$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7d0642c-4175-3372-95bb-a556cfaa58dc.roa File: b7d0642c-4175-3372-95bb-a556cfaa58dc.roa (raw, json) Hash identifier: a1cweQnHD+q+9N1pZwIGhaqWQsLkb8W2oNHaRojU5xg= Subject key identifier: B9:50:89:CE:E8:33:1B:48:0F:39:A0:C3:AA:FD:ED:3F:2D:83:C1:90 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234EF3265AFFC716577D80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7d0642c-4175-3372-95bb-a556cfaa58dc.roa Signing time: Wed 19 Aug 2026 18:03:57 +0000 ROA not before: Wed 19 Aug 2026 18:03:57 +0000 ROA not after: Wed 17 Apr 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4e:f3:26:5a:ff:c7:16:57:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:57 2026 GMT Not After : Apr 17 04:00:00 2030 GMT Subject: CN=d5b14c08-b224-4c14-8d5d-deb93b55ba84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:af:d9:6b:60:ab:75:8c:e5:c6:5d:a1:90:44: de:41:a4:5b:6d:90:dd:c7:aa:c8:94:42:ec:aa:53: 8d:11:b4:fa:30:b0:e6:af:48:a2:29:c4:22:c6:af: bd:22:6a:69:98:82:7c:f4:5f:59:89:b2:28:04:01: 84:19:61:e4:02:8b:cb:a6:2a:5b:55:7a:a8:46:71: 6a:85:56:8c:83:2d:3d:b7:2b:54:95:c7:30:92:eb: 06:19:b4:63:31:e3:1e:8e:00:d9:0d:1b:68:db:93: c3:aa:d3:e9:46:4c:6b:08:fc:19:a7:f7:a0:e5:8b: 0b:8a:ab:5d:44:33:af:50:28:1b:11:d7:45:d8:b8: e2:76:4e:21:2f:22:53:2f:a8:ab:f0:d5:e6:97:cf: 56:63:0a:5b:6d:05:4a:68:d6:04:d5:9c:01:c9:95: f6:09:5f:b4:ea:41:ad:07:45:48:4b:2a:3d:97:ec: 42:0a:83:23:25:e2:20:61:53:f6:87:dd:3b:3e:e0: 69:fa:39:bf:aa:a3:a3:a5:c3:f8:2c:e1:bc:c8:03: 0b:68:33:c7:06:8d:00:94:0e:ca:42:c4:b1:ae:a9: 66:dd:ff:90:0d:24:17:87:96:4a:17:54:4c:bf:de: 08:fd:db:5d:97:71:bc:fa:ab:71:1e:24:7d:52:db: c6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:50:89:CE:E8:33:1B:48:0F:39:A0:C3:AA:FD:ED:3F:2D:83:C1:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7d0642c-4175-3372-95bb-a556cfaa58dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:6e:11:7b:81:c4:fb:e3:31:f4:3d:09:e4:39:6f:18:9b:78: dd:93:4e:0c:62:6f:de:cc:fe:fc:46:d9:59:bd:6e:74:2b:38: 04:70:79:5f:47:75:e7:6c:e8:42:46:80:32:fd:12:d2:93:4c: 17:1c:00:22:8d:b1:bc:c3:90:12:82:b1:05:2c:04:2a:00:74: 78:14:c6:85:44:89:f5:fb:10:c3:41:45:de:59:6b:65:5c:17: 6e:a2:dc:fc:9b:c0:8a:99:4f:b9:68:bb:5d:b3:80:fa:e6:80: cb:d9:e1:34:c9:5b:0e:93:05:5c:b3:8c:29:b1:e8:d7:66:4e: b2:d1:48:ff:57:a1:65:fd:18:1f:e8:a5:81:7c:91:16:58:ff: 9f:47:6a:4f:37:e3:df:fd:9e:d5:c6:ad:b5:cf:f8:f9:5c:6e: bf:6b:10:0d:23:fe:6c:85:b5:3a:51:66:e4:42:91:f8:6f:75: d9:f8:85:c3:7e:38:ae:23:b1:66:d9:36:5d:74:37:55:f3:47: b8:e4:b3:46:50:cb:09:36:8a:df:ed:b1:5c:06:ab:16:6c:57: 7a:9d:bb:f3:e6:61:28:57:bc:58:ac:5a:be:66:73:c7:a3:4d: b7:42:ff:73:46:47:0f:f8:cd:bf:1d:2e:81:d8:f3:fd:5e:94: ac:7c:57:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI07zJlr/xxZXfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1N1oXDTMwMDQxNzA0MDAwMFowLzEtMCsGA1UEAxMk ZDViMTRjMDgtYjIyNC00YzE0LThkNWQtZGViOTNiNTViYTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6/Za2CrdYzlxl2hkETeQaRbbZDdx6rIlELs qlONEbT6MLDmr0iiKcQixq+9ImppmIJ89F9ZibIoBAGEGWHkAovLpipbVXqoRnFq hVaMgy09tytUlccwkusGGbRjMeMejgDZDRto25PDqtPpRkxrCPwZp/eg5YsLiqtd RDOvUCgbEddF2Ljidk4hLyJTL6ir8NXml89WYwpbbQVKaNYE1ZwByZX2CV+06kGt B0VISyo9l+xCCoMjJeIgYVP2h907PuBp+jm/qqOjpcP4LOG8yAMLaDPHBo0AlA7K QsSxrqlm3f+QDSQXh5ZKF1RMv94I/dtdl3G8+qtxHiR9UtvG7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlQic7oMxtIDzmgw6r97T8tg8GQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjdkMDY0MmMtNDE3NS0z MzcyLTk1YmItYTU1NmNmYWE1OGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFC9CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVuEXuBxPvjMfQ9CeQ5bxibeN2TTgxib97M/vxG2Vm9bnQrOARweV9H deds6EJGgDL9EtKTTBccACKNsbzDkBKCsQUsBCoAdHgUxoVEifX7EMNBRd5Za2Vc F26i3PybwIqZT7lou12zgPrmgMvZ4TTJWw6TBVyzjCmx6NdmTrLRSP9XoWX9GB/o pYF8kRZY/59Hak8349/9ntXGrbXP+Plcbr9rEA0j/myFtTpRZuRCkfhvddn4hcN+ OK4jsWbZNl10N1XzR7jks0ZQywk2it/tsVwGqxZsV3qdu/PmYShXvFisWr5mc8ej TbdC/3NGRw/4zb8dLoHY8/1elKx8V9k= -----END CERTIFICATE-----Generated at Sat Sep 5 06:09:22 2026 by rpki-client