$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c74a35cb-5696-3b09-a563-6065650b49c9.roa File: c74a35cb-5696-3b09-a563-6065650b49c9.roa (raw, json) Hash identifier: ecuL+hMZq4oMNLxFz0bdfGTN2F07iNel+TldU3I+3CE= Subject key identifier: 29:C8:62:FC:5D:F2:C7:8E:07:07:6E:B9:C3:21:9B:F2:D0:0E:8E:68 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D3D44E54E653F8D444BC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c74a35cb-5696-3b09-a563-6065650b49c9.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:3d:44:e5:4e:65:3f:8d:44:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=8894f0b4-f7ac-48d8-b971-5b2b224d368b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3c:53:e6:6f:18:bf:da:ed:4c:cc:5a:09:a5: 07:2f:a0:40:76:a3:7d:fc:80:13:6a:db:33:48:cd: d7:b0:7f:3d:07:fe:4c:21:3e:38:ba:fb:86:1b:a4: 6c:75:d3:c8:7d:72:a4:17:4f:7f:ba:fc:03:6a:66: 9a:a0:9e:d1:0b:1c:45:fb:ab:31:5f:f5:36:d2:38: 0b:c4:bb:3d:8c:fa:71:70:94:60:b3:7a:af:85:44: 4e:a2:d7:36:f8:f2:cc:17:56:4c:ad:c9:c4:da:d9: e3:6b:0f:4d:6b:3b:8f:e0:73:60:01:e3:1f:a2:c0: f3:9a:5e:91:6e:80:9a:d4:f4:5b:50:64:8a:27:f7: 03:46:38:af:75:b1:9d:d2:f6:4e:68:08:1a:c5:ba: dc:eb:16:23:25:ef:f8:24:a0:b3:8e:1b:7f:53:09: 05:8c:3a:86:24:84:74:87:e1:85:93:09:4f:7e:d5: 43:c7:ac:f5:f3:18:d5:1e:39:a9:c5:f4:40:56:e9: 59:15:fb:92:3e:72:30:c2:e2:59:51:f3:aa:38:ef: 3c:2b:97:20:b9:47:ba:ed:40:0d:41:a3:72:aa:de: 16:24:14:5c:ce:6d:7c:40:db:96:f7:c3:90:f5:f2: 38:85:8d:c3:10:c7:87:40:e0:ef:fc:28:b5:03:24: 21:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C8:62:FC:5D:F2:C7:8E:07:07:6E:B9:C3:21:9B:F2:D0:0E:8E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c74a35cb-5696-3b09-a563-6065650b49c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:79:f7:d9:d5:99:de:0c:c5:d7:bb:96:37:60:81:88:8b:c3: 0d:f3:01:32:c5:64:68:07:57:4b:95:56:60:11:72:9f:60:09: 59:ae:3a:ba:3c:ac:a3:b8:94:fe:c3:b2:1b:2a:3e:2e:8e:b1: 0a:a2:bf:22:1d:29:34:14:3b:0e:10:77:6b:0c:73:5d:17:64: 65:1c:6b:5f:9d:1b:3e:a6:93:95:5c:2a:5d:5a:fe:d4:2d:85: a0:bc:cb:e1:fe:a9:5c:ab:b5:a5:ae:29:12:90:0f:14:45:9f: bf:e0:5e:d5:4c:19:de:da:06:22:e3:1d:52:d0:9a:4f:17:6f: 56:d7:94:0c:ba:6a:56:99:a0:07:b2:a7:a2:bd:d4:21:92:6a: e5:ef:fb:56:c6:79:53:7f:b1:64:d3:53:fb:60:b2:a1:a3:28: 63:1b:af:39:55:6f:a5:37:b6:eb:f3:73:5f:86:de:31:0c:51: 6c:95:16:df:b2:dc:d4:1f:d1:38:b9:8c:b1:30:43:19:1b:15: 15:92:41:f8:cf:fa:12:5f:e5:a6:7e:32:aa:93:bb:f0:e9:39: 68:b3:26:39:98:db:3d:89:33:8f:df:33:fa:d0:13:b9:56:38: d9:76:42:92:98:2a:f4:b7:1e:b5:d2:55:c4:49:e9:66:e6:df: 9f:19:20:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPT1E5U5lP41ES8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ODg5NGYwYjQtZjdhYy00OGQ4LWI5NzEtNWIyYjIyNGQzNjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTxT5m8Yv9rtTMxaCaUHL6BAdqN9/IATatsz SM3XsH89B/5MIT44uvuGG6RsddPIfXKkF09/uvwDamaaoJ7RCxxF+6sxX/U20jgL xLs9jPpxcJRgs3qvhUROotc2+PLMF1ZMrcnE2tnjaw9NazuP4HNgAeMfosDzml6R boCa1PRbUGSKJ/cDRjivdbGd0vZOaAgaxbrc6xYjJe/4JKCzjht/UwkFjDqGJIR0 h+GFkwlPftVDx6z18xjVHjmpxfRAVulZFfuSPnIwwuJZUfOqOO88K5cguUe67UAN QaNyqt4WJBRczm18QNuW98OQ9fI4hY3DEMeHQODv/Ci1AyQhjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnIYvxd8seOBwduucMhm/LQDo5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzc0YTM1Y2ItNTY5Ni0z YjA5LWE1NjMtNjA2NTY1MGI0OWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJh599nVmd4Mxde7ljdggYiLww3zATLFZGgHV0uVVmARcp9gCVmuOro8 rKO4lP7DshsqPi6OsQqivyIdKTQUOw4Qd2sMc10XZGUca1+dGz6mk5VcKl1a/tQt haC8y+H+qVyrtaWuKRKQDxRFn7/gXtVMGd7aBiLjHVLQmk8Xb1bXlAy6alaZoAey p6K91CGSauXv+1bGeVN/sWTTU/tgsqGjKGMbrzlVb6U3tuvzc1+G3jEMUWyVFt+y 3NQf0Ti5jLEwQxkbFRWSQfjP+hJf5aZ+MqqTu/DpOWizJjmY2z2JM4/fM/rQE7lW ONl2QpKYKvS3HrXSVcRJ6Wbm358ZIII= -----END CERTIFICATE-----Generated at Sat Mar 7 12:49:14 2026 by rpki-client