$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f05bd21-fa8a-381e-a8d1-e35ececf5041.roa File: 7f05bd21-fa8a-381e-a8d1-e35ececf5041.roa (raw, json) Hash identifier: nfp+yiwHFL72Ks62wFTiZj7xTmqSEH0Wc4XkJ+l+0SQ= Subject key identifier: BF:CD:D1:26:2D:98:56:53:BA:45:CB:FA:0C:A2:40:A0:A6:9C:C5:22 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB6B724976A52169FBE2F81E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f05bd21-fa8a-381e-a8d1-e35ececf5041.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.153.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:24:97:6a:52:16:9f:be:2f:81:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=487df434-607f-4556-a927-861254373581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:ca:cd:c3:c8:23:d9:39:a6:b9:63:19:98: b5:52:55:5c:83:3a:d9:5a:c5:1f:34:53:58:c0:9e: 87:e7:35:53:33:15:03:c7:6b:a8:bf:3d:ef:33:83: 49:7d:1d:33:9a:6a:26:22:7d:ff:03:96:d7:0f:e5: 18:ca:81:a0:0b:90:42:e3:f4:2d:7a:d7:b6:ca:cb: b5:43:16:70:4e:d4:86:06:d2:e5:b7:fa:bf:26:fe: 67:b4:20:53:62:74:c6:50:3f:9f:10:34:21:af:4c: 15:fe:83:cf:e2:ae:d7:b8:93:4a:1d:c1:01:31:87: 5c:24:b5:66:e7:55:dd:08:10:62:c1:5e:3e:83:a0: 3f:d1:6f:e1:cb:87:cd:b3:89:e7:8e:68:f6:18:4c: 67:89:55:c3:62:3c:86:d5:83:f5:ae:70:8a:dc:0a: e6:5f:c8:fc:a1:2a:8b:bf:6d:63:8c:bf:0d:c3:0e: dd:e0:2c:82:6d:eb:9f:be:0b:6c:ff:a7:99:1c:48: ac:4d:11:28:74:fe:3c:14:f8:c3:c5:3a:b8:63:ee: 2a:b7:f8:4d:a1:b3:ad:2b:54:db:f3:32:3d:85:52: b2:19:55:7d:ed:4f:15:44:7c:b1:03:7c:30:7c:b9: 93:46:70:e5:36:77:57:f8:ff:52:9b:57:91:00:52: 39:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CD:D1:26:2D:98:56:53:BA:45:CB:FA:0C:A2:40:A0:A6:9C:C5:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f05bd21-fa8a-381e-a8d1-e35ececf5041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5b:cc:64:2b:f8:71:01:91:fb:cd:8f:9e:d5:50:c1:62:b5: 25:6c:45:b8:8d:4d:f3:0f:9a:ff:ed:9c:bf:16:5d:5e:f0:8c: 85:54:2b:10:87:75:8d:85:32:ce:d4:4f:4a:6c:c2:50:fd:0f: 44:5a:21:94:d6:3c:6a:8d:62:b8:1e:f1:f0:aa:a0:69:52:d0: da:f7:62:ed:5a:d0:a9:39:29:d8:53:b4:4f:9f:f0:ad:51:c3: 2e:bf:7f:0e:90:90:39:79:2f:cb:3a:69:28:bc:17:43:35:84: b1:a6:34:f7:b7:18:68:85:85:1c:df:40:fe:28:19:14:ab:f6: 7e:b7:87:81:b4:d6:b5:f6:9e:5b:59:73:cd:20:a5:da:be:a5: fe:b7:93:55:df:86:1b:16:26:e5:a0:e5:49:fd:ae:b9:34:45: 37:58:4b:04:82:b9:68:6f:2a:4e:2a:e0:c2:4b:46:02:68:d2: 2a:ef:83:68:f9:8d:dc:84:79:0c:89:ba:15:c8:c1:a7:42:c5: db:d5:2c:8d:2b:35:d0:5c:73:79:52:77:92:33:06:a0:aa:cf: 4d:70:4a:33:b0:4b:ea:83:57:f0:95:e9:44:7c:41:65:e3:cc: 7e:26:96:2b:e0:a2:32:54:d4:85:06:8f:35:ce:44:b6:78:40: 6a:f3:b6:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tySXalIWn74vgeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk NDg3ZGY0MzQtNjA3Zi00NTU2LWE5MjctODYxMjU0MzczNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4DKzcPII9k5prljGZi1UlVcgzrZWsUfNFNY wJ6H5zVTMxUDx2uovz3vM4NJfR0zmmomIn3/A5bXD+UYyoGgC5BC4/Qtete2ysu1 QxZwTtSGBtLlt/q/Jv5ntCBTYnTGUD+fEDQhr0wV/oPP4q7XuJNKHcEBMYdcJLVm 51XdCBBiwV4+g6A/0W/hy4fNs4nnjmj2GExniVXDYjyG1YP1rnCK3ArmX8j8oSqL v21jjL8Nww7d4CyCbeufvgts/6eZHEisTREodP48FPjDxTq4Y+4qt/hNobOtK1Tb 8zI9hVKyGVV97U8VRHyxA3wwfLmTRnDlNndX+P9Sm1eRAFI5bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/N0SYtmFZTukXL+gyiQKCmnMUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2YwNWJkMjEtZmE4YS0z ODFlLWE4ZDEtZTM1ZWNlY2Y1MDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtbzGQr+HEBkfvNj57VUMFitSVsRbiNTfMPmv/tnL8WXV7wjIVUKxCH dY2FMs7UT0pswlD9D0RaIZTWPGqNYrge8fCqoGlS0Nr3Yu1a0Kk5KdhTtE+f8K1R wy6/fw6QkDl5L8s6aSi8F0M1hLGmNPe3GGiFhRzfQP4oGRSr9n63h4G01rX2nltZ c80gpdq+pf63k1XfhhsWJuWg5Un9rrk0RTdYSwSCuWhvKk4q4MJLRgJo0irvg2j5 jdyEeQyJuhXIwadCxdvVLI0rNdBcc3lSd5IzBqCqz01wSjOwS+qDV/CV6UR8QWXj zH4mlivgojJU1IUGjzXORLZ4QGrztn8= -----END CERTIFICATE-----Generated at Mon Mar 2 16:25:13 2026 by rpki-client