$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f2865812-96b6-3483-9dce-a517a79d34c3.roa File: f2865812-96b6-3483-9dce-a517a79d34c3.roa (raw, json) Hash identifier: nQbaDtGVIkaZLu6MmwMTjM9iGE9uHbYsQvo8cg47V30= Subject key identifier: 1E:A5:21:29:96:CC:BD:65:F3:D7:28:CB:91:18:25:41:F9:D5:1C:A2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D143D1FEBEFCB713FB2DAD880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f2865812-96b6-3483-9dce-a517a79d34c3.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:1f:eb:ef:cb:71:3f:b2:da:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=1471ec72-6636-41b6-b134-4f2951b5fb6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d5:3f:fa:1d:d3:41:89:53:f0:07:89:2a:a3: 51:a7:14:c2:be:97:b1:e9:e3:ff:98:95:e0:e2:50: c6:cc:1d:9c:80:3f:6d:54:b5:7f:16:8e:a4:e6:5f: 4a:9d:53:d3:95:17:aa:16:97:9e:30:b2:58:c9:e1: 17:40:c5:55:0c:1f:12:e0:ac:ad:d2:55:77:c1:6f: 95:62:eb:bf:5d:dc:67:61:a6:ca:a7:d5:de:e0:d4: 5c:26:d8:ce:5d:79:23:bf:3e:28:15:62:22:85:45: d1:06:2c:09:30:83:a7:06:39:cf:73:b2:7d:b1:d9: 6f:f2:69:b5:f2:85:85:2b:16:fe:85:67:58:15:1f: 8d:4b:e5:dc:32:21:4e:06:90:07:09:c2:2a:f8:22: 01:5e:21:63:12:53:ff:e3:64:97:6c:72:d9:a2:bb: ad:91:17:b3:0f:1c:17:f4:e9:10:ac:fe:5a:88:64: c2:ff:8b:21:34:e2:4d:96:cd:d2:92:f1:f7:f5:f2: 8a:d7:27:a6:3a:c5:56:26:de:5a:fd:cc:9d:16:8e: 12:37:6e:48:4a:46:03:f3:66:c8:6e:fb:bd:04:e4: af:d3:f4:93:70:75:2a:7a:22:34:24:f5:4b:44:a8: bf:6a:85:47:b9:bd:2d:27:06:ef:95:c9:46:5b:ff: 56:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A5:21:29:96:CC:BD:65:F3:D7:28:CB:91:18:25:41:F9:D5:1C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f2865812-96b6-3483-9dce-a517a79d34c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:2e:7d:3e:f0:81:12:0b:2e:69:4d:7d:f9:c7:64:f9:e7:f4: 99:7e:c7:cf:d2:fc:61:e6:ea:dc:bd:0b:ba:6c:b6:d2:82:ac: da:46:52:2f:05:d7:30:64:6d:a8:89:02:2c:09:96:74:f3:f9: 81:65:d1:f9:9c:28:03:a0:85:e1:bc:d9:fa:8c:13:f9:5d:9a: ee:32:e9:f6:ea:39:4d:d3:c5:0a:49:3a:cb:75:a9:7f:f4:34: 37:49:5b:d8:e5:56:ed:ee:14:32:48:a0:d4:00:63:0e:63:57: 22:31:22:e1:2b:f7:0f:41:22:b7:04:cf:31:fb:72:15:d8:7a: a0:2b:27:c6:17:67:ef:ba:8f:2d:62:3c:08:ba:67:b6:1c:3a: 7a:0f:57:ef:91:72:40:d3:fc:4c:97:6c:03:28:c7:7d:ff:9b: 12:c0:d3:77:5f:5d:53:ca:8f:e8:83:9d:f2:2e:e8:6b:c6:cd: a2:fa:78:db:4c:d7:a2:dd:d5:f1:83:fd:13:fd:02:ad:50:9a: ce:32:01:db:cb:6a:c6:86:ef:0b:98:f3:2a:f6:f5:33:6f:41: 5b:98:65:21:6f:4f:9a:2d:29:43:92:52:7f:89:de:ff:ee:3e: df:7a:48:eb:79:23:32:ad:8a:32:da:81:a6:e7:39:7b:31:c3: 4c:68:4a:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPR/r78txP7La2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MTQ3MWVjNzItNjYzNi00MWI2LWIxMzQtNGYyOTUxYjVmYjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9U/+h3TQYlT8AeJKqNRpxTCvpex6eP/mJXg 4lDGzB2cgD9tVLV/Fo6k5l9KnVPTlReqFpeeMLJYyeEXQMVVDB8S4Kyt0lV3wW+V Yuu/XdxnYabKp9Xe4NRcJtjOXXkjvz4oFWIihUXRBiwJMIOnBjnPc7J9sdlv8mm1 8oWFKxb+hWdYFR+NS+XcMiFOBpAHCcIq+CIBXiFjElP/42SXbHLZorutkRezDxwX 9OkQrP5aiGTC/4shNOJNls3SkvH39fKK1yemOsVWJt5a/cydFo4SN25ISkYD82bI bvu9BOSv0/STcHUqeiI0JPVLRKi/aoVHub0tJwbvlclGW/9WQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6lISmWzL1l89coy5EYJUH51RyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjI4NjU4MTItOTZiNi0z NDgzLTlkY2UtYTUxN2E3OWQzNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEufT7wgRILLmlNffnHZPnn9Jl+x8/S/GHm6ty9C7psttKCrNpGUi8F 1zBkbaiJAiwJlnTz+YFl0fmcKAOgheG82fqME/ldmu4y6fbqOU3TxQpJOst1qX/0 NDdJW9jlVu3uFDJIoNQAYw5jVyIxIuEr9w9BIrcEzzH7chXYeqArJ8YXZ++6jy1i PAi6Z7YcOnoPV++RckDT/EyXbAMox33/mxLA03dfXVPKj+iDnfIu6GvGzaL6eNtM 16Ld1fGD/RP9Aq1Qms4yAdvLasaG7wuY8yr29TNvQVuYZSFvT5otKUOSUn+J3v/u Pt96SOt5IzKtijLagabnOXsxw0xoSrE= -----END CERTIFICATE-----Generated at Sat Mar 7 12:49:11 2026 by rpki-client