$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c7885337-9eff-3c91-9b91-6b441a191b7f.roa File: c7885337-9eff-3c91-9b91-6b441a191b7f.roa (raw, json) Hash identifier: 0j/ltaCc9lVtPYFMLuD0rg+O36a2fvPgspZ369QsPRM= Subject key identifier: 36:D7:DF:6D:EE:CA:F9:E1:70:47:90:3A:C9:03:D1:9E:4B:92:3E:12 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235BD540015A9B417DAF40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c7885337-9eff-3c91-9b91-6b441a191b7f.roa Signing time: Wed 19 Aug 2026 18:04:04 +0000 ROA not before: Wed 19 Aug 2026 18:04:04 +0000 ROA not after: Thu 28 Mar 2030 04:00:00 +0000 asID: 8075 IP address blocks: 20.46.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5b:d5:40:01:5a:9b:41:7d:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:04 2026 GMT Not After : Mar 28 04:00:00 2030 GMT Subject: CN=e4fb658d-4f6d-4804-a29a-980e29da9357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:15:ac:c7:c0:b7:54:12:21:db:c1:ea:ba:4a: ef:26:d1:e2:3a:9f:69:b5:3b:5f:c9:93:3d:ce:d0: a7:f0:0e:db:d3:04:22:bc:68:81:26:58:89:13:5c: 71:b0:8d:76:d0:ff:c5:94:f1:e1:10:aa:1c:51:99: a0:ae:cd:2d:29:fc:51:eb:a8:05:3f:d9:48:d5:53: d1:18:68:02:4a:a5:38:2a:13:db:3b:2d:fd:dd:09: 92:34:fd:ad:10:54:26:4f:f1:a3:3a:a8:bc:08:3e: f7:81:8c:16:cb:67:8e:bd:4c:92:3c:c2:a5:6a:4b: b1:66:01:d3:83:9b:88:7e:a9:e6:44:82:28:6b:56: 21:9e:2b:ad:6f:8c:92:b2:ae:a6:86:35:cf:24:53: 5b:11:35:b1:58:c8:95:90:48:e3:40:3e:21:52:a3: 04:f0:13:f4:9e:6c:e5:8f:24:49:60:61:4d:47:fb: ca:65:98:f7:2a:41:61:1b:e0:2f:b8:81:d5:61:d0: 46:7e:ef:e8:58:77:ea:88:85:73:af:31:5a:96:95: 19:25:63:f2:c7:4a:e5:72:17:56:b4:57:c2:47:32: a2:c3:5e:90:ff:06:43:8e:70:cc:ff:4a:ad:06:21: 62:15:c3:c2:7b:0e:f4:54:cf:da:d7:94:2f:68:c7: f9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D7:DF:6D:EE:CA:F9:E1:70:47:90:3A:C9:03:D1:9E:4B:92:3E:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c7885337-9eff-3c91-9b91-6b441a191b7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.46.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:4e:cf:bd:2e:c1:0d:25:54:07:83:20:93:de:0b:a5:04:a9: 9b:e3:7e:9a:55:93:d0:3a:cf:47:a4:2e:02:1f:bd:f0:19:8c: e8:8a:0e:5b:86:7b:6f:d5:7d:e4:5f:f1:63:24:8c:09:06:35: 7f:bc:1b:9b:97:ae:5f:97:4f:03:91:63:dd:0f:f4:f4:36:0a: 8b:03:d0:4b:52:1e:24:55:a3:13:3d:4d:13:c5:e4:fe:53:e7: 19:83:a2:de:d0:b8:71:72:e4:d5:cb:26:1c:8c:0f:0a:94:bf: fd:c9:36:8c:d4:2e:9f:93:56:62:f1:74:ea:66:f0:f0:d6:34: 01:2a:dd:af:e2:db:4c:14:5b:da:81:7c:ef:04:46:81:86:33: d4:40:0d:12:b4:94:07:51:84:1c:f6:89:25:48:60:a7:8d:a1: cc:12:16:24:06:83:1e:85:dc:6e:12:69:65:1c:56:08:46:67: 65:0f:c0:4f:73:69:72:54:9b:40:e0:3f:a9:37:7a:fc:24:3c: f0:f8:60:c4:f5:bf:a3:9f:a8:5c:a2:e9:f7:aa:53:f0:d4:0a: e4:04:27:cc:c4:e9:87:12:03:89:fc:fb:7d:09:fe:1f:60:29: dc:55:9e:e4:6d:51:6a:ba:cb:d5:92:5c:22:ca:a8:21:9c:1b: 20:68:17:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1vVQAFam0F9r0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwNFoXDTMwMDMyODA0MDAwMFowLzEtMCsGA1UEAxMk ZTRmYjY1OGQtNGY2ZC00ODA0LWEyOWEtOTgwZTI5ZGE5MzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxWsx8C3VBIh28HqukrvJtHiOp9ptTtfyZM9 ztCn8A7b0wQivGiBJliJE1xxsI120P/FlPHhEKocUZmgrs0tKfxR66gFP9lI1VPR GGgCSqU4KhPbOy393QmSNP2tEFQmT/GjOqi8CD73gYwWy2eOvUySPMKlakuxZgHT g5uIfqnmRIIoa1Yhniutb4ySsq6mhjXPJFNbETWxWMiVkEjjQD4hUqME8BP0nmzl jyRJYGFNR/vKZZj3KkFhG+AvuIHVYdBGfu/oWHfqiIVzrzFalpUZJWPyx0rlchdW tFfCRzKiw16Q/wZDjnDM/0qtBiFiFcPCew70VM/a15QvaMf5HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbX323uyvnhcEeQOskD0Z5Lkj4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzc4ODUzMzctOWVmZi0z YzkxLTliOTEtNmI0NDFhMTkxYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFC7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJOz70uwQ0lVAeDIJPeC6UEqZvjfppVk9A6z0ekLgIfvfAZjOiKDluG e2/VfeRf8WMkjAkGNX+8G5uXrl+XTwORY90P9PQ2CosD0EtSHiRVoxM9TRPF5P5T 5xmDot7QuHFy5NXLJhyMDwqUv/3JNozULp+TVmLxdOpm8PDWNAEq3a/i20wUW9qB fO8ERoGGM9RADRK0lAdRhBz2iSVIYKeNocwSFiQGgx6F3G4SaWUcVghGZ2UPwE9z aXJUm0DgP6k3evwkPPD4YMT1v6OfqFyi6feqU/DUCuQEJ8zE6YcSA4n8+30J/h9g KdxVnuRtUWq6y9WSXCLKqCGcGyBoF5U= -----END CERTIFICATE-----Generated at Fri Sep 4 23:15:46 2026 by rpki-client