$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/68093bb4-8f68-3d5f-ba12-6503f9bd0804.roa File: 68093bb4-8f68-3d5f-ba12-6503f9bd0804.roa (raw, json) Hash identifier: sd1BuRxc3+7Ul0eKAJ2aZq7HdydWX4bI32MmS+YKWys= Subject key identifier: 1C:38:D0:60:90:DF:C5:77:14:75:AE:8F:FF:26:92:22:C3:37:87:86 Certificate issuer: /CN=a20b951e-7538-41fb-97d2-2dd9393d3541 Certificate serial: 010D0C9F4328584D44FA6599280B478570DA2A80 Authority key identifier: 96:27:65:3E:C6:BD:84:56:0E:B6:57:26:94:51:C8:51:03:03:D8:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/68093bb4-8f68-3d5f-ba12-6503f9bd0804.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 36038 IP address blocks: 142.249.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:65:99:28:0b:47:85:70:da:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20b951e-7538-41fb-97d2-2dd9393d3541 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=981f1d77-ac4f-4a0c-9414-a5ec05e558ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:27:1e:e8:f0:4c:45:bc:75:75:2f:12:35:a7: e6:5f:4b:3e:60:89:2d:68:ce:8b:0c:e2:8a:d1:92: 51:07:eb:4c:89:8c:a4:43:7d:b9:a5:0c:f3:9b:0b: bb:ed:35:99:a4:34:50:b4:88:6f:0e:61:c4:4e:00: 6e:f1:32:2c:a5:ea:bf:3c:85:56:39:2f:18:87:73: 86:06:97:ac:91:75:24:5c:91:ca:01:fa:32:5d:e5: a9:ca:8e:b1:99:a0:05:a7:3e:f1:70:68:82:ce:f9: 5a:ce:00:19:ff:06:7e:74:43:54:73:3b:dd:e5:51: 89:10:79:c3:ea:3d:c1:67:24:b5:6e:48:96:2f:8e: f5:3c:1f:44:13:96:c5:9d:98:ef:70:79:5c:d0:94: 7a:f8:6b:f7:42:2a:3f:9f:33:65:74:ec:b5:5c:3e: 26:c6:c4:f0:5b:d6:77:e7:71:cb:2f:e7:86:38:e8: 8f:87:42:aa:0f:63:64:2e:4f:fe:83:d7:68:fa:2d: ef:c3:88:20:74:de:ec:fe:1f:4d:ef:fe:d2:d8:de: 19:94:a9:0c:da:42:be:ca:fb:5f:13:24:ca:28:38: 6c:f9:a7:1a:52:31:53:b3:d2:c4:63:04:5a:d7:4c: 0a:51:a6:78:55:4c:84:38:21:c8:47:a7:cb:6c:fc: 85:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:38:D0:60:90:DF:C5:77:14:75:AE:8F:FF:26:92:22:C3:37:87:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/68093bb4-8f68-3d5f-ba12-6503f9bd0804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.crl X509v3 Authority Key Identifier: keyid:96:27:65:3E:C6:BD:84:56:0E:B6:57:26:94:51:C8:51:03:03:D8:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541.cer sbgp-ipAddrBlock: critical IPv4: 142.249.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:79:11:e9:c8:ad:90:bc:54:ed:79:17:63:f2:8e:dc:ac:13: 4d:1b:b4:a8:a7:d9:fc:db:f4:f0:fe:1c:61:6e:f8:c9:23:71: 5d:dd:9f:b9:4e:fb:4f:8c:3c:dc:9c:93:6b:10:f2:ec:8e:e8: 3d:88:03:74:1e:b1:96:91:c3:7a:b0:d1:55:e1:ba:ad:22:c3: 10:d2:f1:d7:c5:a7:15:e8:b2:ab:39:fb:d1:ea:e9:22:ac:e5: 2e:d6:51:28:3c:6b:71:89:14:ad:83:87:d3:7b:f7:da:88:28: 33:15:8a:d0:1c:25:5d:5c:ed:ae:04:5b:c3:00:d5:de:1a:44: c7:ed:62:ea:01:95:d8:bb:86:f5:51:b9:c5:cf:f6:26:8d:3e: cd:7b:46:90:54:0d:ed:b9:35:e1:1e:c5:95:d3:b0:1f:92:61: 66:1d:4e:a2:45:2e:dd:1e:db:16:27:61:ef:20:07:c2:6a:49: 1f:d7:d3:d3:7f:34:83:72:4d:ab:f3:52:0c:3c:92:d9:6a:d6: 4e:e9:bd:5b:c0:b6:df:db:83:bc:c2:3d:44:7c:a6:1a:86:1f: 51:b6:4e:95:14:dc:d1:1f:43:c7:86:b6:a5:7f:2d:ab:fd:6c: 97:3f:cb:3d:c4:b4:76:35:03:f3:ac:f2:28:87:44:14:9d:76: f5:ec:26:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mWZKAtHhXDaKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwYjk1MWUtNzUzOC00MWZiLTk3ZDItMmRkOTM5M2Qz NTQxMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OTgxZjFkNzctYWM0Zi00YTBjLTk0MTQtYTVlYzA1ZTU1OGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCce6PBMRbx1dS8SNafmX0s+YIktaM6LDOKK 0ZJRB+tMiYykQ325pQzzmwu77TWZpDRQtIhvDmHETgBu8TIspeq/PIVWOS8Yh3OG BpeskXUkXJHKAfoyXeWpyo6xmaAFpz7xcGiCzvlazgAZ/wZ+dENUczvd5VGJEHnD 6j3BZyS1bkiWL471PB9EE5bFnZjvcHlc0JR6+Gv3Qio/nzNldOy1XD4mxsTwW9Z3 53HLL+eGOOiPh0KqD2NkLk/+g9do+i3vw4ggdN7s/h9N7/7S2N4ZlKkM2kK+yvtf EyTKKDhs+acaUjFTs9LEYwRa10wKUaZ4VUyEOCHIR6fLbPyFkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBw40GCQ38V3FHWuj/8mkiLDN4eGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMjBi OTUxZS03NTM4LTQxZmItOTdkMi0yZGQ5MzkzZDM1NDEvNjgwOTNiYjQtOGY2OC0z ZDVmLWJhMTItNjUwM2Y5YmQwODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTIwYjk1MWUtNzUzOC00MWZiLTk3 ZDItMmRkOTM5M2QzNTQxL2EyMGI5NTFlLTc1MzgtNDFmYi05N2QyLTJkZDkzOTNk MzU0MS5jcmwwHwYDVR0jBBgwFoAUlidlPsa9hFYOtlcmlFHIUQMD2IgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMjBiOTUxZS03NTM4LTQxZmItOTdkMi0yZGQ5 MzkzZDM1NDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG15EenIrZC8VO15F2PyjtysE00btKin2fzb9PD+HGFu+MkjcV3dn7lO +0+MPNyck2sQ8uyO6D2IA3QesZaRw3qw0VXhuq0iwxDS8dfFpxXosqs5+9Hq6SKs 5S7WUSg8a3GJFK2Dh9N799qIKDMVitAcJV1c7a4EW8MA1d4aRMftYuoBldi7hvVR ucXP9iaNPs17RpBUDe25NeEexZXTsB+SYWYdTqJFLt0e2xYnYe8gB8JqSR/X09N/ NINyTavzUgw8ktlq1k7pvVvAtt/bg7zCPUR8phqGH1G2TpUU3NEfQ8eGtqV/Lav9 bJc/yz3EtHY1A/Os8iiHRBSddvXsJgk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:21:32 2026 by rpki-client