$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/072a14e5-9b4e-308b-abdd-d622a9d2d02d.roa File: 072a14e5-9b4e-308b-abdd-d622a9d2d02d.roa (raw, json) Hash identifier: nCPZKbyaiTARBgsEjcNz9vF7Pt2DD8MjK4mqYU/2soo= Subject key identifier: BA:78:26:53:32:16:D6:32:FD:F2:9E:CA:76:5D:F0:DD:90:9C:7D:35 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D42A3AEDA2D876BB37880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/072a14e5-9b4e-308b-abdd-d622a9d2d02d.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:42:a3:ae:da:2d:87:6b:b3:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=e21107dd-8854-482a-a7da-2c058b896cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e2:ce:ff:34:ab:db:37:a2:71:86:50:ea:4a: fc:b5:47:70:13:e2:ed:c7:14:6b:ee:d1:37:b6:a4: 79:ab:bd:b6:53:b5:1a:8d:e4:a6:57:2a:d0:fa:31: 99:f5:f4:3d:36:b9:db:0d:cf:b2:56:fb:55:6a:d5: 3a:b1:7e:3c:af:0c:ba:fb:d4:41:87:e8:b3:df:2f: c3:d6:36:9e:b6:48:1e:1b:88:93:df:55:fd:f2:e2: 70:59:94:d6:3d:89:d6:6a:eb:35:53:29:72:99:7f: 87:6c:e7:e6:2a:ac:7e:01:a5:4c:c7:32:78:73:d5: ab:d9:a7:9e:d7:81:05:4d:72:ac:51:ce:86:ff:3a: c8:75:7d:24:45:e0:d6:41:b9:52:16:fd:3d:b6:7c: df:6d:df:85:5b:07:b9:74:31:06:5a:53:1e:70:a9: b7:6a:f9:5d:67:c8:c3:40:04:4b:01:eb:8a:c7:5c: d0:82:67:7a:30:a6:aa:64:00:a9:65:43:80:c5:e5: d9:74:ff:19:93:9b:f6:f7:a9:d7:98:ef:b6:be:dc: 6a:d6:27:07:9e:10:96:bb:76:15:22:8f:1c:12:4c: 38:fa:76:7a:fd:ba:67:1f:b0:10:2a:c3:a5:4a:ea: 6f:3f:b5:dc:48:2a:2e:2f:fa:58:b2:4a:26:cc:48: 08:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:78:26:53:32:16:D6:32:FD:F2:9E:CA:76:5D:F0:DD:90:9C:7D:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/072a14e5-9b4e-308b-abdd-d622a9d2d02d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:ca:0c:20:fd:f2:bc:c8:89:b5:fb:f1:e7:da:8f:5d:38:52: bb:9c:56:f6:20:db:ef:fc:fa:72:f3:f1:13:e8:a4:7b:b4:cf: c5:f4:65:44:f8:0d:89:55:75:ed:53:5a:c9:98:73:e1:41:50: 3a:6c:66:1f:ec:d0:4e:ad:58:fb:bc:04:0a:58:ce:b9:ee:d4: 84:79:c2:8c:d8:fd:de:4a:89:aa:32:af:f2:51:82:07:d5:4b: 8d:9c:16:62:75:f4:7d:ff:0d:9c:f2:b3:80:d0:cc:b0:5e:a5: 77:cb:da:16:ff:66:6e:02:07:31:ff:db:16:50:6e:58:90:83: c4:61:da:63:8c:c5:5f:96:88:a0:66:25:b4:de:89:03:7c:47: a8:a0:10:1e:a4:da:1f:8b:a4:ba:87:6a:66:e4:cf:38:58:e2: 9f:13:44:bf:ee:64:0a:10:a8:ce:27:ef:96:86:96:0f:ae:81: b6:14:bc:e3:6c:f3:37:f5:10:21:65:e7:4e:20:e7:3f:a1:d5: c0:46:f3:d1:d2:91:77:e1:ca:21:f4:34:61:d8:8d:67:58:15: fd:9f:66:76:d6:56:8b:3d:ab:4e:25:33:16:12:a1:38:b5:d7: cc:e4:96:1b:20:40:d0:30:4d:3f:2d:2a:85:d8:9a:fa:f0:dc: 7a:0f:aa:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUKjrtoth2uzeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTIxMTA3ZGQtODg1NC00ODJhLWE3ZGEtMmMwNThiODk2Y2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheLO/zSr2zeicYZQ6kr8tUdwE+LtxxRr7tE3 tqR5q722U7UajeSmVyrQ+jGZ9fQ9NrnbDc+yVvtVatU6sX48rwy6+9RBh+iz3y/D 1jaetkgeG4iT31X98uJwWZTWPYnWaus1UylymX+HbOfmKqx+AaVMxzJ4c9Wr2aee 14EFTXKsUc6G/zrIdX0kReDWQblSFv09tnzfbd+FWwe5dDEGWlMecKm3avldZ8jD QARLAeuKx1zQgmd6MKaqZACpZUOAxeXZdP8Zk5v296nXmO+2vtxq1icHnhCWu3YV Io8cEkw4+nZ6/bpnH7AQKsOlSupvP7XcSCouL/pYskomzEgIWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLp4JlMyFtYy/fKeynZd8N2QnH01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDcyYTE0ZTUtOWI0ZS0z MDhiLWFiZGQtZDYyMmE5ZDJkMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJleMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfKDCD98rzIibX78efaj104UrucVvYg2+/8+nLz8RPopHu0z8X0ZUT4 DYlVde1TWsmYc+FBUDpsZh/s0E6tWPu8BApYzrnu1IR5wozY/d5Kiaoyr/JRggfV S42cFmJ19H3/DZzys4DQzLBepXfL2hb/Zm4CBzH/2xZQbliQg8Rh2mOMxV+WiKBm JbTeiQN8R6igEB6k2h+LpLqHambkzzhY4p8TRL/uZAoQqM4n75aGlg+ugbYUvONs 8zf1ECFl504g5z+h1cBG89HSkXfhyiH0NGHYjWdYFf2fZnbWVos9q04lMxYSoTi1 18zklhsgQNAwTT8tKoXYmvrw3HoPqns= -----END CERTIFICATE-----Generated at Sat Mar 7 12:44:13 2026 by rpki-client