$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/18e3f386-7014-3e9c-bcee-e0c4c882b840.roa File: 18e3f386-7014-3e9c-bcee-e0c4c882b840.roa (raw, json) Hash identifier: oAOx1Vpf5pIWBgZ5SITJw5lIvW2K/pEdz619XrOdfxo= Subject key identifier: D1:B6:DD:BC:01:6A:A4:19:95:46:DA:40:B7:A7:A0:81:13:33:90:66 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235AE496EFE732EC11E780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/18e3f386-7014-3e9c-bcee-e0c4c882b840.roa Signing time: Wed 19 Aug 2026 18:04:03 +0000 ROA not before: Wed 19 Aug 2026 18:04:03 +0000 ROA not after: Wed 03 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 20.36.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5a:e4:96:ef:e7:32:ec:11:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:03 2026 GMT Not After : Apr 3 04:00:00 2030 GMT Subject: CN=1f3c036f-e38b-4358-8707-d7280351a97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:06:0c:9c:96:1f:43:1a:3f:36:e1:e2:51:f5: 5b:a6:72:19:06:2a:bc:27:0d:47:e3:02:74:e8:92: b7:73:19:4a:71:c5:be:5e:bb:bf:31:24:8f:84:2e: 44:1c:3e:37:3b:8c:04:db:49:d2:e1:3c:f8:88:85: 4d:d6:41:01:07:7b:18:b1:6d:ce:45:1a:03:08:69: a2:d5:c3:da:05:08:12:a1:d0:89:45:98:68:0b:ca: a3:dd:d8:03:b0:9d:af:f2:a9:5f:fe:17:e6:99:c8: cb:75:ff:e1:d5:c6:7d:35:5b:86:2f:0a:66:30:83: 83:62:e4:9d:8f:64:3f:a3:60:33:39:96:59:94:dc: 39:ec:01:53:fb:ef:14:6a:c9:b7:58:75:f8:6b:80: 16:73:db:ec:03:03:4e:6d:77:ae:b8:1d:93:86:92: 5c:dd:9f:8c:38:e5:4c:31:bd:53:83:1d:7c:8b:14: 2f:52:53:62:75:59:e3:e2:34:2a:81:13:0a:11:27: 90:ab:ad:6b:aa:f3:b0:de:1c:5a:78:d8:25:2a:0e: 69:9c:dc:a4:52:65:ea:14:3a:d1:a6:4a:f1:92:91: 0d:50:da:4a:1f:51:de:8e:1d:8d:fa:18:79:42:58: 4c:ba:cc:b8:21:0a:f7:74:41:00:d4:b2:a7:59:d3: 1d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B6:DD:BC:01:6A:A4:19:95:46:DA:40:B7:A7:A0:81:13:33:90:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/18e3f386-7014-3e9c-bcee-e0c4c882b840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.36.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:54:17:f8:12:7a:1a:2e:7a:34:62:0a:e8:bf:75:a7:be:90: 73:d5:a6:d9:10:6d:9f:83:d2:75:c0:e7:fb:53:76:05:9c:14: a8:3e:6b:b8:41:48:80:22:af:3f:86:5d:f9:c1:f8:f7:76:4c: ad:3d:ee:39:08:73:f5:20:25:da:b6:41:3f:7c:b8:27:03:6f: 3f:18:8b:c8:2f:38:a1:5c:64:bf:d7:a8:57:cb:78:6d:3f:e1: c4:24:a6:54:c9:8d:8a:c6:22:71:65:3b:21:da:4e:76:f0:f2: 85:2f:e4:ee:e3:ce:4a:42:aa:68:03:85:ca:9c:82:59:25:63: 40:25:1c:49:9a:1c:aa:70:1d:c1:eb:51:d1:c9:9b:31:e0:a2: 2c:d4:9c:68:d7:b3:7a:46:1a:27:73:56:5f:0c:1c:77:d2:49: eb:bc:e2:18:3f:54:28:3a:ca:af:1d:69:59:77:8b:01:f8:8d: ee:af:12:8d:21:14:50:e6:97:ff:c3:bb:af:56:52:b0:97:b6: 45:b7:df:25:4b:79:22:07:98:86:91:1a:d5:75:b2:e4:8f:c2: 67:b9:6e:b2:9c:27:6c:2c:f1:d1:26:85:60:0a:90:c3:2f:68: 6e:c5:03:08:a2:8a:82:16:14:35:5d:81:b8:db:5d:09:e4:f9: 35:ec:38:78 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI1rklu/nMuwR54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwM1oXDTMwMDQwMzA0MDAwMFowLzEtMCsGA1UEAxMk MWYzYzAzNmYtZTM4Yi00MzU4LTg3MDctZDcyODAzNTFhOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQYMnJYfQxo/NuHiUfVbpnIZBiq8Jw1H4wJ0 6JK3cxlKccW+Xru/MSSPhC5EHD43O4wE20nS4Tz4iIVN1kEBB3sYsW3ORRoDCGmi 1cPaBQgSodCJRZhoC8qj3dgDsJ2v8qlf/hfmmcjLdf/h1cZ9NVuGLwpmMIODYuSd j2Q/o2AzOZZZlNw57AFT++8Uasm3WHX4a4AWc9vsAwNObXeuuB2ThpJc3Z+MOOVM Mb1Tgx18ixQvUlNidVnj4jQqgRMKESeQq61rqvOw3hxaeNglKg5pnNykUmXqFDrR pkrxkpENUNpKH1Hejh2N+hh5QlhMusy4IQr3dEEA1LKnWdMdgQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNG23bwBaqQZlUbaQLenoIETM5BmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMThlM2YzODYtNzAxNC0z ZTljLWJjZWUtZTBjNGM4ODJiODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCFCQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAFQX+BJ6Gi56NGIK6L91p76Qc9Wm2RBtn4PSdcDn+1N2BZwUqD5ruEFI gCKvP4Zd+cH493ZMrT3uOQhz9SAl2rZBP3y4JwNvPxiLyC84oVxkv9eoV8t4bT/h xCSmVMmNisYicWU7IdpOdvDyhS/k7uPOSkKqaAOFypyCWSVjQCUcSZocqnAdwetR 0cmbMeCiLNScaNezekYaJ3NWXwwcd9JJ67ziGD9UKDrKrx1pWXeLAfiN7q8SjSEU UOaX/8O7r1ZSsJe2RbffJUt5IgeYhpEa1XWy5I/CZ7luspwnbCzx0SaFYAqQwy9o bsUDCKKKghYUNV2BuNtdCeT5New4eA== -----END CERTIFICATE-----Generated at Sat Sep 5 00:43:02 2026 by rpki-client