$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ed885da4-8827-3389-9c4b-0565e2121678.roa File: ed885da4-8827-3389-9c4b-0565e2121678.roa (raw, json) Hash identifier: 5Vc1wXiaBRo5wrVOnkTT3qbv0kYaAoRTVc80CNYTAo4= Subject key identifier: F8:CC:EB:9A:A2:23:C8:2E:C1:F3:87:7C:F2:2C:22:2A:E6:50:CC:0E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D6B35C67CAB0F4FE7B880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ed885da4-8827-3389-9c4b-0565e2121678.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:6b:35:c6:7c:ab:0f:4f:e7:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=f0cb8db4-43f0-4fc3-bd7e-f1d5a74fcb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:05:06:69:6e:8d:f5:b8:07:b8:bb:09:16:a1: c9:2c:83:35:cc:01:e1:36:df:6a:a5:08:a2:aa:b5: c9:b0:95:26:e7:c9:12:34:ac:14:39:dc:36:18:16: e4:58:56:71:07:de:7c:37:9d:57:6b:27:2b:80:e8: 30:25:af:fa:d8:bc:d1:f4:d8:98:40:b4:af:eb:43: 9d:44:1c:b0:b6:c2:54:48:5c:a9:31:2b:9b:82:a0: b9:be:78:f6:73:ea:89:ac:99:24:46:ae:9c:84:8d: a2:07:74:28:e2:c1:af:7f:f1:de:f9:84:2c:cb:12: 07:7b:ba:75:36:2a:51:19:9c:66:84:06:d5:0e:37: 28:0b:2d:cd:7a:5a:bf:cb:56:66:ba:17:f9:39:ae: 7a:f8:f6:24:0c:b7:4b:fc:46:e5:e6:8b:a3:2e:d3: 39:93:42:f7:84:37:c3:62:28:4b:0a:c2:f0:9e:a5: 59:aa:1a:1d:61:87:64:d7:e3:99:28:5d:04:74:77: ee:4a:ee:ad:b3:25:27:1b:14:fe:dc:37:25:05:4b: f3:85:4c:67:23:51:d4:cd:23:b3:7c:b4:6f:7e:0f: 79:91:af:d4:8a:a8:84:86:1c:b1:74:5b:9a:f9:67: 6b:07:29:50:25:a4:84:f2:73:d3:02:3b:52:14:d5: 62:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CC:EB:9A:A2:23:C8:2E:C1:F3:87:7C:F2:2C:22:2A:E6:50:CC:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ed885da4-8827-3389-9c4b-0565e2121678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5d:33:a0:52:6f:97:12:b8:c5:2d:27:4e:a8:a9:15:8a:f4: d6:40:72:00:7a:be:05:8e:1f:9a:2a:60:e4:13:c4:6e:56:9f: 44:f2:28:0f:f5:eb:0b:7e:f5:2d:ad:a1:a6:2d:51:28:e2:e3: 2a:39:b9:bb:31:f7:ba:4d:69:d8:2e:92:9b:bd:ca:e8:0c:64: e2:42:ca:3a:0e:24:ed:c3:7c:e9:fe:d1:37:16:49:46:43:1e: 17:33:f8:d7:54:b8:8d:20:0f:dd:30:c2:6b:b4:e6:ef:c0:f7: 39:35:25:1c:9d:bb:f3:65:b7:aa:a6:9b:3e:ed:9d:d2:d0:f6: 0f:9d:60:a9:f8:b9:2f:8c:2e:12:25:b6:67:5b:3d:1b:21:3f: 7f:cb:65:0c:81:7e:fd:b0:7f:ea:ea:f1:bc:47:8e:8e:d9:4a: ab:15:79:f3:e0:05:be:73:ff:3b:89:79:a5:7c:f5:25:f0:25: 67:9d:58:54:c7:0e:56:06:20:f0:ad:c6:ae:a5:07:c0:6d:79: 17:a7:06:c5:fb:9e:eb:b0:82:8f:41:fa:57:5d:c5:69:93:33: b6:ff:35:6c:85:33:8a:64:bf:f3:42:95:f3:c2:49:5e:8f:72: b0:22:8b:02:9b:1e:a1:15:2f:98:ad:16:78:75:63:6a:ef:fa: 0c:7a:73:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPWs1xnyrD0/nuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZjBjYjhkYjQtNDNmMC00ZmMzLWJkN2UtZjFkNWE3NGZjYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgUGaW6N9bgHuLsJFqHJLIM1zAHhNt9qpQii qrXJsJUm58kSNKwUOdw2GBbkWFZxB958N51XaycrgOgwJa/62LzR9NiYQLSv60Od RBywtsJUSFypMSubgqC5vnj2c+qJrJkkRq6chI2iB3Qo4sGvf/He+YQsyxIHe7p1 NipRGZxmhAbVDjcoCy3Nelq/y1Zmuhf5Oa56+PYkDLdL/Ebl5oujLtM5k0L3hDfD YihLCsLwnqVZqhodYYdk1+OZKF0EdHfuSu6tsyUnGxT+3DclBUvzhUxnI1HUzSOz fLRvfg95ka/UiqiEhhyxdFua+WdrBylQJaSE8nPTAjtSFNVitQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjM65qiI8guwfOHfPIsIirmUMwOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWQ4ODVkYTQtODgyNy0z Mzg5LTljNGItMDU2NWUyMTIxNjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAldM6BSb5cSuMUtJ06oqRWK9NZAcgB6vgWOH5oqYOQTxG5Wn0TyKA/1 6wt+9S2toaYtUSji4yo5ubsx97pNadgukpu9yugMZOJCyjoOJO3DfOn+0TcWSUZD Hhcz+NdUuI0gD90wwmu05u/A9zk1JRydu/Nlt6qmmz7tndLQ9g+dYKn4uS+MLhIl tmdbPRshP3/LZQyBfv2wf+rq8bxHjo7ZSqsVefPgBb5z/zuJeaV89SXwJWedWFTH DlYGIPCtxq6lB8BteRenBsX7nuuwgo9B+lddxWmTM7b/NWyFM4pkv/NClfPCSV6P crAiiwKbHqEVL5itFnh1Y2rv+gx6cw8= -----END CERTIFICATE-----Generated at Sat Mar 7 12:49:14 2026 by rpki-client