$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a825782d-c5c3-3977-9492-ed6dfd3d2323.roa File: a825782d-c5c3-3977-9492-ed6dfd3d2323.roa (raw, json) Hash identifier: 9EgV1Bh0OFZRJJyLVxYkLEfknNCtvdLScgqbVKRvWF8= Subject key identifier: C0:60:4E:DF:A2:B0:19:E7:24:A0:BD:C7:38:F5:A3:E3:C5:6F:A9:F8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234C92E9E0A48DAC096280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a825782d-c5c3-3977-9492-ed6dfd3d2323.roa Signing time: Wed 19 Aug 2026 18:03:56 +0000 ROA not before: Wed 19 Aug 2026 18:03:56 +0000 ROA not after: Fri 29 Mar 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4c:92:e9:e0:a4:8d:ac:09:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:56 2026 GMT Not After : Mar 29 04:00:00 2030 GMT Subject: CN=c7305b9d-1a57-4804-8bfb-76132177f0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:b0:af:b5:e2:f5:dd:72:00:54:2f:9b:25: d2:5c:b4:d9:23:e9:3d:5f:d7:20:9d:17:5d:1f:3e: 87:6d:6d:6c:56:c3:e2:1a:a9:05:fe:63:17:72:07: 89:2d:1c:75:b2:46:3e:30:67:64:b8:45:8c:5c:29: 9d:fe:bd:5e:9d:b6:a8:ac:cc:6f:7d:30:fc:da:46: b0:a5:d0:57:59:25:1a:18:c9:6e:73:fe:5d:c5:94: 25:e7:51:6d:37:67:0f:04:d5:9e:93:50:7f:4c:29: 13:2e:49:35:f3:e4:c1:d1:1d:5e:c4:43:f1:92:80: 0d:de:24:3b:5c:34:1c:af:36:33:5e:1d:25:c8:d9: 61:65:30:e3:3b:99:a6:4c:37:a6:3f:ec:7e:2c:cd: c0:d8:40:0e:13:6e:22:31:b3:94:20:0a:e9:59:5c: dd:87:8a:9d:76:fb:35:45:17:b3:30:bc:ae:bc:f1: e7:4f:27:1b:0e:9c:a6:6f:5b:5b:b5:9e:84:e6:6c: 78:ce:77:5f:3b:5b:dc:92:78:03:4f:c2:af:ad:b6: 68:bb:63:d6:af:7f:b2:c4:2e:1c:46:bf:be:11:c7: 73:7b:e0:c9:ce:48:d9:e7:06:cb:c7:fe:47:c6:9d: da:79:c7:6a:f0:f9:48:63:72:c7:f2:14:12:a4:31: 9e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:60:4E:DF:A2:B0:19:E7:24:A0:BD:C7:38:F5:A3:E3:C5:6F:A9:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a825782d-c5c3-3977-9492-ed6dfd3d2323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:65:63:e3:7b:81:ac:f0:84:65:30:2a:dc:80:96:89:f4:13: fa:07:ea:e8:4f:fa:46:eb:5e:1b:e0:13:08:d7:78:66:3b:ad: 55:d4:f4:2e:82:53:c0:f6:a0:64:d5:d8:02:6e:1f:35:9e:7a: f4:d1:98:9a:6e:20:9b:d8:e7:86:b8:18:cd:4c:4e:5d:48:e5: 52:b2:52:ab:21:97:b3:d2:a8:08:79:c6:12:66:96:81:ea:d4: 64:ee:41:5b:eb:e4:ff:88:3d:ab:62:b8:d3:84:0e:cb:0e:9f: 34:4d:05:31:54:d8:68:57:fd:7f:86:7a:45:59:41:ec:98:f2: 26:83:74:fa:e2:50:a0:06:90:fd:a7:6e:34:6c:b6:7e:7f:6e: 0b:47:11:9a:56:a4:ba:43:a2:1d:9e:05:cb:3e:90:45:af:6c: 15:20:08:23:40:09:8a:67:8e:e3:bd:61:af:91:08:ad:4d:d4: ea:51:21:3e:58:28:8f:29:38:e9:7c:dc:9e:11:47:b3:45:7c: 3f:4a:12:c6:08:67:63:00:3e:05:99:b0:58:d5:2c:09:31:5d: af:e3:c8:43:38:4d:e4:7d:a7:43:33:f3:57:6f:9d:ff:97:3e: 14:15:97:35:4e:8e:28:32:60:35:dd:ca:48:c2:3e:b0:34:d6: 33:09:30:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI0yS6eCkjawJYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1NloXDTMwMDMyOTA0MDAwMFowLzEtMCsGA1UEAxMk YzczMDViOWQtMWE1Ny00ODA0LThiZmItNzYxMzIxNzdmMGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBGwr7Xi9d1yAFQvmyXSXLTZI+k9X9cgnRdd Hz6HbW1sVsPiGqkF/mMXcgeJLRx1skY+MGdkuEWMXCmd/r1enbaorMxvfTD82kaw pdBXWSUaGMluc/5dxZQl51FtN2cPBNWek1B/TCkTLkk18+TB0R1exEPxkoAN3iQ7 XDQcrzYzXh0lyNlhZTDjO5mmTDemP+x+LM3A2EAOE24iMbOUIArpWVzdh4qddvs1 RRezMLyuvPHnTycbDpymb1tbtZ6E5mx4zndfO1vckngDT8KvrbZou2PWr3+yxC4c Rr++Ecdze+DJzkjZ5wbLx/5Hxp3aecdq8PlIY3LH8hQSpDGe4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBgTt+isBnnJKC9xzj1o+PFb6n4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTgyNTc4MmQtYzVjMy0z OTc3LTk0OTItZWQ2ZGZkM2QyMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFC9jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVlY+N7gazwhGUwKtyAlon0E/oH6uhP+kbrXhvgEwjXeGY7rVXU9C6C U8D2oGTV2AJuHzWeevTRmJpuIJvY54a4GM1MTl1I5VKyUqshl7PSqAh5xhJmloHq 1GTuQVvr5P+IPatiuNOEDssOnzRNBTFU2GhX/X+GekVZQeyY8iaDdPriUKAGkP2n bjRstn5/bgtHEZpWpLpDoh2eBcs+kEWvbBUgCCNACYpnjuO9Ya+RCK1N1OpRIT5Y KI8pOOl83J4RR7NFfD9KEsYIZ2MAPgWZsFjVLAkxXa/jyEM4TeR9p0Mz81dvnf+X PhQVlzVOjigyYDXdykjCPrA01jMJMP0= -----END CERTIFICATE-----Generated at Sat Sep 5 05:23:59 2026 by rpki-client