$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa File: 5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa (raw, json) Hash identifier: E0qX2zIWu56rWh7ilY+VF2Y9n00tHY3rbc4KU6fp6Vc= Subject key identifier: A6:BE:47:D7:A1:DC:15:75:CD:63:25:9C:AA:4A:8B:90:73:5E:07:5D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB6B7246953BE8ED7D4364690 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.153.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:24:69:53:be:8e:d7:d4:36:46:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=501e2269-6545-45ef-925c-506610f3a798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:16:7b:0e:c6:f0:27:b1:6e:73:ea:c6:d8:11: bf:6b:c3:96:8e:49:ff:83:9a:a9:d5:c1:84:34:a3: 2a:05:b1:1e:d3:48:04:b5:f3:96:3b:50:ce:b9:03: bb:bf:dc:da:45:df:77:73:a9:6e:91:c3:b9:32:d4: b2:97:17:a8:2a:ee:e9:ac:41:46:be:a3:45:4c:fa: 78:3b:d1:b6:88:a3:ca:25:56:94:4a:d1:d1:e7:ef: 1a:81:69:18:2f:93:87:78:7b:f2:25:d3:8e:7c:2a: db:94:98:1d:3f:1e:9c:e3:c1:81:8d:18:5e:a9:ed: ee:29:d8:04:c2:e6:07:76:00:d7:81:bf:22:03:25: 71:46:f4:96:b0:f5:80:5d:60:63:2f:d4:5b:4d:a1: 84:02:6b:33:17:50:dc:f4:e6:fe:04:ce:2b:16:b5: a3:c5:7f:fa:86:d6:26:ab:e9:9a:f6:1e:1e:74:bb: 3a:41:d7:6f:17:f9:57:a0:0a:65:19:22:c8:5c:d8: e5:dc:18:6c:26:14:fb:f1:ad:14:a8:c8:b5:51:c2: 8e:2d:8d:49:ae:f9:b8:7e:0c:d2:2a:8f:e5:c7:cd: 58:65:8b:fb:d3:a6:bf:d3:d3:f1:33:47:4e:83:8a: 18:d3:48:12:32:66:c6:bf:69:d5:a2:d3:77:2c:9e: 5b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BE:47:D7:A1:DC:15:75:CD:63:25:9C:AA:4A:8B:90:73:5E:07:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:bf:01:5e:f8:a6:9f:de:21:eb:fc:cc:03:4f:3c:20:0a:30: c1:f3:4c:e6:17:5b:b2:e8:d6:61:3b:41:25:a7:d8:17:d7:78: 25:3b:09:d9:a7:ba:9b:c7:4d:d6:e2:74:80:70:31:83:e1:c1: 5c:da:e5:e9:cc:87:a0:08:a9:ea:9f:07:a0:31:4b:5a:82:f1: 99:95:45:35:c9:43:56:fa:c3:31:f2:86:c2:67:bf:df:98:86: fe:18:d7:4f:88:8f:3f:bf:ba:73:84:9a:71:ca:63:3c:3e:c3: 46:05:4f:de:87:32:b1:10:b8:a0:67:0b:f7:ca:64:8e:3e:a6: ad:37:17:18:ce:9a:cf:cb:5e:56:a8:0c:0c:e7:eb:40:d1:04: c4:7c:b8:a3:b6:5a:2c:01:3d:5b:ca:c6:ce:51:f8:25:05:f2: 67:f8:8c:f7:58:c7:6b:c1:ad:68:ed:39:b6:0e:be:71:e4:d0: 57:d8:b9:ef:0a:6a:f7:93:12:14:95:38:e1:aa:f4:20:b9:33: 33:cb:3a:e0:97:99:68:77:62:b2:20:76:e2:7b:26:69:e0:ac: c4:cd:c0:c3:54:3a:47:1f:b5:16:19:c6:04:1d:d5:a6:b3:80: bb:3e:a4:19:8d:b0:5c:fb:f3:d7:eb:85:2d:68:85:ef:a9:36: 4b:83:f6:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tyRpU76O19Q2RpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk NTAxZTIyNjktNjU0NS00NWVmLTkyNWMtNTA2NjEwZjNhNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xZ7DsbwJ7Fuc+rG2BG/a8OWjkn/g5qp1cGE NKMqBbEe00gEtfOWO1DOuQO7v9zaRd93c6lukcO5MtSylxeoKu7prEFGvqNFTPp4 O9G2iKPKJVaUStHR5+8agWkYL5OHeHvyJdOOfCrblJgdPx6c48GBjRheqe3uKdgE wuYHdgDXgb8iAyVxRvSWsPWAXWBjL9RbTaGEAmszF1Dc9Ob+BM4rFrWjxX/6htYm q+ma9h4edLs6QddvF/lXoAplGSLIXNjl3BhsJhT78a0UqMi1UcKOLY1Jrvm4fgzS Ko/lx81YZYv706a/09PxM0dOg4oY00gSMmbGv2nVotN3LJ5bcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKa+R9eh3BV1zWMlnKpKi5BzXgddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWZiNTJkN2MtNzVkOC0z ZjhiLWIwMzMtNjVhNTM3NmM0MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJG/AV74pp/eIev8zANPPCAKMMHzTOYXW7Lo1mE7QSWn2BfXeCU7Cdmn upvHTdbidIBwMYPhwVza5enMh6AIqeqfB6AxS1qC8ZmVRTXJQ1b6wzHyhsJnv9+Y hv4Y10+Ijz+/unOEmnHKYzw+w0YFT96HMrEQuKBnC/fKZI4+pq03FxjOms/LXlao DAzn60DRBMR8uKO2WiwBPVvKxs5R+CUF8mf4jPdYx2vBrWjtObYOvnHk0FfYue8K aveTEhSVOOGq9CC5MzPLOuCXmWh3YrIgduJ7JmngrMTNwMNUOkcftRYZxgQd1aaz gLs+pBmNsFz789frhS1ohe+pNkuD9qo= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:38 2026 by rpki-client