$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b4dbd1cf-ce7a-344f-95d1-9d94f9ffaa21.roa File: b4dbd1cf-ce7a-344f-95d1-9d94f9ffaa21.roa (raw, json) Hash identifier: uSwS7KXFSPqj9hL6MaP6Vj0j0RBic2I2F0ecVhmm7xY= Subject key identifier: E6:E4:D9:97:F0:0B:29:84:15:AA:3B:D4:51:CE:37:8D:36:F0:52:29 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D4241858C2AA9B785B77C Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b4dbd1cf-ce7a-344f-95d1-9d94f9ffaa21.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:42:41:85:8c:2a:a9:b7:85:b7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=b65b972e-295e-4973-a14d-a37089110cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:08:94:61:07:61:d7:a9:b3:5c:b9:91:e8:4e: ec:13:3a:d5:d8:e8:0f:83:91:4f:b0:6e:0c:a1:3f: de:96:35:fe:35:3a:d2:4b:a0:f8:3e:c9:73:50:f7: c3:b9:ff:66:f0:a6:35:ad:1f:12:45:d3:90:87:24: ae:21:72:cb:2b:4e:ae:b6:f5:98:92:9a:c7:ef:38: 45:03:bf:b9:5c:cd:e1:ee:97:85:2d:93:da:e9:1e: 85:36:7d:c6:13:f5:09:c8:b7:a8:ee:43:23:62:e2: b6:1b:b0:e6:e9:1d:fd:c1:2d:c0:f9:44:32:33:72: a3:3f:9f:29:78:db:85:16:71:9a:40:97:c8:24:d4: d9:8c:5e:a2:f4:11:98:73:1f:4f:b4:10:22:eb:82: 95:0c:46:6e:66:a3:42:25:d3:22:66:28:c7:af:1d: e1:f2:b1:eb:f1:44:a0:c0:7a:e4:1c:e9:83:1a:f8: 77:ba:58:f9:b9:e9:ad:36:a1:b8:5b:10:70:68:96: 61:ea:3e:93:ce:16:96:4d:fd:bf:f4:9d:85:52:cb: e0:a8:9a:10:d2:75:93:8b:c2:45:71:d0:c0:1f:97: d4:10:52:fc:1b:bd:07:e2:47:9f:67:2e:ae:30:a9: f2:f5:9e:76:04:27:4f:3b:98:60:30:52:13:63:97: fe:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E4:D9:97:F0:0B:29:84:15:AA:3B:D4:51:CE:37:8D:36:F0:52:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b4dbd1cf-ce7a-344f-95d1-9d94f9ffaa21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:35:4c:c6:52:8a:cb:0c:07:33:c0:9a:c6:cf:f4:4a:10:bf: 98:b0:6f:db:68:7f:a1:af:d8:4d:32:67:28:a3:57:e5:38:08: 47:16:52:66:a7:3e:e8:a5:6c:26:8d:46:2c:f4:03:1b:08:19: 97:a4:f5:00:83:b3:ba:13:16:fd:e7:0a:5c:1b:78:51:17:19: 53:10:2c:63:c6:ed:ee:18:dd:b5:e6:c2:d3:b2:83:f8:58:c5: cd:78:6b:00:59:41:92:3f:36:01:61:1d:53:58:1c:b7:35:88: 3b:54:2a:37:42:a2:a6:b3:a8:7c:8f:60:27:20:b5:63:2e:80: 8a:77:f0:49:a1:a9:31:2c:ee:2a:5d:4c:04:b9:d0:9b:ec:6c: 95:42:6b:b0:c4:54:11:3e:c6:24:90:6b:39:dc:05:28:70:cb: 59:ea:22:06:ba:59:9f:71:d3:0a:7d:63:9d:d8:6f:bf:fa:7a: 86:7a:cf:c9:38:59:3e:17:90:96:44:d7:f1:82:b2:62:6f:73: 95:25:03:f0:a5:fe:d3:71:f9:00:6c:ae:7f:69:96:6e:38:4e: e6:ba:5c:7e:d3:74:79:52:34:7c:47:e3:3b:63:70:0e:6a:f8: 7a:3d:df:ff:9d:ea:90:7e:5f:25:7f:a1:c9:3b:68:67:39:fd: ee:a2:21:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUJBhYwqqbeFt3wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YjY1Yjk3MmUtMjk1ZS00OTczLWExNGQtYTM3MDg5MTEwY2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowiUYQdh16mzXLmR6E7sEzrV2OgPg5FPsG4M oT/eljX+NTrSS6D4PslzUPfDuf9m8KY1rR8SRdOQhySuIXLLK06utvWYkprH7zhF A7+5XM3h7peFLZPa6R6FNn3GE/UJyLeo7kMjYuK2G7Dm6R39wS3A+UQyM3KjP58p eNuFFnGaQJfIJNTZjF6i9BGYcx9PtBAi64KVDEZuZqNCJdMiZijHrx3h8rHr8USg wHrkHOmDGvh3ulj5uemtNqG4WxBwaJZh6j6TzhaWTf2/9J2FUsvgqJoQ0nWTi8JF cdDAH5fUEFL8G70H4kefZy6uMKny9Z52BCdPO5hgMFITY5f+3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObk2ZfwCymEFao71FHON4028FIpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjRkYmQxY2YtY2U3YS0z NDRmLTk1ZDEtOWQ5NGY5ZmZhYTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI81TMZSissMBzPAmsbP9EoQv5iwb9tof6Gv2E0yZyijV+U4CEcWUman PuilbCaNRiz0AxsIGZek9QCDs7oTFv3nClwbeFEXGVMQLGPG7e4Y3bXmwtOyg/hY xc14awBZQZI/NgFhHVNYHLc1iDtUKjdCoqazqHyPYCcgtWMugIp38EmhqTEs7ipd TAS50JvsbJVCa7DEVBE+xiSQazncBShwy1nqIga6WZ9x0wp9Y53Yb7/6eoZ6z8k4 WT4XkJZE1/GCsmJvc5UlA/Cl/tNx+QBsrn9plm44Tua6XH7TdHlSNHxH4ztjcA5q +Ho93/+d6pB+XyV/ock7aGc5/e6iIV8= -----END CERTIFICATE-----Generated at Sat Mar 7 12:45:16 2026 by rpki-client