$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2ee96852-3d60-318a-9c2e-44c4b9a37de6.roa File: 2ee96852-3d60-318a-9c2e-44c4b9a37de6.roa (raw, json) Hash identifier: gvzUsgzy/1X9SGORd/Zmj4+CKBJFF75yu93wRg4H2B4= Subject key identifier: 72:59:4D:F6:66:50:F5:CB:3A:27:CD:A7:7F:EC:42:18:6C:B2:1D:A3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CBAE73C2A31C898FC63384800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2ee96852-3d60-318a-9c2e-44c4b9a37de6.roa Signing time: Mon 02 Feb 2026 14:00:40 +0000 ROA not before: Mon 02 Feb 2026 14:00:40 +0000 ROA not after: Sun 03 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ba:e7:3c:2a:31:c8:98:fc:63:38:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 2 14:00:40 2026 GMT Not After : May 3 13:00:40 2026 GMT Subject: CN=549ad831-0032-4dc6-bbd8-bfdd4047a828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:c4:15:8e:5e:88:af:ba:74:9a:82:a6:10: 59:1f:a8:bc:f7:8d:8b:98:e7:64:05:29:cd:98:29: 20:42:fa:31:89:00:61:83:5b:b9:94:49:73:d1:b4: ee:af:40:c1:f1:7b:64:97:06:2d:38:bd:71:34:00: f2:82:1f:18:eb:5d:3e:ab:e4:88:20:f1:c5:49:e5: ff:02:e0:d5:34:04:c3:97:30:c6:00:20:86:b0:5f: c2:2a:dc:4f:1f:14:d0:e7:ee:9a:fd:6b:8a:6a:86: 57:f1:18:3f:af:46:c1:6b:18:d6:58:30:70:46:9c: d2:da:2f:9a:c1:8d:f4:fb:78:1c:d5:f3:2a:58:e5: db:3e:71:9d:07:00:d6:24:cb:33:d7:60:00:5e:20: d7:52:a3:89:26:93:05:4c:6a:fd:73:cd:65:8a:11: 3b:73:79:22:04:a9:b4:26:6f:5b:e2:e7:c1:d0:39: 6c:84:e0:d5:45:c9:f3:30:71:6e:76:0d:87:38:dd: f6:0c:21:e5:37:cb:15:56:04:90:94:9b:59:a9:69: ac:73:3f:09:9e:39:20:3a:c3:71:43:50:53:db:19: 06:93:d5:5e:2f:c9:a5:ae:b5:d2:dc:e6:a5:cc:02: 75:5d:47:2f:f2:83:60:d7:d1:0a:14:9f:f5:10:51: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:59:4D:F6:66:50:F5:CB:3A:27:CD:A7:7F:EC:42:18:6C:B2:1D:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2ee96852-3d60-318a-9c2e-44c4b9a37de6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f9:72:f5:e9:a5:95:12:ae:4d:b3:d7:a8:b6:85:fd:a9:26: 2e:64:29:b5:5b:3d:b7:38:90:3c:aa:a0:20:05:4c:83:ca:02: e1:11:27:de:8e:1c:b7:e9:1c:4a:ae:ec:86:5d:1d:49:5a:f0: 41:4e:7a:6d:15:8e:0b:a1:ba:06:ff:59:6e:f4:62:12:c6:ba: fc:9c:ac:ea:9d:3c:e2:98:50:ed:40:52:dc:2d:9e:ae:58:21: 80:cd:ed:d2:10:13:10:d7:99:b8:35:55:4c:bd:73:1a:ad:25: cc:17:47:bd:0b:03:20:02:5e:e4:87:f1:ba:a5:43:a2:f7:5f: 6a:b9:c1:9e:48:be:c0:d3:5d:1f:90:8e:e3:fc:6f:2d:31:35: ea:48:dd:4f:84:85:de:af:a8:8e:47:cb:91:34:42:16:cf:ed: 2f:63:e6:de:c8:45:ef:25:e1:d8:07:c5:e6:ba:c4:80:1e:b5: e5:e1:b4:55:8a:81:a8:15:3f:5f:01:75:ed:72:65:ae:eb:17: 09:bd:b9:2b:96:2c:b1:be:83:bf:56:8b:54:06:a3:8f:d3:33: f1:30:05:5c:88:dc:e0:65:74:24:4b:9f:6e:75:63:ec:06:63: d2:3f:ef:2d:b7:64:9a:51:fd:14:9f:22:c2:7b:77:af:c0:d6: 68:fc:08:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy65zwqMciY/GM4SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMjE0MDA0MFoXDTI2MDUwMzEzMDA0MFowLzEtMCsGA1UEAxMk NTQ5YWQ4MzEtMDAzMi00ZGM2LWJiZDgtYmZkZDQwNDdhODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI3EFY5eiK+6dJqCphBZH6i8942LmOdkBSnN mCkgQvoxiQBhg1u5lElz0bTur0DB8XtklwYtOL1xNADygh8Y610+q+SIIPHFSeX/ AuDVNATDlzDGACCGsF/CKtxPHxTQ5+6a/WuKaoZX8Rg/r0bBaxjWWDBwRpzS2i+a wY30+3gc1fMqWOXbPnGdBwDWJMsz12AAXiDXUqOJJpMFTGr9c81lihE7c3kiBKm0 Jm9b4ufB0DlshODVRcnzMHFudg2HON32DCHlN8sVVgSQlJtZqWmscz8JnjkgOsNx Q1BT2xkGk9VeL8mlrrXS3OalzAJ1XUcv8oNg19EKFJ/1EFFqmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJZTfZmUPXLOifNp3/sQhhssh2jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmVlOTY4NTItM2Q2MC0z MThhLTljMmUtNDRjNGI5YTM3ZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFH5cvXppZUSrk2z16i2hf2pJi5kKbVbPbc4kDyqoCAFTIPKAuERJ96O HLfpHEqu7IZdHUla8EFOem0Vjguhugb/WW70YhLGuvycrOqdPOKYUO1AUtwtnq5Y IYDN7dIQExDXmbg1VUy9cxqtJcwXR70LAyACXuSH8bqlQ6L3X2q5wZ5IvsDTXR+Q juP8by0xNepI3U+Ehd6vqI5Hy5E0QhbP7S9j5t7IRe8l4dgHxea6xIAeteXhtFWK gagVP18Bde1yZa7rFwm9uSuWLLG+g79Wi1QGo4/TM/EwBVyI3OBldCRLn251Y+wG Y9I/7y23ZJpR/RSfIsJ7d6/A1mj8CJc= -----END CERTIFICATE-----Generated at Mon Mar 2 16:30:00 2026 by rpki-client