$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6caa8ff9-1320-340a-be5a-a05ace7c9eb9.roa File: 6caa8ff9-1320-340a-be5a-a05ace7c9eb9.roa (raw, json) Hash identifier: EMt3OphnwBwcdoY4jDg0YAXnVnai1lfcMv88v7PCfCs= Subject key identifier: E8:5B:88:9B:BA:D6:B7:FF:DB:1B:21:AF:30:1C:55:A5:2B:9A:0A:15 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D23F7584CD8082E640980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6caa8ff9-1320-340a-be5a-a05ace7c9eb9.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:23:f7:58:4c:d8:08:2e:64:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=f1cd5635-e79e-4c07-a1a0-049f19dffc73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:8e:42:e7:04:74:77:2a:ea:f7:e1:2f:6f: c6:b9:6f:b0:6a:7b:c9:fc:0f:36:19:31:e2:38:13: 89:2a:9b:a9:1c:30:50:dd:f5:6d:78:4d:4d:0f:cc: e6:36:42:46:d8:cd:26:48:f1:5d:11:c1:7c:fb:47: f5:4b:19:96:7e:20:a9:04:50:d3:16:70:1d:b6:24: e8:d8:e4:d6:2e:61:4c:eb:99:c9:a6:fa:03:59:51: 07:53:58:83:87:f0:cc:44:d8:52:3b:46:bb:82:0d: 9d:2c:1c:b2:aa:0e:17:0c:eb:f8:36:bf:ef:c9:49: 99:9c:58:77:12:01:e4:74:a8:ac:e7:6d:99:13:7d: 6a:7f:87:71:3e:dd:7a:10:1b:e1:fe:64:87:73:ee: 87:d1:ac:81:e6:f9:ba:be:b5:0f:5b:41:98:09:4a: 06:58:d2:4c:55:b4:5f:04:63:d3:ec:35:5d:65:81: ac:80:b4:fb:94:c2:e6:74:f6:47:fc:e9:40:9b:e6: c7:56:36:eb:e7:f4:a7:db:4d:c6:7a:3a:c1:f8:b8: 71:e8:a6:fe:86:dd:92:9f:ca:70:3e:ec:ed:d3:1e: b4:09:43:1e:b3:7d:0c:3a:eb:94:f8:5a:94:3c:47: 28:cd:f5:b5:4a:be:cb:bb:5b:78:60:60:67:74:d3: 20:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5B:88:9B:BA:D6:B7:FF:DB:1B:21:AF:30:1C:55:A5:2B:9A:0A:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6caa8ff9-1320-340a-be5a-a05ace7c9eb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:36:7b:f6:a0:28:61:04:1d:b5:de:f5:13:3b:9d:62:fb:57: e0:01:60:98:c2:a0:17:22:ac:4c:6d:cf:bc:61:99:9d:0f:1e: b6:a4:96:bc:eb:be:a5:2f:45:cd:94:9d:87:00:81:62:dd:7d: 30:e7:03:84:12:d3:8e:63:06:d8:14:80:cd:16:d4:b3:4c:a9: d0:62:bb:2a:d5:10:78:35:4e:56:82:a1:a3:a6:d2:66:5a:05: ae:41:ef:20:84:36:a5:b9:40:3e:d1:81:a9:f2:ab:52:9e:38: 3f:0c:0e:8a:e0:29:8d:67:37:ca:ca:eb:64:37:e9:af:96:ec: c8:84:40:e2:c8:58:03:6e:49:59:e1:a9:55:b9:b9:06:1e:fe: fc:47:08:62:62:0c:b7:52:bd:c5:e5:6c:f7:71:27:41:bf:07: 94:1e:47:10:72:5e:b9:b3:69:8b:69:4c:aa:3b:a8:a4:90:54: 58:59:fd:e4:77:53:1f:2d:47:20:94:86:5c:6d:9b:06:fa:bb: a7:ed:b3:8e:ec:66:93:44:5b:0f:97:64:20:f2:be:ba:e8:13: 89:b0:8f:c7:cb:b9:18:5a:de:3f:24:f7:c1:15:83:b1:cd:cb: a0:b1:b3:f6:5b:1d:42:10:b7:bd:5c:75:c0:0e:09:46:16:cd: 88:d2:58:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPSP3WEzYCC5kCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZjFjZDU2MzUtZTc5ZS00YzA3LWExYTAtMDQ5ZjE5ZGZmYzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsmOQucEdHcq6vfhL2/GuW+wanvJ/A82GTHi OBOJKpupHDBQ3fVteE1ND8zmNkJG2M0mSPFdEcF8+0f1SxmWfiCpBFDTFnAdtiTo 2OTWLmFM65nJpvoDWVEHU1iDh/DMRNhSO0a7gg2dLByyqg4XDOv4Nr/vyUmZnFh3 EgHkdKis522ZE31qf4dxPt16EBvh/mSHc+6H0ayB5vm6vrUPW0GYCUoGWNJMVbRf BGPT7DVdZYGsgLT7lMLmdPZH/OlAm+bHVjbr5/Sn203GejrB+Lhx6Kb+ht2Sn8pw Puzt0x60CUMes30MOuuU+FqUPEcozfW1Sr7Lu1t4YGBndNMgnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhbiJu61rf/2xshrzAcVaUrmgoVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmNhYThmZjktMTMyMC0z NDBhLWJlNWEtYTA1YWNlN2M5ZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQ2e/agKGEEHbXe9RM7nWL7V+ABYJjCoBcirExtz7xhmZ0PHraklrzr vqUvRc2UnYcAgWLdfTDnA4QS045jBtgUgM0W1LNMqdBiuyrVEHg1TlaCoaOm0mZa Ba5B7yCENqW5QD7Rganyq1KeOD8MDorgKY1nN8rK62Q36a+W7MiEQOLIWANuSVnh qVW5uQYe/vxHCGJiDLdSvcXlbPdxJ0G/B5QeRxByXrmzaYtpTKo7qKSQVFhZ/eR3 Ux8tRyCUhlxtmwb6u6fts47sZpNEWw+XZCDyvrroE4mwj8fLuRha3j8k98EVg7HN y6Cxs/ZbHUIQt71cdcAOCUYWzYjSWB8= -----END CERTIFICATE-----Generated at Sat Mar 7 12:47:33 2026 by rpki-client