$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16940e4d-16e0-3c7e-93e7-cbbe425bfe2e.roa File: 16940e4d-16e0-3c7e-93e7-cbbe425bfe2e.roa (raw, json) Hash identifier: GUcGBVOmFPDitiKk1IbF71Mt9wS2QVJQFsGVcOaOmEs= Subject key identifier: 5B:8F:BF:E1:8C:54:DA:57:41:62:D3:BC:7D:14:AA:14:2A:CB:D2:2C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D38A23E6F9AB631175F00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16940e4d-16e0-3c7e-93e7-cbbe425bfe2e.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:38:a2:3e:6f:9a:b6:31:17:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=e5a05a99-e69c-4b50-b948-835018284f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:01:11:92:55:bd:2e:a9:4b:c6:72:3e:35:5f: 94:cb:81:4b:76:00:9d:0b:71:7a:75:c2:8f:26:b1: ef:0d:50:57:1f:2d:99:8a:5c:f8:bd:29:1c:c1:b6: 7b:0a:5f:2c:23:28:b3:83:23:16:52:e8:29:8b:14: 66:d4:46:84:2a:5f:ff:dc:75:2c:81:be:e7:67:6a: 62:9f:b6:52:0e:05:83:d2:01:5b:06:52:f1:cf:9f: 00:4f:fe:a2:8d:0b:bf:1b:a6:b2:33:26:35:2f:6c: 0d:ba:85:cb:55:d0:b7:3c:3f:46:bd:6e:d3:9c:bd: d8:17:ee:1f:5f:dd:b5:00:cb:91:b0:ec:93:3f:75: 73:2b:2a:a7:ec:8d:21:5d:76:0d:7a:93:78:44:1b: 7d:6b:86:24:80:0f:4c:50:23:82:ff:b6:3c:bd:05: ce:c5:f5:88:e0:ee:3a:23:8f:16:01:79:ab:4a:f6: 08:24:10:c9:67:9f:1c:07:c2:0d:52:27:c1:14:97: 23:cb:e5:3b:b7:41:b7:14:87:1b:69:79:b4:a0:f0: d3:6e:fb:22:e6:e9:a1:13:71:4f:d0:17:11:33:65: d6:9f:c2:80:07:b5:c5:27:7c:f5:e0:be:4a:f1:5d: ad:d5:73:6a:ab:06:81:8b:60:f7:dc:07:8f:60:9d: d6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8F:BF:E1:8C:54:DA:57:41:62:D3:BC:7D:14:AA:14:2A:CB:D2:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16940e4d-16e0-3c7e-93e7-cbbe425bfe2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:45:8a:d9:50:47:bd:a7:d0:1b:6c:28:94:58:34:0f:a4:33: 8a:a1:04:f5:31:19:4a:16:4f:5e:da:ac:29:f4:55:93:70:12: f4:48:10:07:38:74:04:e1:e6:34:36:34:3d:48:e1:69:e9:c9: 01:b6:eb:7e:77:07:b3:68:30:f0:4f:cc:e8:16:f4:51:fb:f6: 3a:55:a8:bd:7a:f2:cb:42:ee:70:1f:c4:f8:99:56:58:98:44: f7:a8:a4:9c:a1:b4:fd:41:9a:db:1a:01:d6:25:51:6a:f9:93: 70:d6:8f:76:ea:e9:45:fa:23:19:7f:1a:44:fb:62:ff:38:b6: 44:c4:4a:d2:11:c0:ac:68:9c:e7:34:a9:b0:85:28:00:a2:28: 48:a9:93:5f:8f:01:1f:36:4e:ba:38:59:d4:d4:de:ea:62:c9: be:0d:57:a5:bd:e5:d1:aa:22:55:00:69:ec:c9:52:0f:5a:ad: 9c:b3:c1:ce:4c:fa:39:22:c0:59:ca:7c:8c:23:15:a6:e1:1d: a4:16:c7:34:40:59:37:16:ff:06:fd:9b:a0:9e:41:e9:7e:64: 88:af:7a:6f:db:50:80:fe:8d:e1:24:20:63:cc:e3:7a:34:38: 9f:df:91:a3:09:1d:23:27:49:1e:c3:2f:1c:29:a4:c7:86:5c: c6:37:80:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPTiiPm+atjEXXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTVhMDVhOTktZTY5Yy00YjUwLWI5NDgtODM1MDE4Mjg0ZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gERklW9LqlLxnI+NV+Uy4FLdgCdC3F6dcKP JrHvDVBXHy2Zilz4vSkcwbZ7Cl8sIyizgyMWUugpixRm1EaEKl//3HUsgb7nZ2pi n7ZSDgWD0gFbBlLxz58AT/6ijQu/G6ayMyY1L2wNuoXLVdC3PD9GvW7TnL3YF+4f X921AMuRsOyTP3VzKyqn7I0hXXYNepN4RBt9a4YkgA9MUCOC/7Y8vQXOxfWI4O46 I48WAXmrSvYIJBDJZ58cB8INUifBFJcjy+U7t0G3FIcbaXm0oPDTbvsi5umhE3FP 0BcRM2XWn8KAB7XFJ3z14L5K8V2t1XNqqwaBi2D33AePYJ3W6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuPv+GMVNpXQWLTvH0UqhQqy9IsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTY5NDBlNGQtMTZlMC0z YzdlLTkzZTctY2JiZTQyNWJmZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9FitlQR72n0BtsKJRYNA+kM4qhBPUxGUoWT17arCn0VZNwEvRIEAc4 dATh5jQ2ND1I4WnpyQG26353B7NoMPBPzOgW9FH79jpVqL168stC7nAfxPiZVliY RPeopJyhtP1BmtsaAdYlUWr5k3DWj3bq6UX6Ixl/GkT7Yv84tkTEStIRwKxonOc0 qbCFKACiKEipk1+PAR82Tro4WdTU3upiyb4NV6W95dGqIlUAaezJUg9arZyzwc5M +jkiwFnKfIwjFabhHaQWxzRAWTcW/wb9m6CeQel+ZIivem/bUID+jeEkIGPM43o0 OJ/fkaMJHSMnSR7DLxwppMeGXMY3gCI= -----END CERTIFICATE-----Generated at Sat Mar 7 12:45:16 2026 by rpki-client