$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa File: 6986273c-343b-39c2-9dd1-bb8ca363c568.roa (raw, json) Hash identifier: gP85ns77zmatu3tBgmmIyi7Eoh6LkArbakh9LgiOSZc= Subject key identifier: 03:03:3E:FD:04:A4:97:C0:42:69:03:FB:75:34:4F:41:90:06:8F:47 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB6B724C835615C0DAEE22480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 40.87.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:24:c8:35:61:5c:0d:ae:e2:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=47cb0cf4-16f1-4f33-9b2d-fc52e051c81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:22:08:49:12:b7:69:2c:2d:43:45:19:80:ab: 86:39:b9:f9:d8:d7:fc:2e:f4:af:66:77:18:05:dc: 11:87:6a:03:ac:70:c6:24:5c:af:bd:e3:91:60:12: aa:77:07:fe:4e:73:d4:d9:11:c4:72:92:93:58:60: ac:ca:87:bb:ea:45:3c:37:24:e9:ce:2c:19:28:ab: 0b:d0:de:5d:5e:e2:8a:f3:88:ec:37:b6:58:b8:07: f3:d2:cc:63:2c:3b:cd:e9:62:50:72:0b:f8:7d:72: c3:99:ce:c1:45:0a:d2:e9:7e:8f:13:4c:42:71:65: 59:9d:28:24:9f:55:a0:43:ab:a0:8e:c6:0c:cf:76: 98:40:59:a7:ab:eb:9f:f4:e8:13:a0:66:fd:ae:1c: 15:a3:69:4e:6d:fe:ae:59:0a:df:95:7d:48:34:08: 19:16:59:f8:52:9c:14:84:a8:68:a2:62:b7:03:b7: eb:25:68:e6:48:dd:62:2c:34:70:97:48:70:df:ce: 30:e6:b8:82:5c:16:c3:70:df:6c:f7:a7:b8:9f:6e: fa:11:6d:b4:85:ce:6c:46:58:e5:bd:3f:fe:85:ef: 99:53:a3:b9:c9:ca:29:a1:c0:f7:2a:8c:f6:d2:1e: 8d:22:a3:43:0a:e2:9c:bc:c4:a6:b5:c4:14:31:58: 14:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:03:3E:FD:04:A4:97:C0:42:69:03:FB:75:34:4F:41:90:06:8F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.87.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:64:d7:da:97:43:3c:78:95:68:2c:ac:29:cb:ce:47:14:29: 18:2a:25:4f:5d:9c:66:74:3b:57:f7:2b:63:f1:93:c3:20:0b: 51:7c:c6:5c:bb:67:6d:f2:ef:70:4b:4c:95:36:ef:74:1b:7a: 7f:e5:ce:a4:fe:4c:2f:83:ae:e3:0a:26:76:38:30:b4:2d:b8: ef:93:45:da:22:b4:b0:f8:d2:9a:ef:76:65:89:60:52:b4:03: de:9e:be:6e:c2:54:48:f0:c3:bc:59:6c:9c:dc:dd:ea:91:c2: e7:63:75:aa:6f:61:bb:8c:b9:95:06:a4:c1:7d:d9:2b:70:97: c3:88:08:cf:ef:5f:fa:e8:49:c9:a1:1a:85:e1:db:d7:1f:ff: 7d:88:0a:45:10:a3:06:95:49:79:81:fc:b5:6a:85:1d:5c:bc: e6:a1:35:69:e7:62:a4:c1:0a:c1:63:81:88:87:fe:16:29:11: 5e:93:b4:21:91:d2:e5:6f:3b:6c:17:33:a6:85:19:cb:43:d0: 27:91:af:80:42:dd:cd:e5:69:73:c9:0b:9c:6d:da:45:80:d3: c0:e5:dc:75:59:d6:44:db:c9:91:aa:1e:2b:fb:78:23:64:92: 44:47:55:3b:e3:02:d3:87:8e:3e:22:74:7f:65:e3:a7:dc:37: 94:07:6b:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tyTINWFcDa7iJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk NDdjYjBjZjQtMTZmMS00ZjMzLTliMmQtZmM1MmUwNTFjODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCIISRK3aSwtQ0UZgKuGObn52Nf8LvSvZncY BdwRh2oDrHDGJFyvveORYBKqdwf+TnPU2RHEcpKTWGCsyoe76kU8NyTpziwZKKsL 0N5dXuKK84jsN7ZYuAfz0sxjLDvN6WJQcgv4fXLDmc7BRQrS6X6PE0xCcWVZnSgk n1WgQ6ugjsYMz3aYQFmnq+uf9OgToGb9rhwVo2lObf6uWQrflX1INAgZFln4UpwU hKhoomK3A7frJWjmSN1iLDRwl0hw384w5riCXBbDcN9s96e4n276EW20hc5sRljl vT/+he+ZU6O5ycopocD3Koz20h6NIqNDCuKcvMSmtcQUMVgUQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMDPv0EpJfAQmkD+3U0T0GQBo9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjk4NjI3M2MtMzQzYi0z OWMyLTlkZDEtYmI4Y2EzNjNjNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKFcnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdk19qXQzx4lWgsrCnLzkcUKRgqJU9dnGZ0O1f3K2Pxk8MgC1F8xly7 Z23y73BLTJU273Qben/lzqT+TC+DruMKJnY4MLQtuO+TRdoitLD40prvdmWJYFK0 A96evm7CVEjww7xZbJzc3eqRwudjdapvYbuMuZUGpMF92Stwl8OICM/vX/roScmh GoXh29cf/32ICkUQowaVSXmB/LVqhR1cvOahNWnnYqTBCsFjgYiH/hYpEV6TtCGR 0uVvO2wXM6aFGctD0CeRr4BC3c3laXPJC5xt2kWA08Dl3HVZ1kTbyZGqHiv7eCNk kkRHVTvjAtOHjj4idH9l46fcN5QHa3k= -----END CERTIFICATE-----Generated at Mon Mar 2 18:28:21 2026 by rpki-client