$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0ce0dcfa-3985-3e48-98c8-e739d4af0896.roa File: 0ce0dcfa-3985-3e48-98c8-e739d4af0896.roa (raw, json) Hash identifier: 2zEfsvUV7xWSC0ape312NFMPyhi1eyUeF8NaDFS123w= Subject key identifier: C2:22:54:D1:B3:DF:2E:A1:93:42:EF:7B:3A:AF:94:44:09:D2:D9:6F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE423567BF0104AEDA2733700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0ce0dcfa-3985-3e48-98c8-e739d4af0896.roa Signing time: Wed 19 Aug 2026 18:04:01 +0000 ROA not before: Wed 19 Aug 2026 18:04:01 +0000 ROA not after: Sun 31 Mar 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:56:7b:f0:10:4a:ed:a2:73:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:01 2026 GMT Not After : Mar 31 04:00:00 2030 GMT Subject: CN=bb95040e-f2d1-44b9-a9d2-f1eb2ef7d387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d1:44:b3:1d:c9:a6:6d:fd:30:0a:35:7d:1e: b5:f7:50:99:b2:dd:28:95:8c:13:0c:c2:ca:b0:a2: 0a:10:32:3b:32:49:71:f9:6d:e8:7d:de:77:2c:43: 32:a1:6f:aa:70:15:c4:4b:4d:d0:31:8d:ac:86:53: 5e:99:e3:30:28:ec:9b:d0:5d:96:43:2a:16:b9:1e: 4b:4b:fa:e3:39:d9:46:d1:6f:99:5c:18:5b:c8:d2: 25:aa:92:bb:e2:7e:60:65:ff:82:16:7b:61:eb:a0: 64:c4:63:3d:f5:62:88:7c:05:1c:5e:fb:f0:b3:7f: b2:51:af:c4:92:9f:ef:22:83:44:a2:a3:2e:6b:bb: bc:96:34:95:d7:db:bc:67:00:4f:29:fd:56:c2:74: 2d:6c:c9:1f:30:08:1c:a8:30:15:cd:a2:85:cc:91: a8:3b:fd:b6:52:85:59:25:e2:f4:2a:ac:53:7d:35: 43:ee:1e:c3:4b:8e:ec:cf:ee:7f:cc:0a:4c:1d:11: 11:01:82:95:ac:a7:96:9e:2a:0d:af:d7:e9:62:42: 3b:41:9a:8f:cf:77:cb:5c:4f:42:29:12:fa:97:33: e7:c7:a8:33:d2:65:72:af:7a:93:8d:96:e2:a2:7e: 4d:fb:6a:43:25:8f:3c:c2:17:b9:7d:c7:b6:44:15: 4c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:22:54:D1:B3:DF:2E:A1:93:42:EF:7B:3A:AF:94:44:09:D2:D9:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0ce0dcfa-3985-3e48-98c8-e739d4af0896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:40:4c:af:4e:26:3a:a4:c1:a4:6a:31:8d:94:95:67:34:20: bf:6d:13:36:03:93:a2:a8:30:9e:1c:d1:73:c1:46:66:9d:95: 8c:eb:57:aa:46:d4:ac:3f:9e:ce:74:2c:41:2e:cf:bd:a9:db: f0:5f:56:22:22:e8:45:00:e6:10:0e:65:87:85:ce:e6:93:4e: 79:ae:ed:6c:48:11:b2:96:15:05:39:53:d3:67:f1:7b:09:e3: d5:20:21:8b:c8:53:92:3a:11:89:21:9e:b6:2b:c9:ff:1a:55: c9:09:84:18:20:50:61:5b:d5:30:d1:14:8b:a6:17:7e:aa:94: e7:16:47:ee:df:47:87:6b:da:dc:e8:fe:82:e0:6a:ae:4c:66: b5:eb:e5:e5:a8:1d:f0:47:7a:52:ba:07:53:f9:0e:e8:3f:eb: 5f:81:17:06:ee:b7:32:10:7c:f2:62:95:c1:65:93:7f:ce:48: 70:74:27:05:92:6c:b0:cc:4c:1c:9e:d9:ac:04:d4:3c:14:dc: fe:98:a2:f0:16:14:5c:5f:b1:b4:d0:21:de:fc:ad:b5:55:33: 0e:35:d1:b0:29:b2:47:d8:a4:ae:6a:2b:04:65:e2:01:02:83: 69:b1:8f:f3:d8:ec:02:cc:41:4e:c3:0a:e7:7a:b8:06:7d:3f: d4:72:3a:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1Z78BBK7aJzNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMVoXDTMwMDMzMTA0MDAwMFowLzEtMCsGA1UEAxMk YmI5NTA0MGUtZjJkMS00NGI5LWE5ZDItZjFlYjJlZjdkMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9FEsx3Jpm39MAo1fR6191CZst0olYwTDMLK sKIKEDI7Mklx+W3ofd53LEMyoW+qcBXES03QMY2shlNemeMwKOyb0F2WQyoWuR5L S/rjOdlG0W+ZXBhbyNIlqpK74n5gZf+CFnth66BkxGM99WKIfAUcXvvws3+yUa/E kp/vIoNEoqMua7u8ljSV19u8ZwBPKf1WwnQtbMkfMAgcqDAVzaKFzJGoO/22UoVZ JeL0KqxTfTVD7h7DS47sz+5/zApMHRERAYKVrKeWnioNr9fpYkI7QZqPz3fLXE9C KRL6lzPnx6gz0mVyr3qTjZbion5N+2pDJY88whe5fce2RBVMcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIiVNGz3y6hk0LvezqvlEQJ0tlvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMGNlMGRjZmEtMzk4NS0z ZTQ4LTk4YzgtZTczOWQ0YWYwODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFC85MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpATK9OJjqkwaRqMY2UlWc0IL9tEzYDk6KoMJ4c0XPBRmadlYzrV6pG 1Kw/ns50LEEuz72p2/BfViIi6EUA5hAOZYeFzuaTTnmu7WxIEbKWFQU5U9Nn8XsJ 49UgIYvIU5I6EYkhnrYryf8aVckJhBggUGFb1TDRFIumF36qlOcWR+7fR4dr2tzo /oLgaq5MZrXr5eWoHfBHelK6B1P5Dug/61+BFwbutzIQfPJilcFlk3/OSHB0JwWS bLDMTBye2awE1DwU3P6YovAWFFxfsbTQId78rbVVMw410bApskfYpK5qKwRl4gEC g2mxj/PY7ALMQU7DCud6uAZ9P9RyOuA= -----END CERTIFICATE-----Generated at Sat Sep 5 06:03:43 2026 by rpki-client