$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/05750043-034e-3fc7-9402-42dc9ce060a4.roa File: 05750043-034e-3fc7-9402-42dc9ce060a4.roa (raw, json) Hash identifier: EfnW8T7a77F+F67A7YJgRriDbOHfoOIJb6AbaOiT+XI= Subject key identifier: B7:83:B8:33:6F:9C:B2:63:CD:7A:E0:C8:DB:8B:74:FE:1B:53:87:5C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE423599B89FCF70118842C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/05750043-034e-3fc7-9402-42dc9ce060a4.roa Signing time: Wed 19 Aug 2026 18:04:03 +0000 ROA not before: Wed 19 Aug 2026 18:04:03 +0000 ROA not after: Tue 05 Mar 2030 05:00:00 +0000 asID: 8075 IP address blocks: 40.120.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:59:9b:89:fc:f7:01:18:84:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:03 2026 GMT Not After : Mar 5 05:00:00 2030 GMT Subject: CN=76960a4f-54d1-4a1f-aff5-6aa69069d49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:46:72:44:f5:4f:e4:d5:0a:f4:8c:e0:e3:8d: dd:0b:b2:39:a6:69:76:fc:d5:70:d8:6f:25:8f:7a: 51:d9:1e:1c:39:d3:6f:6c:a9:d1:0c:73:a3:1d:c4: 7e:c7:9f:e0:5a:eb:cf:54:09:78:fe:0a:b0:af:5b: 19:13:17:61:cb:6c:a3:c0:37:87:f5:65:3d:62:b5: 93:cf:de:77:0f:d9:f2:da:ae:f8:da:26:fc:e8:e1: fc:d9:19:24:99:a9:32:20:10:48:d6:b6:01:21:a0: cb:a5:c6:ac:6f:7a:1d:1c:d7:b3:ac:5b:3b:87:50: 01:b0:da:cd:d7:6f:e6:25:22:a9:64:d4:ca:47:c7: d8:e3:01:a1:99:ef:0c:fe:9a:ca:08:29:94:6a:e8: 95:1e:9b:00:bc:64:c2:00:6a:c0:85:09:4f:f1:dd: f3:cd:29:37:5c:96:35:75:f2:f2:e0:f1:6c:aa:95: fe:7b:f2:5a:e6:70:90:5f:41:8d:6d:1d:24:68:bf: 5f:1e:ac:48:5e:a0:76:a1:0e:f7:6f:3d:26:dd:c5: 99:03:91:5d:db:c4:eb:3b:cc:bc:5b:5a:31:47:26: 55:9a:56:35:90:51:27:9d:fa:44:a3:28:c9:7c:dc: 42:82:1c:4e:2a:63:4c:ec:17:19:0e:03:3b:47:35: 07:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:83:B8:33:6F:9C:B2:63:CD:7A:E0:C8:DB:8B:74:FE:1B:53:87:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/05750043-034e-3fc7-9402-42dc9ce060a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.120.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:d5:3a:f4:a8:aa:73:48:5d:c4:45:d5:13:51:0c:1d:b9:c0: 14:ea:87:08:62:8e:b5:8f:95:f2:e3:38:8c:58:31:6c:a4:b0: a9:5e:44:43:14:45:f0:8c:52:5b:09:f4:42:11:f4:8e:60:88: 4f:9f:d5:80:71:10:90:f4:04:82:e7:e6:b0:c8:e2:da:7d:bf: 1e:99:03:d1:81:fd:e7:95:a2:bc:96:7a:6e:1a:0e:cd:4d:09: ba:33:15:4e:1c:57:c1:a1:28:dc:53:1d:3a:de:1d:72:5b:da: 80:1c:2b:f6:26:ad:b0:72:81:a7:3c:b1:71:37:1b:88:8c:47: f3:8b:d4:2f:40:c8:9e:8b:38:40:80:b3:52:d7:92:08:89:b9: 35:ef:54:fc:63:be:4e:ed:92:a8:bb:d2:c5:d3:a9:17:93:85: 8d:54:4c:e8:14:1c:0d:d0:a7:97:16:31:d4:3a:87:9a:70:fc: 79:3b:1d:91:bb:42:9a:60:ce:cb:21:a7:21:88:32:3b:53:e0: 8c:e2:24:ff:f2:01:1d:85:ec:2f:92:dd:a9:a6:63:4e:74:b5: ee:25:3c:f1:b6:a5:95:ad:ed:d1:c5:fa:43:f6:df:ba:f2:70: 88:1e:11:57:e5:a4:99:01:05:fb:70:4d:b1:8b:cc:b2:6e:4c: 95:f7:d1:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1mbifz3ARiELIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwM1oXDTMwMDMwNTA1MDAwMFowLzEtMCsGA1UEAxMk NzY5NjBhNGYtNTRkMS00YTFmLWFmZjUtNmFhNjkwNjlkNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0ZyRPVP5NUK9Izg443dC7I5pml2/NVw2G8l j3pR2R4cOdNvbKnRDHOjHcR+x5/gWuvPVAl4/gqwr1sZExdhy2yjwDeH9WU9YrWT z953D9ny2q742ib86OH82RkkmakyIBBI1rYBIaDLpcasb3odHNezrFs7h1ABsNrN 12/mJSKpZNTKR8fY4wGhme8M/prKCCmUauiVHpsAvGTCAGrAhQlP8d3zzSk3XJY1 dfLy4PFsqpX+e/Ja5nCQX0GNbR0kaL9fHqxIXqB2oQ73bz0m3cWZA5Fd28TrO8y8 W1oxRyZVmlY1kFEnnfpEoyjJfNxCghxOKmNM7BcZDgM7RzUHFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeDuDNvnLJjzXrgyNuLdP4bU4dcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDU3NTAwNDMtMDM0ZS0z ZmM3LTk0MDItNDJkYzljZTA2MGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKHgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHVOvSoqnNIXcRF1RNRDB25wBTqhwhijrWPlfLjOIxYMWyksKleREMU RfCMUlsJ9EIR9I5giE+f1YBxEJD0BILn5rDI4tp9vx6ZA9GB/eeVoryWem4aDs1N CbozFU4cV8GhKNxTHTreHXJb2oAcK/YmrbBygac8sXE3G4iMR/OL1C9AyJ6LOECA s1LXkgiJuTXvVPxjvk7tkqi70sXTqReThY1UTOgUHA3Qp5cWMdQ6h5pw/Hk7HZG7 QppgzsshpyGIMjtT4IziJP/yAR2F7C+S3ammY050te4lPPG2pZWt7dHF+kP237ry cIgeEVflpJkBBftwTbGLzLJuTJX30bw= -----END CERTIFICATE-----Generated at Fri Sep 4 23:52:33 2026 by rpki-client