$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d6cd087b-46de-329b-a0d2-9d9292a1d1ce.roa File: d6cd087b-46de-329b-a0d2-9d9292a1d1ce.roa (raw, json) Hash identifier: A8ihyT7OFqD8zN7sSUJymDjfzXKCnWtGtvDCAxabsv4= Subject key identifier: C7:96:CB:96:0E:0A:80:53:2A:FC:3B:F0:A0:31:FB:D7:94:45:7D:93 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D76B10FF55609A830C980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d6cd087b-46de-329b-a0d2-9d9292a1d1ce.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:76:b1:0f:f5:56:09:a8:30:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=123c950a-d6c5-49ba-b8c0-d751f590da5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:94:54:fe:f9:57:87:78:f0:fd:79:d5:4c:95: f9:10:9d:6e:f3:3c:08:14:a5:6d:e9:30:aa:22:09: 1c:ee:85:25:69:3c:b9:a0:be:13:af:7c:e9:57:f0: dc:15:75:28:29:7f:ed:30:1e:90:ad:85:63:de:38: 9f:42:01:7a:fc:10:8e:6d:4d:2b:79:af:47:ee:21: ab:6f:68:72:d0:f1:cf:31:82:37:71:f7:ec:6f:4f: 8b:52:0f:55:62:c3:5e:49:37:ca:76:c3:79:57:ce: 6a:8a:f6:7c:98:34:d0:cb:73:f0:0f:09:63:cd:58: 0a:4b:27:11:2b:30:cf:e9:65:77:e5:70:a8:30:f5: 21:1f:db:7b:5b:d5:0e:fd:f9:1d:b0:f4:20:36:a0: 46:85:8d:37:ad:32:79:5c:f3:37:57:29:2d:fc:f9: 34:5b:b1:35:fb:01:77:ed:9c:78:db:f6:08:f7:2a: a7:f9:55:c2:a1:bc:3b:4d:dd:10:71:38:d6:9d:82: 5f:26:d0:d2:31:b8:e5:78:71:b8:2d:d7:d0:cb:69: 5b:f4:4f:77:af:f5:ca:43:06:49:36:21:54:68:33: de:39:4e:11:2d:56:3d:07:56:46:5e:6f:00:8d:54: 1c:1c:f3:a8:8c:dd:3e:84:a6:c7:7e:1d:7e:d0:b0: 5a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:96:CB:96:0E:0A:80:53:2A:FC:3B:F0:A0:31:FB:D7:94:45:7D:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d6cd087b-46de-329b-a0d2-9d9292a1d1ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:57:af:13:a7:a4:1b:33:9c:72:33:bf:95:a6:db:d8:ae:b2: 4f:cd:87:52:ad:65:30:06:ce:83:d0:2b:61:c2:fa:10:47:cd: 3b:90:87:98:26:f8:ce:c3:28:4b:7d:64:0a:0f:a0:41:2f:e3: 9c:d5:60:4f:ed:41:2b:28:f3:f3:11:2d:59:d7:5b:9f:da:c4: 4f:1a:cf:72:14:aa:ef:e7:c9:9d:7e:17:56:0c:fe:10:e1:93: 7a:39:5b:b2:83:e8:cd:07:1d:68:64:98:a4:2e:3b:2a:d8:02: 43:2b:ff:01:f2:bc:3a:80:3d:f5:a4:5c:77:3e:52:10:f9:26: ed:09:94:0e:c1:f9:83:ab:ca:f9:ee:5e:bb:a2:85:4f:fb:30: c9:3d:27:8f:b7:8f:40:f3:d8:f9:c7:95:76:30:0a:23:80:0d: 1b:e9:75:7c:fe:d2:3c:9d:c4:af:59:b7:c8:4e:46:49:2f:a1: a0:c1:25:39:cc:c2:70:a2:33:31:bb:cd:e8:1b:ff:a8:a3:e8: be:e2:de:b9:39:b8:b3:87:6c:f1:d7:1a:c1:c8:ef:54:50:48: fe:b5:f3:cc:00:e3:e1:fc:0e:d6:8d:89:17:2c:8f:ca:bd:5f: f1:44:92:ac:90:60:c9:92:4e:0b:99:fc:5d:27:58:9f:45:5d: 4e:4e:ec:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPXaxD/VWCagwyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MTIzYzk1MGEtZDZjNS00OWJhLWI4YzAtZDc1MWY1OTBkYTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJRU/vlXh3jw/XnVTJX5EJ1u8zwIFKVt6TCq Igkc7oUlaTy5oL4Tr3zpV/DcFXUoKX/tMB6QrYVj3jifQgF6/BCObU0rea9H7iGr b2hy0PHPMYI3cffsb0+LUg9VYsNeSTfKdsN5V85qivZ8mDTQy3PwDwljzVgKSycR KzDP6WV35XCoMPUhH9t7W9UO/fkdsPQgNqBGhY03rTJ5XPM3Vykt/Pk0W7E1+wF3 7Zx42/YI9yqn+VXCobw7Td0QcTjWnYJfJtDSMbjleHG4LdfQy2lb9E93r/XKQwZJ NiFUaDPeOU4RLVY9B1ZGXm8AjVQcHPOojN0+hKbHfh1+0LBaQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeWy5YOCoBTKvw78KAx+9eURX2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDZjZDA4N2ItNDZkZS0z MjliLWEwZDItOWQ5MjkyYTFkMWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5XrxOnpBsznHIzv5Wm29iusk/Nh1KtZTAGzoPQK2HC+hBHzTuQh5gm +M7DKEt9ZAoPoEEv45zVYE/tQSso8/MRLVnXW5/axE8az3IUqu/nyZ1+F1YM/hDh k3o5W7KD6M0HHWhkmKQuOyrYAkMr/wHyvDqAPfWkXHc+UhD5Ju0JlA7B+YOryvnu XruihU/7MMk9J4+3j0Dz2PnHlXYwCiOADRvpdXz+0jydxK9Zt8hORkkvoaDBJTnM wnCiMzG7zegb/6ij6L7i3rk5uLOHbPHXGsHI71RQSP6188wA4+H8DtaNiRcsj8q9 X/FEkqyQYMmSTguZ/F0nWJ9FXU5O7Gc= -----END CERTIFICATE-----Generated at Sat Mar 7 12:44:13 2026 by rpki-client