$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2040fb79-7dc8-3434-ae0f-4850948ea219.roa File: 2040fb79-7dc8-3434-ae0f-4850948ea219.roa (raw, json) Hash identifier: lNrZvzlKo0cVcRlN8PQRqIKCs/b/OevYH58iO5jrXoM= Subject key identifier: EE:E5:7A:91:5F:69:16:91:89:06:5B:B2:3C:4B:8D:C4:2B:9C:97:85 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D3E000A83F29AA32437575A00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2040fb79-7dc8-3434-ae0f-4850948ea219.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 8069 IP address blocks: 20.153.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:0a:83:f2:9a:a3:24:37:57:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=d1208c79-c3b8-4bfa-878f-609ad10f5b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:31:bc:c7:a4:e8:12:c3:29:f2:b2:a2:e3: d1:e5:48:cc:4b:03:8c:33:6a:95:7d:60:34:de:25: d4:ed:2d:97:cf:25:08:57:1b:93:f1:77:67:86:22: eb:5c:17:21:23:d7:92:fd:31:2d:98:93:69:66:38: 4f:e6:22:12:fd:f2:e3:91:a8:06:89:00:cc:4f:fa: d8:b6:ca:63:51:ed:83:94:0c:e9:1b:40:39:07:d3: b2:73:e4:ba:bb:31:b5:30:82:7b:2d:b1:7a:99:26: 73:81:43:26:65:56:ab:40:43:2c:0f:9d:19:5d:23: d3:01:b4:fd:88:50:c6:56:83:9c:f7:59:22:ef:b8: 3d:c1:54:a3:08:95:00:5e:ec:d7:83:2c:0f:84:c5: c4:b7:1c:85:43:16:5e:55:db:a6:93:55:a0:1a:59: cb:46:62:b2:cd:20:dc:e9:50:57:f1:d3:f7:c9:94: e7:87:cb:f2:ba:f1:35:aa:00:4b:53:34:6c:b7:9d: f0:f2:65:3f:dd:21:6f:81:98:32:1b:86:4b:41:32: 95:2b:3e:fb:65:ae:08:68:16:2b:f8:f2:a8:76:8c: 30:8c:1b:ec:b2:68:3b:34:82:4c:38:ea:99:fc:61: 64:8d:97:67:b3:87:73:2a:a9:80:6e:ce:92:76:89: 65:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E5:7A:91:5F:69:16:91:89:06:5B:B2:3C:4B:8D:C4:2B:9C:97:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2040fb79-7dc8-3434-ae0f-4850948ea219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:e1:55:6f:00:ec:c9:90:02:13:b2:88:d9:99:06:ac:ed:1e: 38:b8:a8:2f:ce:d0:de:30:e8:16:7f:2a:fc:53:b0:80:11:8a: 97:3e:63:28:7d:92:62:25:af:7a:0f:33:7a:7c:5f:db:ac:e7: 4f:08:b0:ae:33:70:b1:d9:c5:53:da:55:c4:75:fe:05:01:ac: 69:d1:6f:69:b8:00:d8:19:68:a9:81:47:e5:a9:3a:c1:d4:d8: 5f:6c:7e:f4:80:bd:83:02:5c:58:71:24:0a:19:39:14:4a:2c: f3:af:04:7e:04:04:8c:50:01:d4:bc:14:56:04:19:61:a7:d3: 75:8c:e6:79:80:81:82:57:03:ae:27:e6:2b:39:7b:2e:c4:74: f7:22:6b:21:80:9f:fc:29:76:b8:7e:2e:6a:24:3c:94:8f:53: 13:b5:f1:cf:33:19:91:15:23:c5:11:da:b6:02:af:15:68:dc: 72:f7:58:7f:16:6a:a4:26:4b:4a:d1:04:d4:46:8b:67:e6:88: bb:41:24:c8:f7:b9:0a:41:78:6e:0c:f4:60:da:62:0b:92:1c: bd:d4:66:d8:35:fd:ee:07:66:4c:56:bc:38:04:9e:d5:b5:37: 99:4a:44:59:50:42:59:ef:7e:4a:04:03:e0:53:f2:4e:68:22: 2f:b1:2d:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAqD8pqjJDdXWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZDEyMDhjNzktYzNiOC00YmZhLTg3OGYtNjA5YWQxMGY1YjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxoxvMek6BLDKfKyouPR5UjMSwOMM2qVfWA0 3iXU7S2XzyUIVxuT8XdnhiLrXBchI9eS/TEtmJNpZjhP5iIS/fLjkagGiQDMT/rY tspjUe2DlAzpG0A5B9Oyc+S6uzG1MIJ7LbF6mSZzgUMmZVarQEMsD50ZXSPTAbT9 iFDGVoOc91ki77g9wVSjCJUAXuzXgywPhMXEtxyFQxZeVdumk1WgGlnLRmKyzSDc 6VBX8dP3yZTnh8vyuvE1qgBLUzRst53w8mU/3SFvgZgyG4ZLQTKVKz77Za4IaBYr +PKodowwjBvssmg7NIJMOOqZ/GFkjZdns4dzKqmAbs6SdollzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7lepFfaRaRiQZbsjxLjcQrnJeFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjA0MGZiNzktN2RjOC0z NDM0LWFlMGYtNDg1MDk0OGVhMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXhVW8A7MmQAhOyiNmZBqztHji4qC/O0N4w6BZ/KvxTsIARipc+Yyh9 kmIlr3oPM3p8X9us508IsK4zcLHZxVPaVcR1/gUBrGnRb2m4ANgZaKmBR+WpOsHU 2F9sfvSAvYMCXFhxJAoZORRKLPOvBH4EBIxQAdS8FFYEGWGn03WM5nmAgYJXA64n 5is5ey7EdPciayGAn/wpdrh+LmokPJSPUxO18c8zGZEVI8UR2rYCrxVo3HL3WH8W aqQmS0rRBNRGi2fmiLtBJMj3uQpBeG4M9GDaYguSHL3UZtg1/e4HZkxWvDgEntW1 N5lKRFlQQlnvfkoEA+BT8k5oIi+xLUw= -----END CERTIFICATE-----Generated at Thu Mar 26 03:56:47 2026 by rpki-client