$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17dce871-ee18-3594-b741-707dc0f1d76d.roa File: 17dce871-ee18-3594-b741-707dc0f1d76d.roa (raw, json) Hash identifier: hrqFnxxxP/dkPYaodyyJRRQNFopZkf1/e+9UN0tNvCk= Subject key identifier: 47:FB:9C:19:B5:DF:39:C4:AF:39:75:9C:04:15:AA:8B:58:FE:5E:37 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235896C33DB981E047D800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17dce871-ee18-3594-b741-707dc0f1d76d.roa Signing time: Wed 19 Aug 2026 18:04:02 +0000 ROA not before: Wed 19 Aug 2026 18:04:02 +0000 ROA not after: Mon 15 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 20.48.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:58:96:c3:3d:b9:81:e0:47:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:02 2026 GMT Not After : Apr 15 04:00:00 2030 GMT Subject: CN=39a97caf-38dd-4bb6-bcbd-5afd4aac6c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9f:20:04:ad:50:cc:ae:a9:a6:4e:41:30:9a: 7c:7a:a0:c3:18:7b:a9:b1:23:a9:de:ac:7e:10:60: 9e:6e:8b:c8:0b:0a:8a:4a:e2:4b:5c:62:66:46:a9: 39:9a:3c:28:e7:00:46:4b:31:b7:90:6d:68:46:bd: ee:e4:ef:f4:e0:82:aa:c5:be:c9:d9:13:c2:ff:6d: 86:4d:92:af:2c:0a:6d:ed:4f:c2:a4:b2:85:d2:5e: b3:a7:01:1e:32:7b:21:0b:1b:87:5e:43:d7:2b:7d: cf:c4:53:b4:ec:45:5b:16:ab:ab:61:dd:61:be:54: 39:bb:34:c2:ad:5f:e6:c3:de:17:3c:fd:50:ea:8c: 12:3b:4c:7b:2c:12:0c:ab:01:f0:74:52:ec:db:4f: 43:db:c5:69:4a:79:e8:af:fe:52:18:52:76:f4:dc: c5:00:79:d1:32:3b:5c:36:96:55:58:d1:bf:0b:99: 58:21:8b:99:5a:33:91:bf:f0:93:7a:5f:89:4b:9d: 13:2d:14:2d:6c:8f:75:0f:7c:a2:51:dc:04:d4:57: f0:87:79:7a:ba:e8:6e:70:27:0d:44:71:3d:e9:df: 4d:6b:d0:0f:06:29:54:82:8b:09:05:dc:08:44:51: 44:dc:a1:72:aa:08:00:6f:cf:85:01:a6:6f:5c:31: a8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FB:9C:19:B5:DF:39:C4:AF:39:75:9C:04:15:AA:8B:58:FE:5E:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17dce871-ee18-3594-b741-707dc0f1d76d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.48.0.0/12 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:05:1e:0f:94:9b:d8:e6:fd:b4:b1:13:69:88:04:45:f1:07: 96:19:d1:e5:10:81:81:15:0b:40:e6:19:e7:87:d9:b2:71:6e: af:1c:e9:61:f8:90:40:0b:a5:46:93:b4:33:3e:fa:39:3c:ac: c9:1d:a0:9b:5e:3b:00:31:72:f6:25:8f:7a:68:ec:d4:b6:0b: ee:c4:c6:1d:52:7d:28:04:c5:eb:c0:88:74:a6:72:47:6d:9e: 4f:85:e6:54:7a:f7:d9:9d:c5:bd:1b:b0:66:f1:d3:28:4a:6b: e2:e7:2c:9a:29:fd:ae:be:94:b9:83:dc:5d:c3:68:b0:ed:96: 69:13:62:47:cb:77:5b:c7:eb:71:20:f1:b1:c3:ae:a0:e4:f5: a0:a6:92:ef:05:b5:ef:d4:c6:cc:24:87:0b:19:2c:6d:f1:a1: 98:08:fa:30:08:4f:f1:a5:bb:1f:1f:2b:82:10:f3:37:14:98: 15:42:d1:9c:d0:05:42:3a:e5:4a:58:d3:b4:78:47:cb:7f:8f: 9d:2d:7e:42:f0:70:69:8b:5f:72:bb:c6:6c:d1:53:a4:e6:1b: 7c:63:33:9c:4c:19:cb:35:9c:00:86:94:e9:1d:95:55:18:ac: 56:5c:48:e8:6a:69:69:70:5d:9d:a1:b3:10:a2:9d:bf:37:90: 35:84:18:c5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI1iWwz25geBH2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMloXDTMwMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk MzlhOTdjYWYtMzhkZC00YmI2LWJjYmQtNWFmZDRhYWM2Yzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ8gBK1QzK6ppk5BMJp8eqDDGHupsSOp3qx+ EGCebovICwqKSuJLXGJmRqk5mjwo5wBGSzG3kG1oRr3u5O/04IKqxb7J2RPC/22G TZKvLApt7U/CpLKF0l6zpwEeMnshCxuHXkPXK33PxFO07EVbFqurYd1hvlQ5uzTC rV/mw94XPP1Q6owSO0x7LBIMqwHwdFLs209D28VpSnnor/5SGFJ29NzFAHnRMjtc NpZVWNG/C5lYIYuZWjORv/CTel+JS50TLRQtbI91D3yiUdwE1Ffwh3l6uuhucCcN RHE96d9Na9APBilUgosJBdwIRFFE3KFyqggAb8+FAaZvXDGoXQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEf7nBm13znErzl1nAQVqotY/l43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTdkY2U4NzEtZWUxOC0z NTk0LWI3NDEtNzA3ZGMwZjFkNzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEFDAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIQUeD5Sb2Ob9tLETaYgERfEHlhnR5RCBgRULQOYZ54fZsnFurxzpYfiQ QAulRpO0Mz76OTysyR2gm147ADFy9iWPemjs1LYL7sTGHVJ9KATF68CIdKZyR22e T4XmVHr32Z3FvRuwZvHTKEpr4ucsmin9rr6UuYPcXcNosO2WaRNiR8t3W8frcSDx scOuoOT1oKaS7wW179TGzCSHCxksbfGhmAj6MAhP8aW7Hx8rghDzNxSYFULRnNAF QjrlSljTtHhHy3+PnS1+QvBwaYtfcrvGbNFTpOYbfGMznEwZyzWcAIaU6R2VVRis VlxI6GppaXBdnaGzEKKdvzeQNYQYxQ== -----END CERTIFICATE-----Generated at Sat Sep 5 06:29:06 2026 by rpki-client