$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8847526f-0c25-3b3f-9ebc-906b64eb9a6f.roa File: 8847526f-0c25-3b3f-9ebc-906b64eb9a6f.roa (raw, json) Hash identifier: l+bj05OS3bIRsT97i0pSuSwbhZ9hVmHl2UTMW8F8XcQ= Subject key identifier: E4:E6:96:B7:19:9C:67:1A:9B:06:10:97:29:FF:C7:24:59:3C:22:5B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234D3E2E180BE6692FE800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8847526f-0c25-3b3f-9ebc-906b64eb9a6f.roa Signing time: Wed 19 Aug 2026 18:03:57 +0000 ROA not before: Wed 19 Aug 2026 18:03:57 +0000 ROA not after: Wed 03 Apr 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4d:3e:2e:18:0b:e6:69:2f:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:57 2026 GMT Not After : Apr 3 04:00:00 2030 GMT Subject: CN=c9d2d394-fe1f-4a9d-81c9-8e214d0b8366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:05:4c:0d:06:f1:75:3d:d5:90:2b:2f:99:25: 5c:b7:34:fc:23:b4:69:33:97:5e:fe:11:76:e8:3e: 75:08:74:71:88:32:d9:58:91:16:1b:d2:d6:8a:46: f6:2f:29:7e:5e:4d:55:62:7c:a0:7d:46:30:88:67: 91:73:40:bd:40:04:66:23:4a:cc:42:15:87:70:56: 63:9e:90:76:a4:f5:27:44:c7:d2:2b:3e:54:49:78: 11:e0:c5:3a:a0:81:09:56:54:63:00:5c:9f:40:87: b1:25:18:4c:79:87:5d:d4:f4:51:1b:ed:7f:66:2b: 3d:1c:8d:44:88:40:97:54:ca:a2:94:76:d6:85:e8: df:d6:70:74:2e:8e:fd:7e:a7:b4:bc:e7:81:ce:f2: 91:0e:22:7f:cc:91:01:78:fa:87:b7:b5:9c:73:ba: 01:f8:f6:09:e5:fe:ab:3a:e9:34:47:f2:b2:57:49: 10:44:b9:20:e7:79:fd:4e:63:13:0c:38:f1:60:35: 10:5e:ba:62:cd:4a:b1:db:7e:de:c2:28:ef:77:d6: b9:ce:5f:08:06:16:3c:56:84:5c:f0:64:5e:bc:21: de:38:48:48:f5:cf:5f:9f:66:69:83:5b:4c:72:7c: f6:c4:7e:57:d4:a1:99:bb:d2:2a:95:1a:ba:33:d0: bb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E6:96:B7:19:9C:67:1A:9B:06:10:97:29:FF:C7:24:59:3C:22:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8847526f-0c25-3b3f-9ebc-906b64eb9a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:b4:ea:76:7b:7e:2f:74:b7:a5:80:16:f2:ec:3c:e6:ef:ae: c6:6f:4c:1d:cc:95:7c:eb:e0:e4:15:ee:31:56:30:fc:a3:63: 51:9a:81:a9:6b:c2:3e:8c:6f:91:99:bb:70:0f:8d:e9:29:e9: 2c:a1:a6:0c:fd:0b:31:71:30:5c:6e:37:89:32:d6:e5:1d:fb: 3e:a7:b5:fd:2b:33:ae:4d:66:1a:76:b2:ca:d6:9c:ca:57:20: a9:56:13:28:c7:7e:ef:e6:c6:c2:b6:49:c4:f2:5a:0e:01:34: 5b:05:24:b2:b0:68:d8:f6:fc:3c:f5:f3:88:c5:b2:41:50:03: da:4e:14:d1:0c:3d:03:7b:ba:4c:86:51:ee:69:96:13:61:f1: b1:1b:25:42:b5:85:a8:7f:7d:0a:ce:0c:38:ba:82:76:45:c6: fa:15:66:08:82:b3:25:ba:2a:23:26:0e:45:2c:fd:c9:3e:69: 68:58:8d:87:fa:0c:55:0f:af:fd:5e:f5:8a:bf:d6:d0:96:5e: 92:7f:a4:47:6d:9b:07:c5:01:e6:62:01:41:cb:f6:62:8a:82: a2:98:a5:52:93:49:1a:2c:05:92:9a:c8:51:ab:f4:8f:a0:b0: 0c:f5:0a:85:1f:07:d3:8f:b4:c7:f5:90:e0:43:70:fd:5e:4b: a8:83:8b:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI00+LhgL5mkv6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1N1oXDTMwMDQwMzA0MDAwMFowLzEtMCsGA1UEAxMk YzlkMmQzOTQtZmUxZi00YTlkLTgxYzktOGUyMTRkMGI4MzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwVMDQbxdT3VkCsvmSVctzT8I7RpM5de/hF2 6D51CHRxiDLZWJEWG9LWikb2Lyl+Xk1VYnygfUYwiGeRc0C9QARmI0rMQhWHcFZj npB2pPUnRMfSKz5USXgR4MU6oIEJVlRjAFyfQIexJRhMeYdd1PRRG+1/Zis9HI1E iECXVMqilHbWhejf1nB0Lo79fqe0vOeBzvKRDiJ/zJEBePqHt7Wcc7oB+PYJ5f6r Ouk0R/KyV0kQRLkg53n9TmMTDDjxYDUQXrpizUqx237ewijvd9a5zl8IBhY8VoRc 8GRevCHeOEhI9c9fn2Zpg1tMcnz2xH5X1KGZu9IqlRq6M9C72wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTmlrcZnGcamwYQlyn/xyRZPCJbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODg0NzUyNmYtMGMyNS0z YjNmLTllYmMtOTA2YjY0ZWI5YTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFC8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABa06nZ7fi90t6WAFvLsPObvrsZvTB3MlXzr4OQV7jFWMPyjY1Gagalr wj6Mb5GZu3APjekp6Syhpgz9CzFxMFxuN4ky1uUd+z6ntf0rM65NZhp2ssrWnMpX IKlWEyjHfu/mxsK2ScTyWg4BNFsFJLKwaNj2/Dz184jFskFQA9pOFNEMPQN7ukyG Ue5plhNh8bEbJUK1hah/fQrODDi6gnZFxvoVZgiCsyW6KiMmDkUs/ck+aWhYjYf6 DFUPr/1e9Yq/1tCWXpJ/pEdtmwfFAeZiAUHL9mKKgqKYpVKTSRosBZKayFGr9I+g sAz1CoUfB9OPtMf1kOBDcP1eS6iDi0I= -----END CERTIFICATE-----Generated at Sat Sep 5 06:46:15 2026 by rpki-client