$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01322300-81da-31b2-bdf2-b28ab6be6832.roa File: 01322300-81da-31b2-bdf2-b28ab6be6832.roa (raw, json) Hash identifier: Geg/Ld4xgbGeJbpOjcpVaNx/En2bVlwGqFJaSMoohRQ= Subject key identifier: EC:0B:5C:20:88:BD:D9:5F:E7:FA:BA:C3:91:C1:30:F3:CB:65:4F:E8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234BC5FC49300A5996DB00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01322300-81da-31b2-bdf2-b28ab6be6832.roa Signing time: Wed 19 Aug 2026 18:03:56 +0000 ROA not before: Wed 19 Aug 2026 18:03:56 +0000 ROA not after: Fri 22 Mar 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4b:c5:fc:49:30:0a:59:96:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:56 2026 GMT Not After : Mar 22 04:00:00 2030 GMT Subject: CN=cae68678-714b-4c04-8aeb-db65ebe9b094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e2:0c:6e:ee:a7:73:97:97:2d:80:41:a9:95: 0e:b8:71:d2:36:87:12:b9:d4:94:77:63:4c:f1:60: 34:08:3d:d8:4f:ce:0a:23:f0:a1:dd:f5:0d:66:ac: 91:f2:17:32:d7:d9:c1:7a:ab:1b:87:15:00:a7:1d: 53:cb:ce:38:98:f1:a4:a9:8d:cd:32:de:34:24:7d: 15:83:7b:12:40:3f:97:fa:c3:3e:96:6a:43:1c:4b: c2:34:81:9c:e7:68:a7:ca:de:e8:f0:d0:35:be:d3: ae:37:14:db:d1:3e:18:1b:6c:df:b0:4b:43:31:05: 4b:30:59:7a:86:96:98:f0:a4:76:b0:a7:6e:0c:ff: d7:de:74:7e:c1:15:02:99:f5:52:7f:c9:0a:f4:2a: 31:ce:01:8d:78:1b:b4:19:fe:d1:74:19:f8:9f:9d: 34:b9:be:2a:25:ae:2f:8c:a0:fc:69:d3:c9:cf:d8: 93:d4:e7:a1:5f:9b:c1:5a:c2:20:75:f6:1c:55:36: 4b:85:e0:d8:1a:6b:d0:33:02:8f:43:53:54:a8:2b: be:90:30:ac:71:6d:21:27:af:26:ff:96:0a:06:66: c1:33:79:05:bc:f1:8b:fc:ca:6a:36:8a:bd:65:3e: 46:fe:6d:c4:c8:0e:e5:18:bd:15:ca:29:2e:82:21: 40:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0B:5C:20:88:BD:D9:5F:E7:FA:BA:C3:91:C1:30:F3:CB:65:4F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/01322300-81da-31b2-bdf2-b28ab6be6832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:26:85:60:6e:9c:1e:f7:1e:da:b7:75:b1:75:c7:f9:87:2d: 01:09:e9:d4:2f:02:b4:f6:15:f9:08:88:c0:42:1b:58:85:15: 46:38:fb:f6:c5:91:ba:70:55:ff:5c:9a:9b:59:f5:b5:ad:57: ca:ac:86:49:1e:2d:6a:a1:97:37:48:d1:11:05:72:49:04:98: a8:41:8d:f1:00:a5:25:42:99:6f:f8:3c:63:7b:29:73:e7:6c: 08:5d:ca:f0:65:e1:c8:5d:dd:8a:8d:10:4e:1b:e3:93:d2:d5: 6a:92:13:a4:3f:52:b4:db:f8:53:70:1d:94:f3:4c:37:30:d0: 33:84:ce:a3:f4:fa:23:a5:81:7b:43:ec:ca:47:6a:7f:ec:c1: ba:b8:ed:59:48:f3:a6:ca:43:b0:94:5e:13:b1:78:99:80:95: b4:33:33:f2:c7:6b:03:f3:99:53:42:e6:24:83:51:73:28:d1: 0e:5d:de:44:59:9c:66:24:f7:91:72:34:5d:07:f2:c5:7b:b7: 02:b7:5b:a3:59:9e:b4:9d:bb:cd:e8:04:4e:68:a1:fd:ee:47: 0c:7e:9d:34:6f:84:8e:9a:43:ee:e2:38:b6:20:5d:9e:e8:78: 5f:a6:b7:10:cb:33:2f:62:08:79:8b:45:b0:08:da:13:bf:10: 96:e6:fc:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI0vF/EkwClmW2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1NloXDTMwMDMyMjA0MDAwMFowLzEtMCsGA1UEAxMk Y2FlNjg2NzgtNzE0Yi00YzA0LThhZWItZGI2NWViZTliMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieIMbu6nc5eXLYBBqZUOuHHSNocSudSUd2NM 8WA0CD3YT84KI/Ch3fUNZqyR8hcy19nBeqsbhxUApx1Ty844mPGkqY3NMt40JH0V g3sSQD+X+sM+lmpDHEvCNIGc52inyt7o8NA1vtOuNxTb0T4YG2zfsEtDMQVLMFl6 hpaY8KR2sKduDP/X3nR+wRUCmfVSf8kK9CoxzgGNeBu0Gf7RdBn4n500ub4qJa4v jKD8adPJz9iT1OehX5vBWsIgdfYcVTZLheDYGmvQMwKPQ1NUqCu+kDCscW0hJ68m /5YKBmbBM3kFvPGL/MpqNoq9ZT5G/m3EyA7lGL0VyikugiFA5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwLXCCIvdlf5/q6w5HBMPPLZU/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDEzMjIzMDAtODFkYS0z MWIyLWJkZjItYjI4YWI2YmU2ODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFC94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUmhWBunB73Htq3dbF1x/mHLQEJ6dQvArT2FfkIiMBCG1iFFUY4+/bF kbpwVf9cmptZ9bWtV8qshkkeLWqhlzdI0REFckkEmKhBjfEApSVCmW/4PGN7KXPn bAhdyvBl4chd3YqNEE4b45PS1WqSE6Q/UrTb+FNwHZTzTDcw0DOEzqP0+iOlgXtD 7MpHan/swbq47VlI86bKQ7CUXhOxeJmAlbQzM/LHawPzmVNC5iSDUXMo0Q5d3kRZ nGYk95FyNF0H8sV7twK3W6NZnrSdu83oBE5oof3uRwx+nTRvhI6aQ+7iOLYgXZ7o eF+mtxDLMy9iCHmLRbAI2hO/EJbm/L8= -----END CERTIFICATE-----Generated at Sat Sep 5 05:24:40 2026 by rpki-client