$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d453ee1b-4d2b-3fe0-bad7-3db46dbcacb1.roa File: d453ee1b-4d2b-3fe0-bad7-3db46dbcacb1.roa (raw, json) Hash identifier: 7xVTqZp1lX4DiswFffxS7pWfjdXuhaJM5VlPao3X6X8= Subject key identifier: 64:5D:3D:C4:E7:BD:1D:68:ED:09:EA:1B:1F:51:BC:CE:79:14:37:FC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CD6D204FD935B0EAA85B3BA80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d453ee1b-4d2b-3fe0-bad7-3db46dbcacb1.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:04:fd:93:5b:0e:aa:85:b3:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=4680843b-0b77-4b1e-8ceb-622020a19bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4e:2f:df:5d:66:2e:c6:1c:a3:86:f0:c6:6e: af:62:55:47:b1:f9:50:13:3e:f5:62:ed:4e:5a:d7: 5e:16:1d:48:a9:ad:3c:26:17:4a:5a:d0:08:0a:52: 2a:0d:0c:25:c0:09:03:cd:3b:1e:d8:36:e5:c6:03: ef:f2:5a:03:7f:f6:59:5d:5a:07:c5:32:d6:65:41: d5:db:82:aa:91:35:a0:65:22:25:f3:b7:db:24:0d: 12:f2:04:60:1c:43:f5:3e:29:c4:23:ab:bd:ce:81: 57:35:00:1a:a5:cf:30:75:8b:7f:3f:2e:f5:37:52: 39:ed:cb:c0:e3:34:c0:c3:f9:16:27:6b:1c:20:fc: 2e:6e:9b:5e:e6:46:4f:39:b5:12:08:37:cd:23:8e: 1f:28:dd:a0:53:d2:6a:ab:57:c1:a1:f6:fa:a7:aa: 37:48:4f:f7:ca:66:52:57:c0:ed:57:2b:09:ee:f4: c7:17:47:7d:f2:19:3e:02:6e:e5:0f:50:2c:13:c2: 63:05:51:fe:27:fd:e8:63:3e:9c:0c:32:fd:7d:4d: af:51:df:97:19:b8:7c:84:27:30:f3:b1:bc:5d:4a: 68:5d:0a:51:6c:a0:fc:6d:43:0f:8d:2a:4d:c9:0a: 07:cd:c5:21:6b:9d:c8:e8:b5:3c:10:36:08:2d:7d: f7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5D:3D:C4:E7:BD:1D:68:ED:09:EA:1B:1F:51:BC:CE:79:14:37:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d453ee1b-4d2b-3fe0-bad7-3db46dbcacb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f7:4b:a7:64:10:b4:34:f5:51:84:41:08:34:6c:91:b1:3b: 1f:6b:da:cb:d9:7d:6e:90:03:1e:e6:08:f6:2e:fa:04:dd:47: 7a:9d:24:9e:cc:2a:c4:79:10:f4:13:ae:a2:5c:bf:57:6a:e7: 50:ec:57:0d:0d:49:5e:09:53:a8:28:5a:ac:67:21:d6:b6:a4: 86:5e:4e:18:43:9c:86:c2:39:15:52:17:be:ce:a8:a6:53:97: 8e:53:fe:0b:fe:89:9b:47:43:48:5c:3f:87:11:62:3c:0e:b0: 72:8d:9c:a1:71:c1:35:41:9b:7a:a1:30:07:31:e4:d7:51:fb: e2:df:3a:0d:73:92:7d:69:54:34:2a:e5:67:e6:f2:53:95:ef: 89:13:0c:23:17:c6:3c:fd:d3:a7:46:4e:b1:33:cb:fe:1a:e1: 04:b4:c7:df:9c:2f:7f:e8:07:4d:e9:00:0c:de:65:2c:70:73: fd:c5:9a:91:72:03:aa:e5:02:99:45:be:4c:dc:ab:5c:77:14: ee:f5:b2:b9:6f:e6:5a:4d:d0:eb:b9:30:6f:21:a4:2b:42:55: d1:f7:52:7e:06:95:3b:7b:5a:b0:f4:c4:ac:8b:25:82:45:85: c7:2a:57:fd:1c:74:9a:f4:27:0b:fd:7d:a5:05:e0:2e:32:1e: 28:83:1b:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0gT9k1sOqoWzuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk NDY4MDg0M2ItMGI3Ny00YjFlLThjZWItNjIyMDIwYTE5YmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv04v311mLsYco4bwxm6vYlVHsflQEz71Yu1O WtdeFh1Iqa08JhdKWtAIClIqDQwlwAkDzTse2DblxgPv8loDf/ZZXVoHxTLWZUHV 24KqkTWgZSIl87fbJA0S8gRgHEP1PinEI6u9zoFXNQAapc8wdYt/Py71N1I57cvA 4zTAw/kWJ2scIPwubpte5kZPObUSCDfNI44fKN2gU9Jqq1fBofb6p6o3SE/3ymZS V8DtVysJ7vTHF0d98hk+Am7lD1AsE8JjBVH+J/3oYz6cDDL9fU2vUd+XGbh8hCcw 87G8XUpoXQpRbKD8bUMPjSpNyQoHzcUha53I6LU8EDYILX331wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRdPcTnvR1o7QnqGx9RvM55FDf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDQ1M2VlMWItNGQyYi0z ZmUwLWJhZDctM2RiNDZkYmNhY2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH73S6dkELQ09VGEQQg0bJGxOx9r2svZfW6QAx7mCPYu+gTdR3qdJJ7M KsR5EPQTrqJcv1dq51DsVw0NSV4JU6goWqxnIda2pIZeThhDnIbCORVSF77OqKZT l45T/gv+iZtHQ0hcP4cRYjwOsHKNnKFxwTVBm3qhMAcx5NdR++LfOg1zkn1pVDQq 5Wfm8lOV74kTDCMXxjz906dGTrEzy/4a4QS0x9+cL3/oB03pAAzeZSxwc/3FmpFy A6rlAplFvkzcq1x3FO71srlv5lpN0Ou5MG8hpCtCVdH3Un4GlTt7WrD0xKyLJYJF hccqV/0cdJr0Jwv9faUF4C4yHiiDG+I= -----END CERTIFICATE-----Generated at Mon Mar 2 16:28:52 2026 by rpki-client