$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c073bdde-3133-316c-aca0-6453facdfded.roa File: c073bdde-3133-316c-aca0-6453facdfded.roa (raw, json) Hash identifier: qe7Z5u+RNRyhjj0CGinWXg7r0qL3E2TdxZq2YSH/YEY= Subject key identifier: 55:B7:CE:04:E2:53:6B:46:61:3B:09:84:C0:7F:4E:DB:C3:B6:39:24 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D3E000AA6192D981CFB07B000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c073bdde-3133-316c-aca0-6453facdfded.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 8069 IP address blocks: 20.153.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:0a:a6:19:2d:98:1c:fb:07:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=ee9112ee-a333-445f-999b-6acac88f0f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:97:80:0f:fc:4e:a2:c2:9c:1f:b3:39:a4: 1e:cd:3f:9d:1b:98:27:6a:ca:bc:95:76:82:ea:16: 7d:f8:8d:b3:66:87:61:95:1f:dc:66:c6:af:9a:09: 27:92:18:87:ea:60:0a:d4:26:0a:f6:8c:fc:2f:7e: d2:0e:3d:ba:b8:41:79:9a:9a:a6:65:2e:7b:71:1b: e1:02:d0:cb:79:09:d9:3d:39:ca:5a:6b:cd:05:2b: 12:27:0c:23:e0:82:41:22:fb:5b:35:df:66:fc:a7: cd:78:6e:05:ae:13:54:12:52:fd:a1:56:7d:85:79: 0e:ce:93:d5:81:fc:57:cf:a8:87:79:e4:61:60:72: 08:a3:b3:2c:7c:ad:0c:43:24:81:90:86:50:a6:fc: 5d:bb:62:58:8a:b2:f3:7f:40:67:8f:f2:2f:e0:7e: b2:2a:69:c6:37:2e:f1:89:73:03:c7:13:3a:32:34: 1c:5d:0d:4e:dd:a8:87:4c:3d:c3:ae:ed:18:f1:57: 18:94:22:e8:7b:a7:76:05:45:2e:c8:06:25:36:21: 29:af:23:87:21:67:9c:36:e1:f4:5c:15:b5:cf:83: 99:3c:16:b4:e9:db:a9:53:bb:dc:fa:fd:8a:5f:55: 25:26:44:bb:a9:66:f5:55:c5:af:9c:df:64:35:c8: ad:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B7:CE:04:E2:53:6B:46:61:3B:09:84:C0:7F:4E:DB:C3:B6:39:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c073bdde-3133-316c-aca0-6453facdfded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:3c:a3:07:f1:ef:9b:b0:06:6b:b9:3f:7e:08:4c:9f:99:10: d8:18:9e:af:f8:45:29:b8:4c:d2:b7:55:a1:73:3e:b2:db:94: 31:08:32:df:dc:60:4d:c8:a3:2c:f6:5d:48:26:43:f4:bd:9d: fd:c9:ce:29:8c:ae:c8:e1:60:0c:88:c1:ff:49:c3:2c:54:67: fd:ff:9d:09:62:01:7a:90:56:a5:88:d4:d9:78:51:d7:4f:7f: 3a:29:da:73:41:10:92:6d:0c:36:76:8d:dd:b6:f4:1d:e8:1b: 5f:b7:6f:a1:82:07:f7:e0:c9:1a:00:21:8a:09:1b:c5:c5:53: f6:1a:6c:c3:a6:82:11:81:29:ab:56:9c:cc:e8:be:48:f4:9a: 96:6a:5c:7c:29:c0:7b:b0:88:e9:df:e1:69:e1:bb:d2:33:d0: cc:9f:93:a1:83:40:92:14:ca:ab:3a:38:5a:16:9a:0c:57:cd: fe:b2:f2:13:e4:f5:af:c5:61:95:cf:87:69:21:f1:6d:ae:c3: c5:e3:ce:07:e8:43:3d:70:84:ae:1b:35:53:0e:6c:b6:c6:c0: fb:b9:04:4e:54:f4:75:22:24:0d:36:89:a1:39:29:3f:87:d5: c9:1f:55:08:d4:a1:fe:73:bc:a7:b9:ef:dd:5c:3f:90:ca:a5: 34:42:a4:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAqmGS2YHPsHsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZWU5MTEyZWUtYTMzMy00NDVmLTk5OWItNmFjYWM4OGYwZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHWXgA/8TqLCnB+zOaQezT+dG5gnasq8lXaC 6hZ9+I2zZodhlR/cZsavmgknkhiH6mAK1CYK9oz8L37SDj26uEF5mpqmZS57cRvh AtDLeQnZPTnKWmvNBSsSJwwj4IJBIvtbNd9m/KfNeG4FrhNUElL9oVZ9hXkOzpPV gfxXz6iHeeRhYHIIo7MsfK0MQySBkIZQpvxdu2JYirLzf0Bnj/Iv4H6yKmnGNy7x iXMDxxM6MjQcXQ1O3aiHTD3Dru0Y8VcYlCLoe6d2BUUuyAYlNiEpryOHIWecNuH0 XBW1z4OZPBa06dupU7vc+v2KX1UlJkS7qWb1VcWvnN9kNcit+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFW3zgTiU2tGYTsJhMB/TtvDtjkkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzA3M2JkZGUtMzEzMy0z MTZjLWFjYTAtNjQ1M2ZhY2RmZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc8owfx75uwBmu5P34ITJ+ZENgYnq/4RSm4TNK3VaFzPrLblDEIMt/c YE3Ioyz2XUgmQ/S9nf3JzimMrsjhYAyIwf9JwyxUZ/3/nQliAXqQVqWI1Nl4UddP fzop2nNBEJJtDDZ2jd229B3oG1+3b6GCB/fgyRoAIYoJG8XFU/YabMOmghGBKatW nMzovkj0mpZqXHwpwHuwiOnf4Wnhu9Iz0Myfk6GDQJIUyqs6OFoWmgxXzf6y8hPk 9a/FYZXPh2kh8W2uw8XjzgfoQz1whK4bNVMObLbGwPu5BE5U9HUiJA02iaE5KT+H 1ckfVQjUof5zvKe5791cP5DKpTRCpBo= -----END CERTIFICATE-----Generated at Thu Mar 26 05:46:26 2026 by rpki-client