$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa File: deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa (raw, json) Hash identifier: l0ZxFB1K0VXnp5gDMSSM3une+VY4M1WXVsbPPNQnzDE= Subject key identifier: 84:23:65:D3:14:4D:38:6C:0F:10:57:F4:E8:65:2B:9D:E3:62:73:C1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB6B725A7926B342649C1FA80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.153.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:25:a7:92:6b:34:26:49:c1:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=9c9faa2d-e164-4a98-ace4-b723fc7708d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c3:f4:dd:9a:d4:14:38:51:53:d9:aa:9f:1f: 43:a3:a5:43:e1:70:f3:8e:dd:b4:fe:24:8b:d0:2f: d9:50:5c:f5:5f:86:cb:6b:4a:93:66:17:64:ce:25: 17:0b:d8:95:9a:67:49:ff:7b:4b:a6:c5:79:ab:3a: a9:00:21:d3:59:ee:e6:d7:b8:9f:2b:b9:40:d6:c5: 48:7d:9b:f4:f0:55:63:75:8c:d6:1e:13:df:a6:af: db:24:b9:bc:54:59:12:b0:e7:43:f0:84:5c:8e:bd: 0f:00:47:bc:45:7f:f4:81:f4:1d:7d:b4:01:df:c3: cc:6e:49:32:03:ab:b3:62:e2:bd:e1:81:e4:f0:0a: 10:0e:60:78:e5:ea:6f:06:df:68:0e:a8:cd:c0:31: 4e:b4:19:9c:9a:ef:ae:2f:ae:23:9a:6d:3b:fb:b0: 47:4b:24:21:5a:63:74:1e:93:c9:e3:2c:c5:14:7f: 62:8b:bb:75:fc:e7:e8:9b:86:7f:5e:fb:43:db:c9: bb:fa:ea:23:61:df:b3:10:c6:bc:93:c5:a3:ff:e9: eb:c8:76:7d:74:6e:c2:c9:91:97:19:04:f8:25:f9: 53:fa:3f:ce:fc:93:09:5b:13:9e:f5:9a:79:ff:1d: 96:e6:ad:0d:fd:ca:51:78:37:3d:8b:9f:e5:fa:4a: d2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:23:65:D3:14:4D:38:6C:0F:10:57:F4:E8:65:2B:9D:E3:62:73:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:3e:9a:e1:13:f1:2c:64:71:1f:b6:27:12:a8:17:d8:56:84: 63:3f:0c:cc:47:ac:27:d8:32:65:f0:aa:f6:23:b5:7c:d4:12: cb:5a:58:13:65:ec:32:fa:90:46:22:df:67:11:ac:67:9f:ab: 7e:1a:3e:1a:fd:00:92:c5:55:9a:e8:92:e2:00:3b:75:bc:94: 41:33:84:a0:0b:a7:fd:a5:ca:be:a0:9c:74:09:bd:4a:7b:5f: c2:98:cb:c9:f5:61:82:2e:a9:30:be:93:14:ed:06:01:76:4b: 02:ad:99:61:bd:f5:26:13:a3:3f:a5:19:8c:04:6d:73:51:63: 98:5a:a5:4a:d4:85:55:dc:72:6e:53:f0:45:c7:a0:96:a5:0c: 32:b3:60:f3:06:07:11:ca:be:48:d4:72:0e:65:d9:8e:ed:27: 05:97:ac:fa:66:a3:7b:76:7d:92:39:66:06:9c:a7:4f:5d:18: ff:c4:a9:e9:05:86:a2:49:c3:52:e6:d1:fa:0e:f3:ca:5d:97: 1e:3f:a6:9d:30:ee:6f:85:26:ef:cc:73:f1:25:d9:ef:96:f0: bb:56:8c:66:5b:7c:88:25:0f:28:39:dc:af:ca:98:4d:40:ca: 3e:6a:bf:9a:59:a0:c8:59:01:81:49:37:19:2b:f5:de:69:98: a9:fb:ab:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tyWnkms0JknB+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk OWM5ZmFhMmQtZTE2NC00YTk4LWFjZTQtYjcyM2ZjNzcwOGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMP03ZrUFDhRU9mqnx9Do6VD4XDzjt20/iSL 0C/ZUFz1X4bLa0qTZhdkziUXC9iVmmdJ/3tLpsV5qzqpACHTWe7m17ifK7lA1sVI fZv08FVjdYzWHhPfpq/bJLm8VFkSsOdD8IRcjr0PAEe8RX/0gfQdfbQB38PMbkky A6uzYuK94YHk8AoQDmB45epvBt9oDqjNwDFOtBmcmu+uL64jmm07+7BHSyQhWmN0 HpPJ4yzFFH9ii7t1/Ofom4Z/XvtD28m7+uojYd+zEMa8k8Wj/+nryHZ9dG7CyZGX GQT4JflT+j/O/JMJWxOe9Zp5/x2W5q0N/cpReDc9i5/l+krSRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQjZdMUTThsDxBX9OhlK53jYnPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGVlYWViNDYtMWVlMi0z M2ExLWIyZDUtNzNjOTMyN2ZkMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc+muET8SxkcR+2JxKoF9hWhGM/DMxHrCfYMmXwqvYjtXzUEstaWBNl 7DL6kEYi32cRrGefq34aPhr9AJLFVZrokuIAO3W8lEEzhKALp/2lyr6gnHQJvUp7 X8KYy8n1YYIuqTC+kxTtBgF2SwKtmWG99SYToz+lGYwEbXNRY5hapUrUhVXccm5T 8EXHoJalDDKzYPMGBxHKvkjUcg5l2Y7tJwWXrPpmo3t2fZI5Zgacp09dGP/EqekF hqJJw1Lm0foO88pdlx4/pp0w7m+FJu/Mc/El2e+W8LtWjGZbfIglDyg53K/KmE1A yj5qv5pZoMhZAYFJNxkr9d5pmKn7q6Y= -----END CERTIFICATE-----Generated at Mon Mar 2 20:01:55 2026 by rpki-client