$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb2322a8-dc65-3bbe-9c5a-1a5230e1ac54.roa File: cb2322a8-dc65-3bbe-9c5a-1a5230e1ac54.roa (raw, json) Hash identifier: UbGjc1iA8B0P05LkImho+3nJHXU+REAUyam7mPpjNZY= Subject key identifier: E0:46:41:82:00:9B:7C:4F:28:2A:20:E3:8D:D2:22:8C:80:6B:3D:5D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234E2EE4B60CAEEB42F000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb2322a8-dc65-3bbe-9c5a-1a5230e1ac54.roa Signing time: Wed 19 Aug 2026 18:03:57 +0000 ROA not before: Wed 19 Aug 2026 18:03:57 +0000 ROA not after: Tue 09 Apr 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4e:2e:e4:b6:0c:ae:eb:42:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:57 2026 GMT Not After : Apr 9 04:00:00 2030 GMT Subject: CN=8d103790-f446-4b0a-b5be-94ece97d86a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:58:ed:d3:0b:ff:74:c8:1f:98:bb:df:1b:a0: 65:da:d7:e5:65:93:2d:f1:44:f7:34:6e:03:8a:45: 55:a3:b9:24:6f:d0:91:68:a6:7a:ab:6e:66:e6:0c: 98:16:80:ce:88:2e:96:1a:63:39:9c:cd:a5:8e:3a: bb:40:4c:f3:a5:44:c2:3f:5a:e5:e7:61:aa:79:8e: ef:7e:c6:b9:b0:c3:e0:00:3e:19:44:87:6e:0e:b7: 14:61:44:e8:ea:a1:d6:9f:52:cd:e7:e2:cc:c2:95: 65:8d:89:7c:d6:1a:f5:05:eb:0d:ee:51:a9:28:27: 56:c0:fd:3f:9f:4f:62:5f:27:2f:79:b0:47:f3:9b: 81:a2:3d:d3:7d:44:b6:64:2a:28:aa:7f:2d:38:04: 17:f9:6f:1d:bd:4f:78:80:52:5b:55:ed:36:5f:72: b4:dc:d5:29:74:b7:91:25:0b:11:25:22:72:c2:ca: ba:7f:59:1b:dc:c6:78:ca:3a:ef:59:d9:9e:d6:e2: 7c:7a:78:da:42:40:20:a5:0b:eb:53:6d:d7:82:ca: d6:5b:d4:12:81:de:43:f1:3e:e4:df:23:9f:d2:20: 87:41:dd:0c:01:8e:cc:f9:b7:30:eb:37:f1:4b:30: c0:e2:ed:76:8e:d4:2d:37:2e:e2:32:91:0f:12:15: a0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:46:41:82:00:9B:7C:4F:28:2A:20:E3:8D:D2:22:8C:80:6B:3D:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb2322a8-dc65-3bbe-9c5a-1a5230e1ac54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:50:48:32:1e:d0:36:3e:da:63:aa:e7:18:bd:98:cc:bb:9a: 58:69:fe:03:ae:36:41:6b:77:83:f0:10:98:83:f8:70:20:34: d3:ec:e2:db:2d:71:ca:e8:07:f4:cd:da:8e:22:02:9e:99:ec: d3:a1:c0:a9:08:10:ae:b9:c5:33:03:10:54:d0:df:7c:10:bc: c1:95:88:93:3e:50:d4:26:24:65:3e:b7:cd:77:4a:ba:c5:12: 00:ae:69:61:ff:3f:cb:6c:a3:c4:48:83:a7:36:20:d4:4e:6d: e6:ec:19:8f:07:a9:a0:30:64:81:fa:16:4c:c1:90:8e:e5:74: 0d:be:8a:87:dc:b2:b2:08:91:ab:54:94:4a:13:8f:44:8b:4d: df:a3:f7:3c:c2:17:7b:9d:16:42:33:e0:0e:6d:28:a2:0d:83: 12:64:c9:eb:0e:12:2d:88:eb:63:e8:10:b7:3c:8d:1d:37:78: da:e1:d9:69:cc:bc:33:a1:9b:92:ed:49:12:f1:d6:31:54:7f: ff:12:26:b3:d9:73:38:25:10:a2:c2:5a:e1:ea:e9:dd:d8:45: 6b:49:a5:52:dd:a9:c3:b4:90:f2:7a:f2:61:49:65:22:89:f6: 0a:0c:e0:1f:f9:d3:9c:a0:55:33:80:3c:4e:04:c1:70:c0:9d: a7:e6:9c:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI04u5LYMrutC8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1N1oXDTMwMDQwOTA0MDAwMFowLzEtMCsGA1UEAxMk OGQxMDM3OTAtZjQ0Ni00YjBhLWI1YmUtOTRlY2U5N2Q4NmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1jt0wv/dMgfmLvfG6Bl2tflZZMt8UT3NG4D ikVVo7kkb9CRaKZ6q25m5gyYFoDOiC6WGmM5nM2ljjq7QEzzpUTCP1rl52GqeY7v fsa5sMPgAD4ZRIduDrcUYUTo6qHWn1LN5+LMwpVljYl81hr1BesN7lGpKCdWwP0/ n09iXycvebBH85uBoj3TfUS2ZCooqn8tOAQX+W8dvU94gFJbVe02X3K03NUpdLeR JQsRJSJywsq6f1kb3MZ4yjrvWdme1uJ8enjaQkAgpQvrU23XgsrWW9QSgd5D8T7k 3yOf0iCHQd0MAY7M+bcw6zfxSzDA4u12jtQtNy7iMpEPEhWgowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBGQYIAm3xPKCog443SIoyAaz1dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2IyMzIyYTgtZGM2NS0z YmJlLTljNWEtMWE1MjMwZTFhYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFC8bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNQSDIe0DY+2mOq5xi9mMy7mlhp/gOuNkFrd4PwEJiD+HAgNNPs4tst ccroB/TN2o4iAp6Z7NOhwKkIEK65xTMDEFTQ33wQvMGViJM+UNQmJGU+t813SrrF EgCuaWH/P8tso8RIg6c2INRObebsGY8HqaAwZIH6FkzBkI7ldA2+iofcsrIIkatU lEoTj0SLTd+j9zzCF3udFkIz4A5tKKINgxJkyesOEi2I62PoELc8jR03eNrh2WnM vDOhm5LtSRLx1jFUf/8SJrPZczglEKLCWuHq6d3YRWtJpVLdqcO0kPJ68mFJZSKJ 9goM4B/505ygVTOAPE4EwXDAnafmnNg= -----END CERTIFICATE-----Generated at Sat Sep 5 09:40:12 2026 by rpki-client