$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8505327e-b619-3d32-9c70-9748dbe3070c.roa File: 8505327e-b619-3d32-9c70-9748dbe3070c.roa (raw, json) Hash identifier: pDKM9xl3o8kJdT0iNdQyjyjMOeRzpwUVLAHG1Gyn6fI= Subject key identifier: DF:9D:EC:19:84:B6:4B:DF:61:C3:CB:6D:77:92:10:8C:5B:4A:FE:23 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE42358304CE1E6ED61D82E40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8505327e-b619-3d32-9c70-9748dbe3070c.roa Signing time: Wed 19 Aug 2026 18:04:02 +0000 ROA not before: Wed 19 Aug 2026 18:04:02 +0000 ROA not after: Wed 13 Mar 2030 04:00:00 +0000 asID: 8075 IP address blocks: 20.136.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:58:30:4c:e1:e6:ed:61:d8:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:02 2026 GMT Not After : Mar 13 04:00:00 2030 GMT Subject: CN=a0588d15-da9a-4649-ba55-5ba214d26e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:42:25:f1:e5:e4:7c:eb:eb:f2:b9:0a:d5:4a: 8c:3f:c1:9f:58:dc:4c:03:b5:8f:c9:91:8a:e6:58: 08:16:a7:46:38:e2:8c:ae:cc:4a:f2:68:d1:54:9f: e8:5d:fb:16:3c:fd:cd:58:be:47:1d:dd:d9:a9:76: 43:8a:6f:a7:96:75:b6:be:10:3a:33:f9:b1:40:6b: 05:77:73:90:22:3b:2b:75:47:a0:f3:13:db:6d:cb: dc:c0:1e:1f:c5:ca:1f:ce:c5:dd:0f:57:6c:88:cc: de:22:99:99:4c:04:b3:09:d8:2c:01:7d:46:ec:0e: 5e:26:19:61:5b:d6:fe:74:6b:2c:63:54:34:a2:c4: 5f:c3:84:9e:72:d4:54:05:06:2e:bd:2f:e3:05:64: f8:b5:fc:4a:f7:b4:61:dc:1c:73:3e:29:1d:17:4a: 70:84:60:70:be:e7:80:2a:20:16:d5:c3:9c:78:6d: 60:37:01:61:17:55:dd:40:aa:ce:0e:3f:5c:f2:bb: d6:2f:86:fb:68:75:20:a7:cd:47:89:51:f0:17:30: 30:8a:59:28:a9:c7:15:62:24:f8:cd:a7:ce:48:fc: c4:ce:17:93:37:de:6d:2e:db:b8:e5:21:4d:ce:e9: be:a7:6f:3b:15:3b:f2:1f:5c:f4:b9:3e:04:2a:9a: fd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9D:EC:19:84:B6:4B:DF:61:C3:CB:6D:77:92:10:8C:5B:4A:FE:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8505327e-b619-3d32-9c70-9748dbe3070c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.136.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:04:65:99:be:65:23:07:d7:e7:9b:b2:66:8b:7b:45:2e:2d: 72:22:98:45:51:5a:00:c9:61:6e:9d:fd:6e:85:3b:41:f0:27: b9:e4:0e:bf:4f:c6:bb:d2:fa:1b:c4:d0:e0:e5:97:53:b2:51: b4:31:68:19:87:f8:a8:db:71:25:4d:6c:48:23:3e:a2:3a:60: 9c:aa:06:44:cf:d6:da:0d:32:f0:fc:7c:5a:b2:a7:de:4e:fa: b2:10:94:64:71:d7:74:8e:8b:bc:46:b2:d9:ca:a7:db:c4:29: c8:ee:90:76:f2:af:98:0d:e1:ae:1f:e6:d6:a8:75:fd:87:46: dd:f8:4d:d2:4e:5d:10:db:da:92:d7:44:4b:81:51:87:d4:ad: ca:b7:56:e5:5f:55:44:d4:cb:82:c1:7f:b6:bf:dd:e6:bd:0e: d2:4c:1a:cc:85:af:89:8a:82:5a:c8:13:6e:9f:f5:db:0e:82: a7:b1:8d:66:12:a3:51:1e:c3:d4:b0:bb:67:53:73:4d:12:e3: b7:e1:a6:50:d7:3e:32:3b:e9:ed:88:e5:4f:7a:c0:4f:f3:22: 02:5a:87:8e:5b:6b:92:b7:52:73:a7:c1:c8:cf:69:2e:09:92: ef:a4:d5:9e:f5:d1:76:79:d2:d8:fe:b1:28:ca:f5:ed:52:b8: 72:6a:97:2c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI1gwTOHm7WHYLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMloXDTMwMDMxMzA0MDAwMFowLzEtMCsGA1UEAxMk YTA1ODhkMTUtZGE5YS00NjQ5LWJhNTUtNWJhMjE0ZDI2ZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0Il8eXkfOvr8rkK1UqMP8GfWNxMA7WPyZGK 5lgIFqdGOOKMrsxK8mjRVJ/oXfsWPP3NWL5HHd3ZqXZDim+nlnW2vhA6M/mxQGsF d3OQIjsrdUeg8xPbbcvcwB4fxcofzsXdD1dsiMzeIpmZTASzCdgsAX1G7A5eJhlh W9b+dGssY1Q0osRfw4SectRUBQYuvS/jBWT4tfxK97Rh3BxzPikdF0pwhGBwvueA KiAW1cOceG1gNwFhF1XdQKrODj9c8rvWL4b7aHUgp81HiVHwFzAwilkoqccVYiT4 zafOSPzEzheTN95tLtu45SFNzum+p287FTvyH1z0uT4EKpr9yQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFN+d7BmEtkvfYcPLbXeSEIxbSv4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODUwNTMyN2UtYjYxOS0z ZDMyLTljNzAtOTc0OGRiZTMwNzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAFIgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgQRlmb5lIwfX55uyZot7RS4tciKYRVFaAMlhbp39boU7QfAnueQOv0/G u9L6G8TQ4OWXU7JRtDFoGYf4qNtxJU1sSCM+ojpgnKoGRM/W2g0y8Px8WrKn3k76 shCUZHHXdI6LvEay2cqn28QpyO6QdvKvmA3hrh/m1qh1/YdG3fhN0k5dENvaktdE S4FRh9StyrdW5V9VRNTLgsF/tr/d5r0O0kwazIWviYqCWsgTbp/12w6Cp7GNZhKj UR7D1LC7Z1NzTRLjt+GmUNc+Mjvp7YjlT3rAT/MiAlqHjltrkrdSc6fByM9pLgmS 76TVnvXRdnnS2P6xKMr17VK4cmqXLA== -----END CERTIFICATE-----Generated at Fri Sep 4 22:31:15 2026 by rpki-client