHV/VqtYE2urY0B59peFgnL0hUPx21E7YObhij3VX8QDqUv2TvIavu8MgXMk 3t93r1ofmBNKYXTUNzyF7gwYxAbX2oY= -----END CERTIFICATE-----Generated at Mon Mar 2 20:05:57 2026 by rpki-client