$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb0c7bca-91f0-3eca-8dfd-a4db365f637a.roa File: cb0c7bca-91f0-3eca-8dfd-a4db365f637a.roa (raw, json) Hash identifier: zKZIUBw4bbJfXIDjv2foyedAf+iDx+8HXGjuV5qtaDE= Subject key identifier: 2D:1A:E1:1B:90:EB:DB:D1:BE:FA:50:E4:78:97:A9:78:40:D2:9C:AB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234E5E97C7F548D92F6F40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb0c7bca-91f0-3eca-8dfd-a4db365f637a.roa Signing time: Wed 19 Aug 2026 18:03:57 +0000 ROA not before: Wed 19 Aug 2026 18:03:57 +0000 ROA not after: Mon 18 Mar 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4e:5e:97:c7:f5:48:d9:2f:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:57 2026 GMT Not After : Mar 18 04:00:00 2030 GMT Subject: CN=952ebacc-d283-45da-99d6-4a4d8d37a7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d5:aa:c7:6c:38:59:2d:a0:c2:73:1a:2d:c6: 7d:9a:b8:90:ab:96:4d:8b:f0:ae:0f:7f:96:03:5e: 76:bb:d6:ed:6d:0f:c0:57:bc:94:79:e5:3e:54:6f: 0c:70:cd:6a:3f:ea:21:44:d0:2e:d3:1c:69:a9:c2: c9:53:50:9c:fa:f2:50:b2:21:bf:40:c8:66:09:ed: ac:9d:e0:dd:3e:c4:9d:41:cc:78:3f:81:1c:0c:68: b9:68:5a:54:30:7e:bd:0b:38:e5:92:63:37:48:a8: ce:05:99:03:2b:12:66:bf:f5:3c:01:aa:94:c9:e6: c2:53:0c:fc:40:c3:b2:6a:6c:ae:09:d5:ff:67:64: 6b:4a:a3:51:c3:bd:d2:e6:49:bc:be:72:fb:90:67: 27:d5:12:d9:33:10:86:d7:53:c7:51:dc:9d:07:eb: 13:9d:c1:38:ff:8a:d5:5e:37:7c:39:76:a7:19:0f: 01:ab:33:1d:57:99:da:01:a3:07:fe:e4:ab:8f:c8: 76:da:4b:60:60:91:37:0d:0d:a6:82:3f:b5:a2:35: 1f:1a:e5:e1:2b:e5:a8:c1:4d:be:d7:3a:ce:01:0d: 4a:14:ae:b7:84:9e:d0:3f:05:7c:c4:e9:96:d6:97: c0:61:e9:2d:a3:76:11:ea:60:ad:d2:9b:8f:36:7a: f8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1A:E1:1B:90:EB:DB:D1:BE:FA:50:E4:78:97:A9:78:40:D2:9C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb0c7bca-91f0-3eca-8dfd-a4db365f637a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:1d:3e:45:eb:c0:8a:a8:b6:f7:d9:ea:f1:27:58:59:a6:88: a0:ec:88:36:9d:f2:27:69:f3:40:18:3a:dd:36:6c:6d:44:80: a5:b4:aa:e7:90:e9:bd:d3:a3:be:a5:38:9a:48:ea:25:48:73: 5d:38:14:77:80:5a:98:93:e0:ee:ed:51:ed:7f:29:f5:f6:f0: 7d:4e:7e:bd:a6:dd:64:b3:3f:94:55:6f:19:43:d4:38:e6:c2: e3:6d:ed:14:a6:92:5e:de:ba:21:c9:db:45:e1:c1:7d:ec:a9: ee:6c:aa:69:83:6a:71:f9:72:5a:59:fd:21:bb:ee:a2:15:e9: d7:52:d4:38:e4:3d:d4:49:dc:14:74:78:e2:4e:e7:06:55:3d: 1c:2b:cf:6c:a0:f4:39:44:b1:e3:ff:e7:2e:40:c2:0f:d6:64: c3:eb:15:33:e4:de:ec:1e:50:18:a3:be:e3:b7:c8:bf:05:19: 78:b4:61:7b:a7:ba:a1:db:02:f2:8b:f5:5a:32:d1:c9:d2:fe: 84:43:5d:65:ba:ee:ab:04:ce:41:29:d2:f9:34:69:f8:fc:fc: 1d:25:5e:a5:04:a3:07:b7:66:7d:70:17:dd:a2:2c:4b:1a:1b: 8b:84:7a:a8:cd:49:b8:22:a6:c7:b6:e7:f2:5d:5e:1e:b6:d5: 90:eb:24:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI05el8f1SNkvb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1N1oXDTMwMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk OTUyZWJhY2MtZDI4My00NWRhLTk5ZDYtNGE0ZDhkMzdhN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9Wqx2w4WS2gwnMaLcZ9mriQq5ZNi/CuD3+W A152u9btbQ/AV7yUeeU+VG8McM1qP+ohRNAu0xxpqcLJU1Cc+vJQsiG/QMhmCe2s neDdPsSdQcx4P4EcDGi5aFpUMH69CzjlkmM3SKjOBZkDKxJmv/U8AaqUyebCUwz8 QMOyamyuCdX/Z2RrSqNRw73S5km8vnL7kGcn1RLZMxCG11PHUdydB+sTncE4/4rV Xjd8OXanGQ8BqzMdV5naAaMH/uSrj8h22ktgYJE3DQ2mgj+1ojUfGuXhK+WowU2+ 1zrOAQ1KFK63hJ7QPwV8xOmW1pfAYekto3YR6mCt0puPNnr4WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0a4RuQ69vRvvpQ5HiXqXhA0pyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2IwYzdiY2EtOTFmMC0z ZWNhLThkZmQtYTRkYjM2NWY2MzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFC8cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADodPkXrwIqotvfZ6vEnWFmmiKDsiDad8idp80AYOt02bG1EgKW0queQ 6b3To76lOJpI6iVIc104FHeAWpiT4O7tUe1/KfX28H1Ofr2m3WSzP5RVbxlD1Djm wuNt7RSmkl7euiHJ20XhwX3sqe5sqmmDanH5clpZ/SG77qIV6ddS1DjkPdRJ3BR0 eOJO5wZVPRwrz2yg9DlEseP/5y5Awg/WZMPrFTPk3uweUBijvuO3yL8FGXi0YXun uqHbAvKL9Voy0cnS/oRDXWW67qsEzkEp0vk0afj8/B0lXqUEowe3Zn1wF92iLEsa G4uEeqjNSbgipse25/JdXh621ZDrJI8= -----END CERTIFICATE-----Generated at Sat Sep 5 06:03:19 2026 by rpki-client