$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a2f16055-ce8a-303c-8e3f-530ceda242c5.roa File: a2f16055-ce8a-303c-8e3f-530ceda242c5.roa (raw, json) Hash identifier: P+AnEQyZ3BC7EffW9Lm42fz4bH6c9YPoc1IFuu4+Rys= Subject key identifier: 14:40:31:E5:A4:06:FC:3C:46:95:68:D0:5C:31:88:95:02:AF:F2:7A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CB6B7235F2D9B88918547C540 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a2f16055-ce8a-303c-8e3f-530ceda242c5.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 40.65.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:23:5f:2d:9b:88:91:85:47:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=7a0eab5e-2e44-4904-b763-6f4795ab4e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c4:80:c7:26:7b:d4:60:a6:50:7d:f0:7b:50: c8:92:aa:a0:c5:eb:37:a3:08:e5:5a:9a:59:25:44: f7:a7:53:0a:11:b7:04:09:08:fc:e5:ba:e1:24:1e: 4d:d4:25:eb:4b:3f:48:e1:08:c6:52:05:a7:47:8e: 47:38:0a:2d:6d:4f:58:9b:7d:50:ab:0a:d8:ca:54: a1:e0:9a:b1:b0:67:54:59:d8:80:a5:5b:59:03:15: e4:d8:bd:dd:a3:f2:78:b2:78:a5:d4:15:92:c4:8a: cb:5e:17:3f:49:c1:96:ac:57:73:fb:79:e4:3e:07: d0:58:46:74:6e:c5:02:7e:69:f6:ad:3d:ec:9a:3a: 59:30:4f:fb:b8:9b:0d:22:85:d4:56:3b:8d:e3:39: 40:83:30:18:eb:3d:46:4e:62:c8:36:a2:60:c3:3b: de:e8:a8:95:54:43:2e:07:da:30:44:f1:7a:a1:c6: 39:a0:a4:01:44:ee:43:8c:f2:e9:e9:d5:29:fd:7b: 6d:5f:6c:7f:7f:e1:cc:34:77:63:13:67:4f:99:4a: c8:36:4f:d7:bf:ea:ce:92:d1:7b:dc:2d:9c:fe:43: 44:6d:6f:59:c1:4b:63:bc:8b:35:06:19:b2:f7:77: c6:09:17:98:71:8c:be:50:c2:0c:48:07:e5:2e:06: 36:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:40:31:E5:A4:06:FC:3C:46:95:68:D0:5C:31:88:95:02:AF:F2:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a2f16055-ce8a-303c-8e3f-530ceda242c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.65.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:7c:3a:ca:ab:88:fe:0e:b4:af:a7:8d:71:cf:51:66:5e:fe: 28:16:bf:10:3c:dd:4e:fc:41:1f:e6:b7:ad:6a:ed:68:d2:42: dc:3d:12:96:92:58:ba:68:0d:8f:8c:8d:79:7b:b6:fa:07:9b: 60:9f:d6:3a:a1:93:cc:2d:fb:92:7e:f6:f0:bc:8d:24:13:b3: 56:00:ff:92:83:4b:a1:69:2e:03:8c:94:c6:c3:6d:94:48:62: f1:80:f9:55:06:b3:61:ee:31:ce:72:96:2f:aa:15:4c:43:5a: a0:d5:d5:c8:10:cd:33:46:15:ed:bc:e9:81:87:17:05:d2:14: b5:ac:39:f6:0d:96:f6:e3:24:0a:e5:bd:21:51:a1:a0:5b:4d: 3d:7e:22:d3:b4:75:34:0d:db:27:04:e4:b6:8b:c7:e5:a1:1a: f3:93:fa:b4:8d:fe:aa:99:d7:69:ec:fc:78:5b:b1:c3:4c:de: 22:e5:4e:f8:0f:61:b2:a1:f6:31:90:8e:a8:59:8c:4e:39:05: c6:b4:10:67:7d:d1:c5:23:78:cc:ab:53:90:3c:3b:9c:dd:d7: fc:cb:0d:5d:b3:1e:44:67:30:d5:3b:f8:34:ee:9d:c1:ef:f7: 5b:09:c9:e9:31:71:7f:cb:6c:96:5f:a3:2e:96:2c:89:6d:14: d0:13:42:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tyNfLZuIkYVHxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk N2EwZWFiNWUtMmU0NC00OTA0LWI3NjMtNmY0Nzk1YWI0ZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMSAxyZ71GCmUH3we1DIkqqgxes3owjlWppZ JUT3p1MKEbcECQj85brhJB5N1CXrSz9I4QjGUgWnR45HOAotbU9Ym31QqwrYylSh 4JqxsGdUWdiApVtZAxXk2L3do/J4snil1BWSxIrLXhc/ScGWrFdz+3nkPgfQWEZ0 bsUCfmn2rT3smjpZME/7uJsNIoXUVjuN4zlAgzAY6z1GTmLINqJgwzve6KiVVEMu B9owRPF6ocY5oKQBRO5DjPLp6dUp/XttX2x/f+HMNHdjE2dPmUrINk/Xv+rOktF7 3C2c/kNEbW9ZwUtjvIs1Bhmy93fGCReYcYy+UMIMSAflLgY22wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRAMeWkBvw8RpVo0FwxiJUCr/J6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTJmMTYwNTUtY2U4YS0z MDNjLThlM2YtNTMwY2VkYTI0MmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKEFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJ8OsqriP4OtK+njXHPUWZe/igWvxA83U78QR/mt61q7WjSQtw9EpaS WLpoDY+MjXl7tvoHm2Cf1jqhk8wt+5J+9vC8jSQTs1YA/5KDS6FpLgOMlMbDbZRI YvGA+VUGs2HuMc5yli+qFUxDWqDV1cgQzTNGFe286YGHFwXSFLWsOfYNlvbjJArl vSFRoaBbTT1+ItO0dTQN2ycE5LaLx+WhGvOT+rSN/qqZ12ns/HhbscNM3iLlTvgP YbKh9jGQjqhZjE45Bca0EGd90cUjeMyrU5A8O5zd1/zLDV2zHkRnMNU7+DTuncHv 91sJyekxcX/LbJZfoy6WLIltFNATQik= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:07 2026 by rpki-client