$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2a07105a-5e51-3116-bbeb-e4037ca882d4.roa File: 2a07105a-5e51-3116-bbeb-e4037ca882d4.roa (raw, json) Hash identifier: m3FpHlbbQJyhkoDUfA5eK2XuGkNn+Ngfe3QhfodSYpw= Subject key identifier: C8:54:17:CD:12:D8:F2:2B:07:22:5D:EE:66:A7:97:EF:F8:8F:8E:A7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235853018AF386EDA9FD80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2a07105a-5e51-3116-bbeb-e4037ca882d4.roa Signing time: Wed 19 Aug 2026 18:04:02 +0000 ROA not before: Wed 19 Aug 2026 18:04:02 +0000 ROA not after: Tue 26 Mar 2030 04:00:00 +0000 asID: 8075 IP address blocks: 20.152.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:58:53:01:8a:f3:86:ed:a9:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:02 2026 GMT Not After : Mar 26 04:00:00 2030 GMT Subject: CN=bfc63084-25dd-491c-b771-044fe800d0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:62:33:90:8f:45:8d:a8:53:fd:f0:f8:99: ca:b2:72:df:a3:8f:87:bf:a7:91:ca:c1:47:f6:1e: 71:9f:e2:9c:b0:4b:cc:d2:9c:ff:9d:29:d4:3f:6d: fb:ea:84:3d:42:f3:3c:c1:66:6e:93:a8:0c:61:ba: b4:6a:79:07:05:24:9a:d6:c9:6f:11:82:6a:4d:97: 03:0e:2c:dd:76:21:ce:fb:73:b8:dd:e8:56:71:c7: c9:d2:44:5f:a0:8c:f2:dc:b2:98:d8:3b:d0:fd:96: 6a:54:07:0f:fb:35:a4:43:ab:8d:f7:1c:fd:fe:d3: d0:12:5c:44:4a:c5:0f:d8:b1:25:c4:72:51:8e:c9: 11:83:32:af:e2:31:2c:fe:0a:fd:aa:74:c7:1b:63: a9:11:0c:68:c6:d0:e4:15:4a:5c:d6:d4:d4:6e:41: a5:be:2c:dc:ce:ec:2c:2b:9b:f7:26:bc:f9:3f:8b: 6c:4a:20:76:b6:21:76:c7:aa:91:89:17:b4:56:d5: c0:b2:73:f4:c5:4d:83:b8:1a:33:18:76:93:9f:ee: 9f:29:1b:86:e2:99:dc:c7:98:6c:0a:8c:82:52:9e: e1:47:b3:ba:79:65:76:09:9f:86:36:8a:de:b4:be: 86:cd:7d:bb:c1:0e:bd:38:1f:67:a3:3c:b0:f7:c0: 1e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:54:17:CD:12:D8:F2:2B:07:22:5D:EE:66:A7:97:EF:F8:8F:8E:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2a07105a-5e51-3116-bbeb-e4037ca882d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.152.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:e0:ca:ea:9a:67:dd:cf:cf:4b:ff:aa:9d:6a:4a:a7:f9:41: 4e:75:1e:59:1c:79:1c:d6:96:c2:1a:10:ec:89:f8:37:fc:4a: d2:25:97:e9:6b:6f:40:e4:a6:d3:96:86:31:b4:9a:34:36:9c: 34:df:4b:fc:bc:3a:d7:7b:e1:0e:2a:af:b7:e0:1e:df:95:f6: 2f:22:a9:c9:62:f1:8e:fd:20:60:d3:86:e5:06:f5:b8:05:f5: ec:09:81:95:83:cf:39:2a:c0:23:0b:68:af:4f:53:8f:22:3d: 51:dc:53:84:b5:bf:3a:ff:76:76:7a:00:fb:e8:e1:f1:6e:5e: 74:a6:6d:49:12:fa:1d:6f:34:1c:58:96:a5:d0:55:51:5a:f7: f2:ec:c2:60:af:7b:ca:bd:15:af:a0:76:7c:3b:e6:70:c7:3e: 43:9b:6d:a6:b9:5b:9c:ef:72:b1:e6:1d:89:a9:1e:a0:70:24: 6d:32:a5:3f:2e:9c:a6:51:1b:8d:04:c1:30:d7:91:01:a1:29: 90:2d:f2:56:0f:d4:b6:f6:cc:f7:08:86:28:3a:60:97:19:80: 7f:29:fb:0c:cd:77:84:32:c9:bb:fa:b7:f9:2e:57:bb:5a:51: dc:71:6c:4c:72:e9:ce:37:e1:20:e2:7c:f8:0e:ac:d3:ea:4a: d8:44:74:92 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI1hTAYrzhu2p/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMloXDTMwMDMyNjA0MDAwMFowLzEtMCsGA1UEAxMk YmZjNjMwODQtMjVkZC00OTFjLWI3NzEtMDQ0ZmU4MDBkMGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1NiM5CPRY2oU/3w+JnKsnLfo4+Hv6eRysFH 9h5xn+KcsEvM0pz/nSnUP2376oQ9QvM8wWZuk6gMYbq0ankHBSSa1slvEYJqTZcD DizddiHO+3O43ehWccfJ0kRfoIzy3LKY2DvQ/ZZqVAcP+zWkQ6uN9xz9/tPQElxE SsUP2LElxHJRjskRgzKv4jEs/gr9qnTHG2OpEQxoxtDkFUpc1tTUbkGlvizczuws K5v3Jrz5P4tsSiB2tiF2x6qRiRe0VtXAsnP0xU2DuBozGHaTn+6fKRuG4pncx5hs CoyCUp7hR7O6eWV2CZ+GNoretL6GzX27wQ69OB9nozyw98Ae2wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMhUF80S2PIrByJd7manl+/4j46nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmEwNzEwNWEtNWU1MS0z MTE2LWJiZWItZTQwMzdjYTg4MmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAFJgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUuDK6ppn3c/PS/+qnWpKp/lBTnUeWRx5HNaWwhoQ7In4N/xK0iWX6Wtv QOSm05aGMbSaNDacNN9L/Lw613vhDiqvt+Ae35X2LyKpyWLxjv0gYNOG5Qb1uAX1 7AmBlYPPOSrAIwtor09TjyI9UdxThLW/Ov92dnoA++jh8W5edKZtSRL6HW80HFiW pdBVUVr38uzCYK97yr0Vr6B2fDvmcMc+Q5ttprlbnO9yseYdiakeoHAkbTKlPy6c plEbjQTBMNeRAaEpkC3yVg/UtvbM9wiGKDpglxmAfyn7DM13hDLJu/q3+S5Xu1pR 3HFsTHLpzjfhIOJ8+A6s0+pK2ER0kg== -----END CERTIFICATE-----Generated at Sat Sep 5 00:39:10 2026 by rpki-client