$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0aef00e1-21d6-32a8-81c8-12572262254a.roa File: 0aef00e1-21d6-32a8-81c8-12572262254a.roa (raw, json) Hash identifier: lqajUK3XXMePwOnYNo2yBINHRn8xQQ+IZdKOxCrbdmI= Subject key identifier: 9C:EA:1A:00:64:D3:9E:7F:09:3D:E2:55:41:69:EB:AC:A5:B6:12:3D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234C71435B9FD66C12A6E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0aef00e1-21d6-32a8-81c8-12572262254a.roa Signing time: Wed 19 Aug 2026 18:03:56 +0000 ROA not before: Wed 19 Aug 2026 18:03:56 +0000 ROA not after: Sat 06 Apr 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4c:71:43:5b:9f:d6:6c:12:a6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:56 2026 GMT Not After : Apr 6 04:00:00 2030 GMT Subject: CN=0faf636f-a3a1-4a47-90e6-8e5e28929d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f7:79:5e:1c:f9:45:ef:bc:ce:2f:49:f8:9b: e7:65:0b:5c:a6:f3:f0:29:6c:1b:af:d3:3c:04:fe: da:f9:5f:b1:e9:1d:b0:f0:6b:a8:bf:6d:37:d9:cd: c9:54:94:9e:1f:09:5b:d9:69:80:0d:0f:42:44:e5: 62:27:e0:cb:47:0d:81:d8:f5:87:92:2c:b1:b1:1b: 62:a8:72:7c:06:85:11:77:f6:fe:3d:50:35:1c:61: d7:15:28:76:9b:42:e3:95:f3:e5:24:9f:c4:91:fc: 96:13:a3:ea:41:9d:0d:de:d6:18:70:55:c7:eb:39: 98:76:35:8d:b8:64:b3:bc:71:d6:05:31:c8:9f:ad: d0:39:1d:ec:ab:db:ac:18:bd:ac:36:14:2f:1b:4f: aa:a9:b6:c6:5b:c4:2c:bf:8f:02:2b:57:b7:b7:e6: db:7b:7b:10:38:b8:f0:9d:19:a4:ee:5f:2f:4f:66: 58:95:1c:07:6a:ae:89:93:eb:5f:3b:18:64:d5:a3: 73:a1:ea:a0:4a:fd:c3:0b:a7:8c:52:e8:8d:b3:ef: fa:3d:80:8f:ec:aa:86:7e:8e:f9:a1:f2:85:1c:37: 9a:45:da:21:23:d7:2c:9b:ef:e2:e9:97:6b:4a:71: f5:2e:21:d7:67:2a:2a:65:e2:34:b2:db:01:9a:5b: 79:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EA:1A:00:64:D3:9E:7F:09:3D:E2:55:41:69:EB:AC:A5:B6:12:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0aef00e1-21d6-32a8-81c8-12572262254a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:27:f2:fd:34:4e:69:30:ba:d4:42:a9:84:6d:f1:cb:05:0a: 37:4b:f4:56:9b:72:99:0b:ca:90:03:88:56:3e:3b:af:a6:ec: 5f:ef:01:e7:2e:15:67:4e:89:fa:87:97:f4:63:eb:41:63:77: ed:64:ce:2a:b2:5c:e1:6e:cc:c7:f8:03:7c:87:d4:bc:f6:87: 56:39:41:50:52:e8:0b:a2:e9:43:e8:82:4a:cf:d2:c8:63:9a: df:02:33:59:76:d0:6f:31:83:da:05:87:9b:8e:76:88:bb:2e: 41:aa:9a:85:81:e4:da:12:6d:0b:9b:f7:a4:bd:e5:ef:cb:00: 62:de:a7:ff:47:2b:e3:5b:21:b6:cc:19:b5:43:fc:bd:49:2e: 04:88:86:4e:f4:6e:45:5d:7d:8b:60:b3:8f:ce:9b:15:5b:db: 09:ac:e0:67:c7:61:96:f9:6d:28:7f:45:9d:e8:e0:0b:65:55: 1a:af:e9:98:af:91:30:e5:85:15:04:ab:b4:fc:a6:42:87:c6: 56:b1:54:44:06:2f:84:c7:7c:16:af:4d:dd:88:fc:f2:e6:1c: f3:d0:d5:4a:b8:f5:8c:46:ab:14:48:11:f6:cf:cf:1d:6c:08: 7b:09:0b:33:2b:d9:c9:57:95:07:4a:33:dc:c5:cd:f4:d8:0c: 13:10:e9:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI0xxQ1uf1mwSpuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1NloXDTMwMDQwNjA0MDAwMFowLzEtMCsGA1UEAxMk MGZhZjYzNmYtYTNhMS00YTQ3LTkwZTYtOGU1ZTI4OTI5ZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/d5Xhz5Re+8zi9J+JvnZQtcpvPwKWwbr9M8 BP7a+V+x6R2w8Guov2032c3JVJSeHwlb2WmADQ9CROViJ+DLRw2B2PWHkiyxsRti qHJ8BoURd/b+PVA1HGHXFSh2m0LjlfPlJJ/EkfyWE6PqQZ0N3tYYcFXH6zmYdjWN uGSzvHHWBTHIn63QOR3sq9usGL2sNhQvG0+qqbbGW8Qsv48CK1e3t+bbe3sQOLjw nRmk7l8vT2ZYlRwHaq6Jk+tfOxhk1aNzoeqgSv3DC6eMUuiNs+/6PYCP7KqGfo75 ofKFHDeaRdohI9csm+/i6ZdrSnH1LiHXZyoqZeI0stsBmlt5uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzqGgBk055/CT3iVUFp66ylthI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMGFlZjAwZTEtMjFkNi0z MmE4LTgxYzgtMTI1NzIyNjIyNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFC96MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkn8v00TmkwutRCqYRt8csFCjdL9FabcpkLypADiFY+O6+m7F/vAecu FWdOifqHl/Rj60Fjd+1kziqyXOFuzMf4A3yH1Lz2h1Y5QVBS6Aui6UPogkrP0shj mt8CM1l20G8xg9oFh5uOdoi7LkGqmoWB5NoSbQub96S95e/LAGLep/9HK+NbIbbM GbVD/L1JLgSIhk70bkVdfYtgs4/OmxVb2wms4GfHYZb5bSh/RZ3o4AtlVRqv6Ziv kTDlhRUEq7T8pkKHxlaxVEQGL4THfBavTd2I/PLmHPPQ1Uq49YxGqxRIEfbPzx1s CHsJCzMr2clXlQdKM9zFzfTYDBMQ6bo= -----END CERTIFICATE-----Generated at Sat Sep 5 05:02:57 2026 by rpki-client