$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ae65cd1d-2e95-3391-87df-c9aacea43ada.roa File: ae65cd1d-2e95-3391-87df-c9aacea43ada.roa (raw, json) Hash identifier: hDcNxb06Juk2OXzrMy7embjDeXLpEftRN0rRpl1MoXg= Subject key identifier: F9:BB:31:62:77:A1:F8:8B:CF:33:AF:D3:BC:A8:91:11:0F:DB:D2:19 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE42358A2B1E3D56780344600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ae65cd1d-2e95-3391-87df-c9aacea43ada.roa Signing time: Wed 19 Aug 2026 18:04:02 +0000 ROA not before: Wed 19 Aug 2026 18:04:02 +0000 ROA not after: Wed 10 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 20.64.0.0/10 maxlen: 10 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:58:a2:b1:e3:d5:67:80:34:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:02 2026 GMT Not After : Apr 10 04:00:00 2030 GMT Subject: CN=07469e76-f150-47e9-b7ca-410460235e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e6:37:1c:a7:1e:82:47:97:21:c7:e5:31:53: a9:bd:60:24:d0:5c:7f:83:eb:88:ed:17:e3:02:e4: fe:5c:78:09:d8:8d:64:c4:79:c4:e2:2a:39:2b:d7: 91:6a:15:43:49:f3:4d:ac:36:ac:9a:7e:70:22:46: 93:ee:1b:28:63:78:87:0a:23:52:c6:fa:de:b4:80: 72:bb:97:12:5b:73:d1:31:59:df:6a:65:f6:2b:37: 3c:08:46:a5:1a:9f:c3:b5:75:33:0c:ba:1a:6c:5e: a2:24:dd:aa:6c:11:6f:d9:38:94:92:07:47:e7:8f: d7:30:18:50:91:75:b4:3b:d2:39:a8:1c:e2:21:ee: 65:03:20:ac:c9:26:f3:19:a1:02:4f:47:af:3f:5d: ef:cd:af:34:27:7f:5a:f7:af:6c:24:cc:0f:37:fc: 0d:e9:9b:96:22:f9:ba:16:31:b4:74:86:6a:1e:da: a6:80:77:09:11:06:8c:86:1d:6a:d2:87:40:79:50: 6f:fd:61:6b:53:18:e4:8d:32:70:78:2f:14:23:e3: fb:ea:63:a6:08:98:47:83:c2:c7:db:29:0e:7f:e5: 1b:19:c0:eb:eb:fa:ee:98:2b:23:5e:4d:4a:5e:bf: ea:a2:5a:23:44:bd:60:2e:fb:42:58:48:77:65:b6: db:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BB:31:62:77:A1:F8:8B:CF:33:AF:D3:BC:A8:91:11:0F:DB:D2:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ae65cd1d-2e95-3391-87df-c9aacea43ada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.64.0.0/10 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e1:3d:3c:fd:13:1e:1b:ea:cc:ff:74:2f:20:4d:0c:e5:08: 12:27:78:63:b4:5c:37:97:7e:a6:87:5d:81:ed:d5:15:b6:b0: a9:a5:6e:0f:82:93:35:71:d3:88:7c:3a:48:33:0d:b2:0c:39: 15:03:e2:9f:0b:43:89:55:dc:78:84:0f:d7:c7:d4:94:f1:73: e4:97:15:70:bc:15:07:ed:63:ad:eb:c6:62:81:ba:3b:82:bf: 89:0d:10:85:22:de:8a:5d:e6:e3:95:79:7a:34:d4:db:07:60: 2a:ff:93:1e:6c:41:fe:26:39:99:36:4d:3f:1d:04:6a:c7:55: 08:45:40:5f:41:3c:1e:25:7c:35:5f:6a:cc:08:2b:da:36:ab: 94:57:6f:fd:e4:0a:53:30:9a:21:e7:70:a7:ee:4a:98:32:26: 1b:c4:81:be:3f:0f:3d:b4:05:7c:b6:ac:8c:b0:b3:42:24:58: 71:73:36:49:e6:89:f5:57:be:54:8d:f0:66:e7:c1:0a:c8:ad: 9c:53:b1:29:15:6d:d8:ce:67:0e:cf:15:4b:23:50:78:9c:47: 35:a5:8d:9a:f3:2c:2f:cf:9d:2f:f2:43:b7:dc:4d:68:0f:58: 9f:b7:d9:61:b1:a3:5b:71:67:fc:68:09:4f:6f:b1:78:24:2c: 6d:6b:ad:aa -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI1iisePVZ4A0RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMloXDTMwMDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk MDc0NjllNzYtZjE1MC00N2U5LWI3Y2EtNDEwNDYwMjM1ZTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOY3HKcegkeXIcflMVOpvWAk0Fx/g+uI7Rfj AuT+XHgJ2I1kxHnE4io5K9eRahVDSfNNrDasmn5wIkaT7hsoY3iHCiNSxvretIBy u5cSW3PRMVnfamX2Kzc8CEalGp/DtXUzDLoabF6iJN2qbBFv2TiUkgdH54/XMBhQ kXW0O9I5qBziIe5lAyCsySbzGaECT0evP13vza80J39a969sJMwPN/wN6ZuWIvm6 FjG0dIZqHtqmgHcJEQaMhh1q0odAeVBv/WFrUxjkjTJweC8UI+P76mOmCJhHg8LH 2ykOf+UbGcDr6/rumCsjXk1KXr/qolojRL1gLvtCWEh3ZbbbjwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPm7MWJ3ofiLzzOv07yokREP29IZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWU2NWNkMWQtMmU5NS0z MzkxLTg3ZGYtYzlhYWNlYTQzYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMGFEAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAiuE9PP0THhvqzP90LyBNDOUIEid4Y7RcN5d+poddge3VFbawqaVuD4KT NXHTiHw6SDMNsgw5FQPinwtDiVXceIQP18fUlPFz5JcVcLwVB+1jrevGYoG6O4K/ iQ0QhSLeil3m45V5ejTU2wdgKv+THmxB/iY5mTZNPx0EasdVCEVAX0E8HiV8NV9q zAgr2jarlFdv/eQKUzCaIedwp+5KmDImG8SBvj8PPbQFfLasjLCzQiRYcXM2SeaJ 9Ve+VI3wZufBCsitnFOxKRVt2M5nDs8VSyNQeJxHNaWNmvMsL8+dL/JDt9xNaA9Y n7fZYbGjW3Fn/GgJT2+xeCQsbWutqg== -----END CERTIFICATE-----Generated at Sat Sep 5 03:54:47 2026 by rpki-client