$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a1368c8-4c53-37eb-9948-6fc61633a959.roa File: 9a1368c8-4c53-37eb-9948-6fc61633a959.roa (raw, json) Hash identifier: 8eVkym36X1TgxQPg7YVBGeZVkEUw3Yk+2PH8P5NMuGM= Subject key identifier: D3:E8:0C:82:79:71:A7:0D:99:DD:C5:83:CB:6B:E8:EB:84:E1:08:F7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234BFF75F1CB64302AAA00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a1368c8-4c53-37eb-9948-6fc61633a959.roa Signing time: Wed 19 Aug 2026 18:03:56 +0000 ROA not before: Wed 19 Aug 2026 18:03:56 +0000 ROA not after: Mon 25 Mar 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4b:ff:75:f1:cb:64:30:2a:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:56 2026 GMT Not After : Mar 25 04:00:00 2030 GMT Subject: CN=1e94a70d-6ea8-42b6-9825-d8fdede94c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:57:67:c1:c4:ae:5d:8e:8f:aa:d9:3d:8e:7a: 24:39:7d:08:cd:7b:57:4a:ea:09:d3:f8:69:97:f8: b4:fe:b1:45:cf:22:d2:cb:c9:57:41:ef:87:7c:fe: 6c:b0:3a:b6:5a:3a:b1:d5:0a:7d:3a:43:0b:da:03: c4:cc:02:35:b3:60:cc:3e:13:4e:96:00:fd:13:9c: f9:4a:72:34:40:8c:31:6b:79:e4:70:9c:d6:8c:ee: f9:52:f9:7a:6c:22:aa:ad:65:29:0c:b1:ec:e6:c6: 3c:62:c2:f7:4c:66:2b:1d:b6:0f:df:9a:13:f3:9b: da:ea:a1:34:ea:da:4e:88:00:b9:0e:06:ae:6e:99: 66:88:89:21:59:15:76:83:90:e9:19:e9:22:8a:b3: 3b:16:fa:42:bd:8d:6a:cb:a4:07:2d:07:4e:08:f0: 5a:44:ed:d6:66:ca:b4:a4:b3:94:46:e3:d7:a4:41: d3:4d:a2:63:04:10:f0:11:bc:a7:c8:13:40:ac:34: 78:8e:2f:c1:33:d8:a1:a7:0e:26:2d:76:8d:fe:cc: aa:f6:1e:63:91:79:2d:2a:75:17:c6:3d:94:c4:36: bd:4d:84:9b:37:65:36:43:e4:63:ca:e1:e3:2d:5b: da:e6:62:2a:66:ac:71:3a:2b:c2:c6:b1:da:c7:3c: d2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E8:0C:82:79:71:A7:0D:99:DD:C5:83:CB:6B:E8:EB:84:E1:08:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a1368c8-4c53-37eb-9948-6fc61633a959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:80:d7:34:eb:27:0e:49:31:70:cb:8c:4f:cc:72:2e:31:d4: bc:4c:f3:11:9c:77:6a:f9:47:a0:61:42:76:c4:a5:8c:7d:38: a3:c8:dc:63:4f:fe:ae:24:f0:2b:01:cb:a2:53:c4:dc:d0:f5: 80:5c:b9:ef:f0:9b:c0:4e:b2:7f:cc:be:99:b1:aa:05:54:85: 56:46:db:08:75:9d:1c:2b:60:db:6c:74:b0:e7:e1:ec:59:e7: 90:2f:d5:fb:48:d3:08:04:03:3d:66:70:e8:cb:d8:35:84:d9: b7:8c:a7:95:dd:28:8f:47:c9:14:98:44:7f:d8:b3:80:6c:07: 12:17:40:87:6e:0b:77:4d:5e:9b:73:41:35:6a:0d:da:db:96: 55:fa:48:ec:23:96:f9:58:ff:6d:73:51:3b:b9:35:76:f6:cc: a6:4f:55:51:a1:ed:b2:33:ca:32:dd:db:34:02:2a:d0:cb:e7: e1:36:98:a8:b8:c4:15:20:c5:eb:9e:65:0b:95:b6:74:0f:d7: b2:81:7a:9e:dc:53:7e:e6:b3:ef:3e:ff:b0:33:b3:13:f0:cb: 24:5a:e7:d8:f4:a6:ee:a0:70:93:b0:16:d6:92:9d:01:99:79: 84:b9:af:cf:3b:40:50:14:fb:28:58:f4:81:3f:11:c0:73:58: 5a:89:f1:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI0v/dfHLZDAqqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1NloXDTMwMDMyNTA0MDAwMFowLzEtMCsGA1UEAxMk MWU5NGE3MGQtNmVhOC00MmI2LTk4MjUtZDhmZGVkZTk0Yzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVdnwcSuXY6Pqtk9jnokOX0IzXtXSuoJ0/hp l/i0/rFFzyLSy8lXQe+HfP5ssDq2Wjqx1Qp9OkML2gPEzAI1s2DMPhNOlgD9E5z5 SnI0QIwxa3nkcJzWjO75Uvl6bCKqrWUpDLHs5sY8YsL3TGYrHbYP35oT85va6qE0 6tpOiAC5DgaubplmiIkhWRV2g5DpGekiirM7FvpCvY1qy6QHLQdOCPBaRO3WZsq0 pLOURuPXpEHTTaJjBBDwEbynyBNArDR4ji/BM9ihpw4mLXaN/syq9h5jkXktKnUX xj2UxDa9TYSbN2U2Q+RjyuHjLVva5mIqZqxxOivCxrHaxzzS0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPoDIJ5cacNmd3Fg8tr6OuE4Qj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWExMzY4YzgtNGM1My0z N2ViLTk5NDgtNmZjNjE2MzNhOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFC8SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuA1zTrJw5JMXDLjE/Mci4x1LxM8xGcd2r5R6BhQnbEpYx9OKPI3GNP /q4k8CsBy6JTxNzQ9YBcue/wm8BOsn/MvpmxqgVUhVZG2wh1nRwrYNtsdLDn4exZ 55Av1ftI0wgEAz1mcOjL2DWE2beMp5XdKI9HyRSYRH/Ys4BsBxIXQIduC3dNXptz QTVqDdrbllX6SOwjlvlY/21zUTu5NXb2zKZPVVGh7bIzyjLd2zQCKtDL5+E2mKi4 xBUgxeueZQuVtnQP17KBep7cU37ms+8+/7AzsxPwyyRa59j0pu6gcJOwFtaSnQGZ eYS5r887QFAU+yhY9IE/EcBzWFqJ8ZU= -----END CERTIFICATE-----Generated at Sat Sep 5 05:25:08 2026 by rpki-client