$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b42a036-18bc-3943-a55e-20be9e9bf9dc.roa File: 3b42a036-18bc-3943-a55e-20be9e9bf9dc.roa (raw, json) Hash identifier: wHK4yDxy3DOqqPTrE6WXYvAHKE6ltwm6flup0oFuTaM= Subject key identifier: 32:B0:79:F8:EC:A3:29:96:00:89:66:98:A5:F2:80:5D:8C:10:18:18 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CC6121B4654E2EAC8B86FEB20 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b42a036-18bc-3943-a55e-20be9e9bf9dc.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 8069 IP address blocks: 20.153.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:1b:46:54:e2:ea:c8:b8:6f:eb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=9f8bf5ab-55ee-422c-bad6-dfec387c3efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0e:7b:36:d6:71:86:18:b7:d1:be:67:df:d5: 93:6c:14:fc:24:54:1a:39:a9:7f:08:d3:ef:b1:cc: 43:d5:43:12:09:90:5e:32:b4:15:03:1f:ce:7e:8b: 39:b5:dd:b0:72:cc:d0:b0:c2:8b:38:fb:1e:dc:42: 38:8f:e6:26:7e:6c:e3:66:ef:96:72:f7:28:19:5f: 66:0d:fd:6a:f2:1d:6c:e5:26:31:48:51:cc:0b:d1: cd:24:a8:15:2a:87:4a:d9:21:2c:a9:98:d9:ff:34: d3:f1:ba:da:ab:f1:e8:50:84:97:40:b6:45:4e:a6: e8:26:c6:cb:27:4a:9f:2b:7d:65:3f:f3:55:c4:bb: 30:7c:95:b5:23:e1:cb:b3:ea:a1:84:0e:1e:4a:82: 47:29:2b:71:ec:55:a1:b1:a2:08:16:b9:71:19:74: 53:93:2a:d5:29:f5:1a:90:31:ea:fd:d2:04:dd:c7: 84:5c:89:40:5a:c4:95:d4:f9:54:ba:01:7d:33:13: 94:35:b7:75:22:59:ba:98:05:4d:fb:9c:1e:44:9a: 5e:53:ac:9c:47:b6:77:da:88:7b:61:9b:30:cd:43: 43:62:db:43:1a:6f:d6:22:0b:41:88:28:6b:46:e8: af:33:2b:a9:71:ce:df:86:66:86:b9:3c:9b:f7:db: 25:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B0:79:F8:EC:A3:29:96:00:89:66:98:A5:F2:80:5D:8C:10:18:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b42a036-18bc-3943-a55e-20be9e9bf9dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:71:bf:de:b1:f9:26:72:ba:a8:eb:df:de:c1:ae:ac:cf:e5: df:7a:ec:b1:68:1d:1b:ca:b0:db:3e:0e:f4:01:70:a4:ad:4e: bc:70:36:7c:b6:ca:b3:2d:2c:a4:ab:2d:cd:43:19:4e:cd:28: 50:20:a3:c9:99:4e:f6:ef:26:25:5e:b2:e5:dd:2c:39:38:0c: 25:94:e9:ae:af:fd:3b:68:49:63:30:c8:e5:ad:3d:2b:d0:61: 1d:f9:30:e0:09:d5:41:b2:d5:1b:b7:79:b7:5a:25:3a:78:9f: 47:3c:7a:e5:e8:17:05:37:5b:76:15:31:33:42:c9:63:11:90: e4:57:b6:37:a0:fc:5f:df:57:f2:af:5f:f6:0e:76:de:f6:a7: c7:1b:2c:21:91:59:3a:44:d3:78:74:ad:ae:5f:95:b6:b3:b4: 35:29:03:1d:00:ad:a6:6d:98:af:90:36:09:2d:04:c3:ee:16: 83:29:e9:b7:92:33:36:45:81:65:6f:b2:64:7a:42:77:e8:8e: 89:f8:1e:cf:6c:53:0c:52:51:32:70:64:f3:1e:01:df:46:e1: 3f:27:e3:ee:87:82:55:a5:a9:9e:17:27:ac:36:93:81:cf:d7: 06:c0:85:79:46:d2:1b:05:35:42:5c:a1:3a:ae:38:ec:96:d3: d3:e3:48:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEhtGVOLqyLhv6yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk OWY4YmY1YWItNTVlZS00MjJjLWJhZDYtZGZlYzM4N2MzZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw57NtZxhhi30b5n39WTbBT8JFQaOal/CNPv scxD1UMSCZBeMrQVAx/Ofos5td2wcszQsMKLOPse3EI4j+YmfmzjZu+WcvcoGV9m Df1q8h1s5SYxSFHMC9HNJKgVKodK2SEsqZjZ/zTT8braq/HoUISXQLZFTqboJsbL J0qfK31lP/NVxLswfJW1I+HLs+qhhA4eSoJHKStx7FWhsaIIFrlxGXRTkyrVKfUa kDHq/dIE3ceEXIlAWsSV1PlUugF9MxOUNbd1Ilm6mAVN+5weRJpeU6ycR7Z32oh7 YZswzUNDYttDGm/WIgtBiChrRuivMyupcc7fhmaGuTyb99slaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKwefjsoymWAIlmmKXygF2MEBgYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2I0MmEwMzYtMThiYy0z OTQzLWE1NWUtMjBiZTllOWJmOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFxv96x+SZyuqjr397BrqzP5d967LFoHRvKsNs+DvQBcKStTrxwNny2 yrMtLKSrLc1DGU7NKFAgo8mZTvbvJiVesuXdLDk4DCWU6a6v/TtoSWMwyOWtPSvQ YR35MOAJ1UGy1Ru3ebdaJTp4n0c8euXoFwU3W3YVMTNCyWMRkORXtjeg/F/fV/Kv X/YOdt72p8cbLCGRWTpE03h0ra5flbaztDUpAx0AraZtmK+QNgktBMPuFoMp6beS MzZFgWVvsmR6Qnfojon4Hs9sUwxSUTJwZPMeAd9G4T8n4+6HglWlqZ4XJ6w2k4HP 1wbAhXlG0hsFNUJcoTquOOyW09PjSF0= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:29 2026 by rpki-client