$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3cf0e427-3372-3d57-8cef-6d5cdff6e1fa.roa File: 3cf0e427-3372-3d57-8cef-6d5cdff6e1fa.roa (raw, json) Hash identifier: AYT5EcuXrSvy6nmFmFkrOLpycJZXhGtgm1gkqTZQv1o= Subject key identifier: 19:99:B6:14:A6:3C:BF:05:00:B5:80:06:4B:3A:8A:09:73:C7:C7:8B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234E00CB0409FE4E929640 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3cf0e427-3372-3d57-8cef-6d5cdff6e1fa.roa Signing time: Wed 19 Aug 2026 18:03:57 +0000 ROA not before: Wed 19 Aug 2026 18:03:57 +0000 ROA not after: Sat 06 Apr 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4e:00:cb:04:09:fe:4e:92:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:57 2026 GMT Not After : Apr 6 04:00:00 2030 GMT Subject: CN=ca320992-c93e-4441-9881-0f537138f005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:a0:58:62:cc:5f:6a:91:db:39:92:bf:7e:bf: cc:19:c7:74:3f:0a:c2:b4:e8:3a:8d:3a:50:1a:db: 14:b8:e9:67:ac:40:f7:4b:75:d2:e3:70:a8:d6:23: 15:07:64:ef:84:a3:7a:d7:74:0e:1e:02:79:68:8a: d6:16:a6:89:17:54:1d:ae:72:f7:b7:6e:46:14:18: 10:13:3e:b1:19:b4:de:af:7d:60:35:c9:bb:c9:44: 08:87:04:53:bd:5d:f9:ad:ad:2f:80:17:e5:58:af: e8:85:d9:d6:0f:6c:ba:cb:93:e2:3f:78:a2:fa:37: 3c:1d:a6:81:76:9f:d2:13:a4:39:da:b6:c3:d7:c8: f8:0c:80:76:4e:89:a7:a9:3c:33:34:38:b8:16:35: aa:25:54:d5:b2:47:9f:91:f1:85:00:63:48:41:c5: 81:9b:db:e5:38:1b:5b:fb:57:a2:2c:4a:40:6c:d4: 9d:1b:1a:26:24:03:01:95:f1:3b:69:9f:e1:f9:b8: 16:d0:a4:de:40:0e:fa:47:65:1c:74:20:20:e3:0b: 40:a9:f3:c2:80:aa:4f:37:7d:84:32:5a:a7:cd:ed: e6:0a:bc:9c:d2:e8:c1:6d:bc:05:86:e1:4c:d2:3a: 25:29:d3:be:b2:32:9e:e1:07:b9:0d:06:4e:3e:66: 7d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:99:B6:14:A6:3C:BF:05:00:B5:80:06:4B:3A:8A:09:73:C7:C7:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3cf0e427-3372-3d57-8cef-6d5cdff6e1fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e4:14:75:1b:a0:65:94:f6:9b:4e:3c:51:b3:08:7f:bf:c3: 05:23:19:29:d0:1c:25:71:e7:8a:f8:79:5f:32:18:bd:49:c4: 57:b7:d2:20:b0:6f:0e:76:3c:95:00:e0:4c:a3:fc:b9:a7:b8: 84:9b:50:81:56:fe:ea:2f:f6:c1:27:07:07:f0:eb:0c:7f:37: d9:d4:f7:45:85:aa:f2:34:03:b0:13:25:cb:44:44:f9:35:37: 71:cc:5b:12:da:64:a5:a3:53:58:1d:33:25:0f:d6:c2:e5:97: d8:2c:46:14:74:0e:4a:ec:8b:bc:e0:b0:65:db:1d:e1:6c:c0: 8c:f1:85:43:4a:82:e2:30:04:55:12:89:91:de:11:87:f7:77: 78:7c:25:62:ad:35:07:9a:53:d2:08:84:cd:4e:4c:21:b5:62: d2:ff:87:c5:f8:f9:cd:fd:27:4a:70:4d:2f:f8:fe:b8:4f:9e: 5d:6a:75:25:a7:04:f3:bb:b5:74:77:f3:a1:6f:3f:b6:fb:ae: 93:f2:6b:17:4b:27:b0:7b:09:09:98:f0:19:53:e4:d7:b5:75: 02:ed:b3:f6:2b:16:69:0a:50:07:94:9d:43:9b:4c:56:06:84: b2:a0:9b:89:50:3d:c8:cd:ea:13:15:9f:d6:ec:04:fd:93:f8: 54:99:b6:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI04AywQJ/k6SlkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1N1oXDTMwMDQwNjA0MDAwMFowLzEtMCsGA1UEAxMk Y2EzMjA5OTItYzkzZS00NDQxLTk4ODEtMGY1MzcxMzhmMDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+6BYYsxfapHbOZK/fr/MGcd0PwrCtOg6jTpQ GtsUuOlnrED3S3XS43Co1iMVB2TvhKN613QOHgJ5aIrWFqaJF1QdrnL3t25GFBgQ Ez6xGbTer31gNcm7yUQIhwRTvV35ra0vgBflWK/ohdnWD2y6y5PiP3ii+jc8HaaB dp/SE6Q52rbD18j4DIB2TomnqTwzNDi4FjWqJVTVskefkfGFAGNIQcWBm9vlOBtb +1eiLEpAbNSdGxomJAMBlfE7aZ/h+bgW0KTeQA76R2UcdCAg4wtAqfPCgKpPN32E Mlqnze3mCryc0ujBbbwFhuFM0jolKdO+sjKe4Qe5DQZOPmZ9BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmZthSmPL8FALWABks6iglzx8eLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2NmMGU0MjctMzM3Mi0z ZDU3LThjZWYtNmQ1Y2RmZjZlMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFC9+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbkFHUboGWU9ptOPFGzCH+/wwUjGSnQHCVx54r4eV8yGL1JxFe30iCw bw52PJUA4Eyj/LmnuISbUIFW/uov9sEnBwfw6wx/N9nU90WFqvI0A7ATJctERPk1 N3HMWxLaZKWjU1gdMyUP1sLll9gsRhR0Dkrsi7zgsGXbHeFswIzxhUNKguIwBFUS iZHeEYf3d3h8JWKtNQeaU9IIhM1OTCG1YtL/h8X4+c39J0pwTS/4/rhPnl1qdSWn BPO7tXR386FvP7b7rpPyaxdLJ7B7CQmY8BlT5Ne1dQLts/YrFmkKUAeUnUObTFYG hLKgm4lQPcjN6hMVn9bsBP2T+FSZtqk= -----END CERTIFICATE-----Generated at Sat Sep 5 05:01:10 2026 by rpki-client