$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cc9d9533-1f24-334b-914a-a59e712c4fd8.roa File: cc9d9533-1f24-334b-914a-a59e712c4fd8.roa (raw, json) Hash identifier: EYr0EQ7p0eGsii00a7NbwOQ3MhME1Pkv1NzmUQMpBUM= Subject key identifier: A0:66:F6:A7:F3:51:3D:41:93:13:6C:EF:FE:87:72:C2:96:24:16:03 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE423583BB59156743081EE80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cc9d9533-1f24-334b-914a-a59e712c4fd8.roa Signing time: Wed 19 Aug 2026 18:04:02 +0000 ROA not before: Wed 19 Aug 2026 18:04:02 +0000 ROA not after: Tue 12 Mar 2030 04:00:00 +0000 asID: 8075 IP address blocks: 20.143.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:58:3b:b5:91:56:74:30:81:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:02 2026 GMT Not After : Mar 12 04:00:00 2030 GMT Subject: CN=697925aa-dc76-47b9-b8b9-7f89f003dbd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:75:c2:f3:17:69:51:d7:3a:84:5a:e8:6b: 68:37:ed:04:e4:09:96:90:38:d7:b2:0f:84:d8:3f: cd:cb:1b:ad:08:7d:1c:ab:f1:2c:52:62:36:01:85: 82:5d:69:fe:90:fc:e9:05:41:7e:33:c2:b6:c3:50: 4e:38:4f:5d:ca:38:24:e1:0f:05:f2:c0:22:10:0e: c6:0c:45:3b:6d:bf:82:1a:95:97:18:21:9d:dd:fc: 4c:01:fa:f5:09:77:9f:02:2b:6a:4a:cd:8c:1c:26: 19:86:6d:8e:1b:84:74:09:de:4a:a6:b4:05:20:5e: 32:8d:7a:0d:49:18:9a:39:69:23:60:55:a8:c1:76: ee:88:b3:9c:5f:b7:50:8f:8c:b0:58:25:1f:a8:18: 8b:1e:1c:99:98:74:df:ca:7f:c9:6c:79:44:51:af: 36:2c:ae:dc:3f:c1:c4:f8:95:54:99:e5:0e:94:07: 24:3b:da:17:44:42:18:37:75:ad:e5:78:f3:93:bc: eb:41:37:ce:57:4a:5c:4b:2f:90:30:9d:0d:93:61: 9d:3d:c0:c1:cd:b2:5e:5c:db:e4:af:1e:af:4e:f5: 0d:c6:09:86:ff:03:5a:e8:72:07:ea:33:e8:57:d5: 4d:24:c0:27:b0:64:95:1c:7a:10:ca:34:ae:c0:8f: 34:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:66:F6:A7:F3:51:3D:41:93:13:6C:EF:FE:87:72:C2:96:24:16:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cc9d9533-1f24-334b-914a-a59e712c4fd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.143.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:57:35:d1:b2:50:49:b0:f2:cf:70:3e:09:b9:19:9e:b6:70: 9a:26:10:ef:e1:27:4f:0d:29:39:e3:3b:3e:ec:ae:43:d0:d0: 2b:53:ae:42:39:1c:19:d4:58:a8:1e:68:7f:5a:bc:bc:66:5b: 0c:d9:8c:a0:a8:d2:f9:f7:82:03:dd:59:00:2f:4c:b7:b6:36: f8:57:5c:b0:6e:f8:0a:b5:d0:4a:fd:6a:cb:7c:00:0b:c7:6a: cb:3f:bd:1b:b0:32:87:f3:af:45:e9:3a:57:e6:42:7c:e1:56: 4b:6e:6b:3d:4e:4c:89:94:3a:5d:72:df:d7:b1:e1:3e:23:b8: a5:29:1d:3d:66:bf:42:30:62:e5:5a:47:1a:b9:b5:4a:4e:d2: 6d:97:b7:29:c5:c6:52:cd:d0:ed:80:69:92:d8:c9:0a:f0:fb: 13:b2:4e:0d:d7:5e:c3:c2:a0:d6:e4:f4:e7:87:40:44:f4:57: 7f:49:82:00:e7:29:22:58:71:2e:27:42:b5:67:da:b3:ae:60: 5d:6c:16:02:c0:7d:da:bb:2b:ea:7e:e8:b0:9e:5e:49:c3:96: 9a:86:f3:be:50:14:66:97:a3:39:c0:49:e9:1c:7d:f1:72:08: 8d:b4:6d:ae:74:d7:b3:98:b6:dc:38:a7:d2:19:d3:3b:06:14: 2d:e6:4f:1b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI1g7tZFWdDCB7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMloXDTMwMDMxMjA0MDAwMFowLzEtMCsGA1UEAxMk Njk3OTI1YWEtZGM3Ni00N2I5LWI4YjktN2Y4OWYwMDNkYmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmN1wvMXaVHXOoRa6GtoN+0E5AmWkDjXsg+E 2D/NyxutCH0cq/EsUmI2AYWCXWn+kPzpBUF+M8K2w1BOOE9dyjgk4Q8F8sAiEA7G DEU7bb+CGpWXGCGd3fxMAfr1CXefAitqSs2MHCYZhm2OG4R0Cd5KprQFIF4yjXoN SRiaOWkjYFWowXbuiLOcX7dQj4ywWCUfqBiLHhyZmHTfyn/JbHlEUa82LK7cP8HE +JVUmeUOlAckO9oXREIYN3Wt5Xjzk7zrQTfOV0pcSy+QMJ0Nk2GdPcDBzbJeXNvk rx6vTvUNxgmG/wNa6HIH6jPoV9VNJMAnsGSVHHoQyjSuwI800wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKBm9qfzUT1BkxNs7/6HcsKWJBYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2M5ZDk1MzMtMWYyNC0z MzRiLTkxNGEtYTU5ZTcxMmM0ZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAFI8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGVc10bJQSbDyz3A+CbkZnrZwmiYQ7+EnTw0pOeM7PuyuQ9DQK1OuQjkc GdRYqB5of1q8vGZbDNmMoKjS+feCA91ZAC9Mt7Y2+FdcsG74CrXQSv1qy3wAC8dq yz+9G7Ayh/OvRek6V+ZCfOFWS25rPU5MiZQ6XXLf17HhPiO4pSkdPWa/QjBi5VpH Grm1Sk7SbZe3KcXGUs3Q7YBpktjJCvD7E7JODddew8Kg1uT054dARPRXf0mCAOcp IlhxLidCtWfas65gXWwWAsB92rsr6n7osJ5eScOWmobzvlAUZpejOcBJ6Rx98XII jbRtrnTXs5i23Din0hnTOwYULeZPGw== -----END CERTIFICATE-----Generated at Sat Sep 5 05:00:00 2026 by rpki-client