$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8062e060-9cf8-3aa1-9295-7f24747f9829.roa File: 8062e060-9cf8-3aa1-9295-7f24747f9829.roa (raw, json) Hash identifier: 5if2dWzZhDnclVBwV5s1NHHossChhsS6yt9gF91vUpw= Subject key identifier: F2:59:6A:1F:11:E8:2F:6C:35:59:F9:69:3D:00:3F:6A:00:7D:F6:79 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE423569E9EE720C9277ADA00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8062e060-9cf8-3aa1-9295-7f24747f9829.roa Signing time: Wed 19 Aug 2026 18:04:01 +0000 ROA not before: Wed 19 Aug 2026 18:04:01 +0000 ROA not after: Sat 23 Mar 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:56:9e:9e:e7:20:c9:27:7a:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:01 2026 GMT Not After : Mar 23 04:00:00 2030 GMT Subject: CN=4eeeab85-b554-40d9-8476-b9da38c1df3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:95:29:93:27:02:e4:58:34:04:1f:71:95: b0:36:d6:46:2b:fe:92:a0:e5:30:36:5c:6d:8d:4f: 78:6f:1d:da:44:2a:32:60:1b:27:93:ba:14:df:30: 7d:28:f2:2b:24:dc:dd:21:bd:6a:f7:38:69:f9:fd: 87:10:6f:87:c5:92:07:8a:ee:39:ed:06:f2:27:d3: 43:d0:c7:45:af:1a:00:91:4c:73:c3:41:6f:81:3b: c3:76:ce:bb:54:b5:fe:12:6c:ca:24:bc:7c:d0:19: 6b:b4:bd:be:07:af:be:0a:51:29:98:99:d3:67:ca: 17:3b:72:bb:01:72:16:ce:85:b7:cb:81:49:06:2a: 41:67:b0:10:cd:8b:e0:4b:99:c9:f4:f5:fa:49:4c: 29:41:03:f7:f4:cc:2d:30:08:88:fd:40:d7:e6:51: 05:61:41:02:ff:05:1e:c7:0d:d0:1f:ec:c5:10:1c: f9:19:20:50:13:01:f8:3b:9c:01:c6:20:b9:1f:43: 68:9f:95:17:74:62:8e:69:14:d2:f7:ca:a8:97:80: 74:3b:b3:86:a2:e5:b1:bf:47:32:cf:ca:a6:c0:4b: a4:e1:81:00:3f:0a:82:1e:2d:71:62:50:80:e1:b3: c5:55:09:70:80:a9:53:05:42:af:0b:6a:61:ba:37: 3c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:59:6A:1F:11:E8:2F:6C:35:59:F9:69:3D:00:3F:6A:00:7D:F6:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8062e060-9cf8-3aa1-9295-7f24747f9829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d3:2d:dc:40:d7:af:7f:ff:cd:22:07:c1:9e:14:7e:f1:40: f5:f2:70:93:04:1d:57:ea:65:22:c5:ce:dc:7f:4b:e7:e9:71: 45:c3:a7:ab:cd:07:00:c1:95:cf:4a:3a:2c:e9:2e:7d:0b:4b: 9d:fa:a3:49:60:27:aa:77:89:88:7e:40:ef:a1:42:a6:08:6d: fb:96:07:0e:10:57:53:e0:a7:a2:50:2d:d0:30:03:c2:d7:71: 55:ff:4b:73:11:1a:58:e7:f1:a9:e0:74:df:a2:37:5c:be:bf: 32:6d:7b:6b:7e:a6:d0:43:97:9a:b8:bb:e8:55:94:f2:04:dc: 86:b4:df:71:d6:39:19:11:7a:11:2a:f8:62:4a:fd:2c:68:c8: 50:62:dc:fd:b0:65:a5:26:25:38:0b:88:bc:0e:eb:5b:9a:19: 36:c9:49:70:4a:13:ca:ca:04:57:44:b5:8b:28:58:61:8e:93: 59:cb:24:19:c2:e6:ad:9f:1f:53:11:ee:01:73:71:d1:8b:c1: 2d:73:cf:f6:39:fd:58:b1:6d:08:20:0a:cc:81:c9:e0:3a:de: 6c:b6:df:82:71:38:84:dc:18:b9:a7:3d:23:68:eb:98:13:17: 5b:02:e0:2e:97:e7:1c:97:10:e6:74:7e:45:bf:f9:f4:b2:dc: 6b:b4:80:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1aenucgySd62gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMVoXDTMwMDMyMzA0MDAwMFowLzEtMCsGA1UEAxMk NGVlZWFiODUtYjU1NC00MGQ5LTg0NzYtYjlkYTM4YzFkZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDuVKZMnAuRYNAQfcZWwNtZGK/6SoOUwNlxt jU94bx3aRCoyYBsnk7oU3zB9KPIrJNzdIb1q9zhp+f2HEG+HxZIHiu457QbyJ9ND 0MdFrxoAkUxzw0FvgTvDds67VLX+EmzKJLx80BlrtL2+B6++ClEpmJnTZ8oXO3K7 AXIWzoW3y4FJBipBZ7AQzYvgS5nJ9PX6SUwpQQP39MwtMAiI/UDX5lEFYUEC/wUe xw3QH+zFEBz5GSBQEwH4O5wBxiC5H0Non5UXdGKOaRTS98qol4B0O7OGouWxv0cy z8qmwEuk4YEAPwqCHi1xYlCA4bPFVQlwgKlTBUKvC2phujc8cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJZah8R6C9sNVn5aT0AP2oAffZ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODA2MmUwNjAtOWNmOC0z YWExLTkyOTUtN2YyNDc0N2Y5ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFC80MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXTLdxA169//80iB8GeFH7xQPXycJMEHVfqZSLFztx/S+fpcUXDp6vN BwDBlc9KOizpLn0LS536o0lgJ6p3iYh+QO+hQqYIbfuWBw4QV1Pgp6JQLdAwA8LX cVX/S3MRGljn8angdN+iN1y+vzJte2t+ptBDl5q4u+hVlPIE3Ia033HWORkRehEq +GJK/SxoyFBi3P2wZaUmJTgLiLwO61uaGTbJSXBKE8rKBFdEtYsoWGGOk1nLJBnC 5q2fH1MR7gFzcdGLwS1zz/Y5/VixbQggCsyByeA63my234JxOITcGLmnPSNo65gT F1sC4C6X5xyXEOZ0fkW/+fSy3Gu0gEs= -----END CERTIFICATE-----Generated at Sat Sep 5 05:03:06 2026 by rpki-client