$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa File: d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa (raw, json) Hash identifier: tx5JJ/yDWGa637Dh6MNV/N33GPEzZoW7+FUnnmK487E= Subject key identifier: 79:94:99:78:98:37:56:7E:2E:7F:26:A4:00:21:B9:9B:9C:AA:E2:5B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D37662CDA1F602494B7D0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:37:66:2c:da:1f:60:24:94:b7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=e92da893-f23d-4157-8e44-a2b4076ea23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cf:af:4b:b9:0c:ce:97:40:0b:c1:5f:dd:b7: d0:88:79:5b:d1:bd:20:53:ca:47:25:6c:50:18:28: 4f:38:14:e5:c5:81:99:3c:90:c5:f6:49:91:46:b9: 6a:db:e3:b4:47:dd:ff:59:a8:c4:89:d6:66:94:3d: c6:cf:75:c1:ab:0a:d4:26:f2:48:d3:b0:4b:05:d4: d5:fa:e5:63:60:d4:2f:ee:97:b0:ee:a1:b7:9f:f8: a9:60:f1:1d:9e:44:16:e0:32:f2:dc:9a:f4:ca:fa: 91:58:0a:94:2e:53:be:8b:7f:8c:fa:8c:35:e1:11: e7:20:85:d0:f5:eb:e1:d0:d1:08:a9:83:62:37:f8: 70:07:6d:fd:99:c0:27:01:9e:ba:52:e1:5b:c3:c1: 4c:5a:13:53:fe:ee:5e:ea:db:b6:8b:06:a2:1b:16: 41:86:59:e9:41:ef:65:01:0a:2c:c2:20:c7:f7:31: 00:f5:64:7b:c6:11:fa:39:49:86:30:f7:96:b6:ac: b6:89:06:e5:f9:40:bc:b7:0a:10:a8:e4:15:09:ad: 59:85:11:3d:a6:b2:8f:4e:a0:b6:0f:b3:fd:b9:a4: cf:16:e2:36:b0:a5:dd:fa:5e:8f:bc:6e:96:09:61: 3a:56:67:bd:14:06:58:b1:85:2d:9a:fb:a6:03:d3: 42:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:94:99:78:98:37:56:7E:2E:7F:26:A4:00:21:B9:9B:9C:AA:E2:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:cc:0c:4e:c3:79:6d:5e:ca:e7:4b:ea:d8:79:36:d7:3c:25: 92:b5:68:8a:83:46:a2:8d:0f:7e:c1:19:fe:a3:93:49:46:60: 2f:1e:15:20:50:11:7a:ba:c8:22:1f:5b:7c:50:03:45:60:84: e5:ba:f6:15:a3:aa:ea:d7:94:5f:9a:9a:2c:38:6d:f1:e0:72: 19:67:40:85:b5:af:45:8b:e6:a1:01:9a:42:5a:8e:03:68:0f: 2b:6f:82:b4:08:cf:31:6a:d9:40:26:16:84:88:26:8d:28:16: 1d:03:99:9f:07:c3:bc:18:76:da:08:e1:bf:a4:b9:9b:46:ec: ef:27:af:38:64:13:01:10:9f:06:1c:75:3e:0b:89:55:b5:11: 0d:96:f3:91:e3:46:27:77:59:43:e4:e3:83:87:7b:4c:c9:42: ca:41:b0:d4:36:2e:0a:7f:3c:88:07:d2:e8:79:d7:ac:ba:72: d0:27:5c:c9:74:2c:1a:70:63:0c:c6:91:31:68:3d:02:e2:96: 1d:61:68:62:86:a6:77:78:97:4d:b0:a1:3c:47:e4:7c:b7:f8: d5:e9:ea:f5:c6:4e:08:07:d6:50:f7:6f:8a:45:57:3f:a5:cc: 67:02:04:9a:31:f6:cd:ec:9b:7e:cc:62:cb:0f:2b:34:e3:7a: a6:d6:52:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPTdmLNofYCSUt9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTkyZGE4OTMtZjIzZC00MTU3LThlNDQtYTJiNDA3NmVhMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc+vS7kMzpdAC8Ff3bfQiHlb0b0gU8pHJWxQ GChPOBTlxYGZPJDF9kmRRrlq2+O0R93/WajEidZmlD3Gz3XBqwrUJvJI07BLBdTV +uVjYNQv7pew7qG3n/ipYPEdnkQW4DLy3Jr0yvqRWAqULlO+i3+M+ow14RHnIIXQ 9evh0NEIqYNiN/hwB239mcAnAZ66UuFbw8FMWhNT/u5e6tu2iwaiGxZBhlnpQe9l AQoswiDH9zEA9WR7xhH6OUmGMPeWtqy2iQbl+UC8twoQqOQVCa1ZhRE9prKPTqC2 D7P9uaTPFuI2sKXd+l6PvG6WCWE6Vme9FAZYsYUtmvumA9NCcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmUmXiYN1Z+Ln8mpAAhuZucquJbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDNiMzk5NmQtZWU4Ny0z MDc1LThiZWYtZjA5ZDFmN2IyMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnMDE7DeW1eyudL6th5Ntc8JZK1aIqDRqKND37BGf6jk0lGYC8eFSBQ EXq6yCIfW3xQA0VghOW69hWjqurXlF+amiw4bfHgchlnQIW1r0WL5qEBmkJajgNo DytvgrQIzzFq2UAmFoSIJo0oFh0DmZ8Hw7wYdtoI4b+kuZtG7O8nrzhkEwEQnwYc dT4LiVW1EQ2W85HjRid3WUPk44OHe0zJQspBsNQ2Lgp/PIgH0uh516y6ctAnXMl0 LBpwYwzGkTFoPQLilh1haGKGpnd4l02woTxH5Hy3+NXp6vXGTggH1lD3b4pFVz+l zGcCBJox9s3sm37MYssPKzTjeqbWUvw= -----END CERTIFICATE-----Generated at Sat Mar 7 12:49:54 2026 by rpki-client