$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6b7f42a5-cbae-38ff-b9a4-bf21ea1863f7.roa File: 6b7f42a5-cbae-38ff-b9a4-bf21ea1863f7.roa (raw, json) Hash identifier: FcDmtl8R2H5+MWeyhsrEpmJ/LJyG4ISHt9ZPl93VE+A= Subject key identifier: 69:AD:66:6C:99:64:19:7E:E1:31:CE:30:2B:CD:EC:06:B5:C9:83:6D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234CE4B9EC88F717CA7378 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6b7f42a5-cbae-38ff-b9a4-bf21ea1863f7.roa Signing time: Wed 19 Aug 2026 18:03:57 +0000 ROA not before: Wed 19 Aug 2026 18:03:57 +0000 ROA not after: Thu 07 Mar 2030 05:00:00 +0000 asID: 8069 IP address blocks: 20.47.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4c:e4:b9:ec:88:f7:17:ca:73:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:57 2026 GMT Not After : Mar 7 05:00:00 2030 GMT Subject: CN=583ed392-7393-4d3f-b4b9-ec669a780ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:50:c4:fd:93:f8:10:d9:66:2b:39:9c:c4:7b: 4d:e0:2d:22:c3:ae:d5:91:65:3c:76:dc:53:be:ab: 1c:82:76:1b:e0:31:27:da:cb:3b:ae:ca:50:c5:26: e9:ca:4b:28:b8:78:4f:4c:3f:4b:b3:5f:e6:70:04: 56:90:21:01:a9:22:57:e7:e3:8e:62:a9:e3:44:2c: 06:a0:67:f3:42:29:33:84:f2:cd:9f:61:7e:12:e4: 64:0a:23:aa:a2:25:22:e1:dc:8a:25:51:cb:be:92: ff:97:8d:5a:c0:a2:c2:81:0e:a9:3f:0d:25:e8:dc: 73:2a:92:0f:42:72:e3:ff:34:f9:93:40:7d:00:5d: 6b:9b:95:f5:d1:53:6c:4b:89:cb:0c:9c:2b:78:b6: d0:53:4f:b5:87:66:c1:8e:0a:17:00:0c:6b:4d:0e: 13:d5:94:3a:ef:7c:05:96:af:0d:d9:e9:ec:9b:f3: f9:7f:d0:bb:4e:8e:37:20:fc:8b:7d:66:11:f7:6d: 22:85:32:b4:4d:72:c7:3e:4d:48:41:8b:31:c8:52: 14:8b:a3:a8:1b:07:aa:4d:87:ce:1c:53:cd:6a:e7: d2:17:f0:44:c2:53:3b:10:4d:f6:46:b9:70:40:9a: 82:cf:5f:d7:52:a1:15:f9:3f:eb:cc:3a:32:7a:35: 9e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AD:66:6C:99:64:19:7E:E1:31:CE:30:2B:CD:EC:06:B5:C9:83:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6b7f42a5-cbae-38ff-b9a4-bf21ea1863f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:92:b5:20:6e:5d:6e:46:69:3a:d1:49:71:27:1b:d6:15:65: d5:d1:ff:c5:fc:fd:ad:a0:6c:2a:96:5f:72:0b:60:bd:c1:05: 2a:93:81:8e:66:e4:6c:03:32:7d:71:55:d8:05:f4:08:60:ba: 53:b3:a5:6d:84:d2:d7:36:5a:5e:9e:d4:fc:e5:4b:d2:fe:8c: 3f:2b:9c:9c:47:31:ad:53:ad:24:50:33:ae:1b:a8:66:3c:25: 50:40:db:e3:52:9e:ea:1a:6c:4e:b7:16:99:11:67:70:3c:98: 6a:55:e0:3f:ca:40:2c:bd:08:84:23:ba:48:28:a1:33:d2:51: 87:6b:b5:2b:ff:eb:e5:60:ba:73:54:22:8d:86:56:2d:40:94: 98:59:59:cc:8c:e5:8f:f5:34:f8:ec:2d:49:e9:1f:17:d4:12: c5:36:46:a9:f6:cb:e8:42:ed:1f:31:8d:82:f2:5e:f0:e9:5c: a5:76:f0:d1:73:0f:20:ce:75:94:8b:10:bf:d8:af:cd:18:a0: c9:37:42:68:3d:b7:42:6c:72:dc:75:8d:ad:49:29:97:75:01: 1d:6e:01:3c:62:0f:ab:aa:c3:55:e7:bf:7b:7d:13:09:d0:2c: 6f:4a:af:33:6f:70:08:94:91:20:8d:23:5f:86:9f:91:15:4c: 56:93:ed:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI0zkueyI9xfKc3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1N1oXDTMwMDMwNzA1MDAwMFowLzEtMCsGA1UEAxMk NTgzZWQzOTItNzM5My00ZDNmLWI0YjktZWM2NjlhNzgwZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFDE/ZP4ENlmKzmcxHtN4C0iw67VkWU8dtxT vqscgnYb4DEn2ss7rspQxSbpyksouHhPTD9Ls1/mcARWkCEBqSJX5+OOYqnjRCwG oGfzQikzhPLNn2F+EuRkCiOqoiUi4dyKJVHLvpL/l41awKLCgQ6pPw0l6NxzKpIP QnLj/zT5k0B9AF1rm5X10VNsS4nLDJwreLbQU0+1h2bBjgoXAAxrTQ4T1ZQ673wF lq8N2ensm/P5f9C7To43IPyLfWYR920ihTK0TXLHPk1IQYsxyFIUi6OoGweqTYfO HFPNaufSF/BEwlM7EE32RrlwQJqCz1/XUqEV+T/rzDoyejWeLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmtZmyZZBl+4THOMCvN7Aa1yYNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmI3ZjQyYTUtY2JhZS0z OGZmLWI5YTQtYmYyMWVhMTg2M2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFC9ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2StSBuXW5GaTrRSXEnG9YVZdXR/8X8/a2gbCqWX3ILYL3BBSqTgY5m 5GwDMn1xVdgF9AhgulOzpW2E0tc2Wl6e1PzlS9L+jD8rnJxHMa1TrSRQM64bqGY8 JVBA2+NSnuoabE63FpkRZ3A8mGpV4D/KQCy9CIQjukgooTPSUYdrtSv/6+VgunNU Io2GVi1AlJhZWcyM5Y/1NPjsLUnpHxfUEsU2Rqn2y+hC7R8xjYLyXvDpXKV28NFz DyDOdZSLEL/Yr80YoMk3Qmg9t0Jsctx1ja1JKZd1AR1uATxiD6uqw1Xnv3t9EwnQ LG9KrzNvcAiUkSCNI1+Gn5EVTFaT7V4= -----END CERTIFICATE-----Generated at Sat Sep 5 07:04:59 2026 by rpki-client