$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c476b60-f465-34b0-a266-d46d57400322.roa File: 7c476b60-f465-34b0-a266-d46d57400322.roa (raw, json) Hash identifier: H7NB3GinVwP+toX9HEj8x3VURnsibbAvoNDpk9+tLH4= Subject key identifier: 4E:1E:33:70:A9:A8:BD:D4:6D:3F:F7:A0:AB:8A:9B:C0:9C:FF:73:20 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D75431D1A973AADA10F80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c476b60-f465-34b0-a266-d46d57400322.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:75:43:1d:1a:97:3a:ad:a1:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=4255a50c-cd95-40c4-a617-c7c7427f83ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:98:36:80:5d:a0:17:1c:99:82:ce:d9:69:df: 0b:d8:c5:e7:56:ba:17:6d:ae:47:49:3c:8e:2c:85: c4:43:40:d3:39:86:08:ec:e2:e1:69:7d:bb:db:a3: 38:ce:3d:2e:29:b0:2a:10:61:49:6a:f3:40:03:d1: 0e:19:3f:3d:18:20:4b:1a:2e:73:59:24:a8:ae:e9: 95:3b:dd:19:08:3b:84:08:c2:7c:0b:54:ec:93:19: 76:3f:e1:dc:2e:79:8a:e2:d8:2a:7c:63:5e:ab:44: 0c:66:0d:6f:8f:c0:16:49:b0:d8:30:39:8f:13:f9: 83:78:9b:39:c4:4a:d3:3c:a5:1e:86:00:b2:02:3d: b8:24:f3:42:45:8b:35:79:fb:d7:ee:cc:27:cb:35: d5:e2:ca:2b:71:41:64:87:8e:bc:a0:b1:4c:ae:aa: d5:16:77:79:a0:51:7b:22:1b:16:c7:45:58:8f:3d: 0a:b0:51:ce:c1:42:64:a4:b7:ba:8e:86:f8:74:9b: 8f:4e:2a:63:bf:ee:ed:d3:43:7a:20:5b:f4:74:9c: 38:d4:b1:7a:de:fe:b4:43:24:b6:a9:a2:a0:2c:c6: 15:a6:a2:24:a0:94:34:98:2f:80:df:e2:75:7c:67: 35:68:68:cb:8a:74:76:86:16:99:95:20:ee:6e:2a: 19:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1E:33:70:A9:A8:BD:D4:6D:3F:F7:A0:AB:8A:9B:C0:9C:FF:73:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c476b60-f465-34b0-a266-d46d57400322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e9:46:99:22:f7:0f:c5:4f:f5:4d:3f:3f:69:bc:d5:05:64: 8f:f7:ba:c5:d3:c2:16:07:34:81:a9:32:8d:aa:85:2e:5a:79: c7:77:a7:a6:b2:1f:56:56:57:59:e4:74:4c:3f:9c:8e:27:66: 62:59:e6:ad:96:c4:b6:06:da:0d:98:cb:91:c7:48:19:3c:e8: e4:0a:bc:38:8b:cb:bb:80:ae:de:3c:c6:e6:61:ab:77:6a:e3: 68:a5:ad:00:20:15:c8:23:8a:42:0c:0c:c1:84:09:6e:77:f5: 86:d5:ed:95:04:a9:a4:9f:09:20:c4:2b:89:a3:b7:95:83:ac: 5d:6d:6a:53:77:ab:d7:73:71:15:58:3a:cf:e1:05:61:7b:1b: 81:38:19:06:ec:c0:35:3b:d9:f2:82:e7:17:89:83:22:bb:2a: 9c:72:b6:5f:40:98:3d:51:0e:0e:66:81:3f:60:3b:58:33:cb: 6a:ce:49:e4:01:d4:ea:7c:07:71:e4:c5:18:3e:72:98:bb:30: 07:af:3d:eb:0a:b4:e0:a7:90:0f:82:03:55:1c:23:8e:7b:b8: 8c:42:45:0b:82:e9:2c:cc:66:73:71:76:23:cd:6a:1c:c7:70: 46:ff:09:50:1f:d6:66:00:ae:d0:45:23:75:89:64:0b:80:60: 63:3a:ca:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPXVDHRqXOq2hD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NDI1NWE1MGMtY2Q5NS00MGM0LWE2MTctYzdjNzQyN2Y4M2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJg2gF2gFxyZgs7Zad8L2MXnVroXba5HSTyO LIXEQ0DTOYYI7OLhaX2726M4zj0uKbAqEGFJavNAA9EOGT89GCBLGi5zWSSorumV O90ZCDuECMJ8C1Tskxl2P+HcLnmK4tgqfGNeq0QMZg1vj8AWSbDYMDmPE/mDeJs5 xErTPKUehgCyAj24JPNCRYs1efvX7swnyzXV4sorcUFkh468oLFMrqrVFnd5oFF7 IhsWx0VYjz0KsFHOwUJkpLe6job4dJuPTipjv+7t00N6IFv0dJw41LF63v60QyS2 qaKgLMYVpqIkoJQ0mC+A3+J1fGc1aGjLinR2hhaZlSDubioZmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4eM3CpqL3UbT/3oKuKm8Cc/3MgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2M0NzZiNjAtZjQ2NS0z NGIwLWEyNjYtZDQ2ZDU3NDAwMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3pRpki9w/FT/VNPz9pvNUFZI/3usXTwhYHNIGpMo2qhS5aecd3p6ay H1ZWV1nkdEw/nI4nZmJZ5q2WxLYG2g2Yy5HHSBk86OQKvDiLy7uArt48xuZhq3dq 42ilrQAgFcgjikIMDMGECW539YbV7ZUEqaSfCSDEK4mjt5WDrF1talN3q9dzcRVY Os/hBWF7G4E4GQbswDU72fKC5xeJgyK7Kpxytl9AmD1RDg5mgT9gO1gzy2rOSeQB 1Op8B3HkxRg+cpi7MAevPesKtOCnkA+CA1UcI457uIxCRQuC6SzMZnNxdiPNahzH cEb/CVAf1mYArtBFI3WJZAuAYGM6ynw= -----END CERTIFICATE-----Generated at Sat Mar 7 12:50:04 2026 by rpki-client