$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b91b115a-de5b-3f4e-96d6-9a395108f2ca.roa File: b91b115a-de5b-3f4e-96d6-9a395108f2ca.roa (raw, json) Hash identifier: +/Bohb3GvQk1ik4csmWZ99JnCsqKXlfYaHOxe4Ux95Q= Subject key identifier: 77:24:0A:5A:6C:38:0A:26:7D:CD:09:CA:CA:93:44:12:20:D0:07:EC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D1219181E6BA5C2BD4400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b91b115a-de5b-3f4e-96d6-9a395108f2ca.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:12:19:18:1e:6b:a5:c2:bd:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=3bd3a666-92f2-43b2-becd-21958150e007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:30:e5:d2:8d:b8:38:8f:7b:10:c4:c2:c4:73: 67:dd:d6:03:de:ab:23:c0:f2:7c:be:b6:ef:90:4d: 7c:af:83:07:0f:00:3a:a0:5d:16:70:30:8c:96:46: 71:a9:1a:1e:6f:c3:ff:15:45:49:c2:92:ff:71:67: f5:83:7c:6f:e9:dd:05:d5:fa:13:63:13:ba:d8:fe: 53:de:ca:73:28:b4:df:62:12:20:fc:27:5a:d7:58: 53:9f:73:ef:fb:02:0c:59:5d:7f:e6:db:01:a6:63: be:a0:1b:fb:8d:6b:2f:0a:9a:92:77:c6:f9:e0:ef: 5b:fb:3e:bb:72:b8:c2:dd:1e:d5:19:4e:28:2a:7c: bc:ac:33:d4:ba:43:b1:66:b2:43:d1:ed:e8:b5:92: ed:e0:27:68:45:e4:51:57:90:51:c5:a3:b1:04:72: d9:9c:32:c5:69:b1:b4:e8:c3:4f:fb:6b:45:41:92: c4:fa:55:4d:10:7c:9e:ea:7f:25:86:90:38:b1:47: b1:71:d1:0f:f4:ec:ca:06:e2:1b:fc:68:e2:e0:8e: 69:16:9a:14:9a:7a:e2:41:2c:ed:b9:59:36:f8:b1: 1f:83:60:16:95:28:02:dd:0f:2e:91:ce:0a:ec:fb: 32:99:bd:ef:66:69:4c:56:f9:04:68:a4:84:e7:5b: b7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:24:0A:5A:6C:38:0A:26:7D:CD:09:CA:CA:93:44:12:20:D0:07:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b91b115a-de5b-3f4e-96d6-9a395108f2ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:23:dc:03:ae:e2:fe:ac:d9:c8:c6:fa:af:1d:20:74:fa:d7: 70:d6:d9:39:9f:2d:1e:60:f1:d8:3c:17:b5:1a:86:cf:fc:55: 3b:b1:b6:9e:84:a2:bd:d8:2e:4b:5a:ff:ed:78:30:76:87:c4: b4:38:87:92:ca:63:b6:90:3f:f6:c2:95:b6:eb:50:d4:fd:cf: 1a:11:27:b4:0d:f9:9e:70:e1:1a:d6:6e:8a:8b:7e:60:2e:bf: 7c:d0:44:5d:f0:01:93:58:12:dc:71:35:95:35:a7:a7:4d:b4: 52:4e:0d:b5:20:3e:7c:e2:f7:8f:b4:45:ed:ae:9c:48:07:e7: 00:e7:8d:5d:0e:d8:96:28:e0:40:81:e4:ee:ee:1d:c6:a7:ca: 22:9f:f5:e1:f0:d2:20:e3:a6:f6:8c:ac:e4:80:d8:b5:1f:71: 1d:8c:c9:47:47:57:e8:be:4c:69:b1:d5:57:8e:c8:aa:f9:3a: e5:23:e5:a4:b6:76:e8:ed:6d:22:15:35:f4:89:4d:5b:29:74: bd:25:22:a7:bb:72:d7:3a:e4:ad:fe:b4:02:67:6c:cb:d6:73: ef:42:34:02:c2:40:40:35:d4:c9:e8:14:c3:6b:67:22:a2:29: 1b:42:02:97:61:7d:91:2f:53:71:dc:9d:a1:fd:8e:7e:20:c9: d6:a9:66:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPRIZGB5rpcK9RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk M2JkM2E2NjYtOTJmMi00M2IyLWJlY2QtMjE5NTgxNTBlMDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTDl0o24OI97EMTCxHNn3dYD3qsjwPJ8vrbv kE18r4MHDwA6oF0WcDCMlkZxqRoeb8P/FUVJwpL/cWf1g3xv6d0F1foTYxO62P5T 3spzKLTfYhIg/Cda11hTn3Pv+wIMWV1/5tsBpmO+oBv7jWsvCpqSd8b54O9b+z67 crjC3R7VGU4oKny8rDPUukOxZrJD0e3otZLt4CdoReRRV5BRxaOxBHLZnDLFabG0 6MNP+2tFQZLE+lVNEHye6n8lhpA4sUexcdEP9OzKBuIb/Gji4I5pFpoUmnriQSzt uVk2+LEfg2AWlSgC3Q8ukc4K7Psymb3vZmlMVvkEaKSE51u3ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHckClpsOAomfc0JysqTRBIg0AfsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjkxYjExNWEtZGU1Yi0z ZjRlLTk2ZDYtOWEzOTUxMDhmMmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0j3AOu4v6s2cjG+q8dIHT613DW2TmfLR5g8dg8F7Uahs/8VTuxtp6E or3YLkta/+14MHaHxLQ4h5LKY7aQP/bClbbrUNT9zxoRJ7QN+Z5w4RrWboqLfmAu v3zQRF3wAZNYEtxxNZU1p6dNtFJODbUgPnzi94+0Re2unEgH5wDnjV0O2JYo4ECB 5O7uHcanyiKf9eHw0iDjpvaMrOSA2LUfcR2MyUdHV+i+TGmx1VeOyKr5OuUj5aS2 dujtbSIVNfSJTVspdL0lIqe7ctc65K3+tAJnbMvWc+9CNALCQEA11MnoFMNrZyKi KRtCApdhfZEvU3HcnaH9jn4gydapZj0= -----END CERTIFICATE-----Generated at Sat Mar 7 12:44:15 2026 by rpki-client