$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd9c2fd4-aa22-3133-9309-726ee0e3e373.roa File: cd9c2fd4-aa22-3133-9309-726ee0e3e373.roa (raw, json) Hash identifier: 6dAa25UrwoL1wjFPsRX9+B2qPWrPTeFJT1Ab8dlBG14= Subject key identifier: A4:80:E1:CC:BE:89:B9:E5:A5:6B:E3:A4:89:6A:6D:D4:1C:04:16:61 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234DEA0C43F59D82794080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd9c2fd4-aa22-3133-9309-726ee0e3e373.roa Signing time: Wed 19 Aug 2026 18:03:57 +0000 ROA not before: Wed 19 Aug 2026 18:03:57 +0000 ROA not after: Tue 05 Mar 2030 05:00:00 +0000 asID: 8069 IP address blocks: 20.47.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4d:ea:0c:43:f5:9d:82:79:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:57 2026 GMT Not After : Mar 5 05:00:00 2030 GMT Subject: CN=3bf7abc7-80f1-435d-b1e3-4a643acde916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8d:69:a6:85:92:57:6d:f7:f1:a8:2d:3a:46: 77:7b:9d:76:f1:3d:67:b5:03:8b:ef:05:b9:f4:ac: f2:56:e8:17:85:e7:e7:1c:3c:54:34:80:b9:02:2c: 1b:09:8c:30:10:cf:64:38:4a:d7:7f:df:50:78:0d: 74:0a:14:e4:2f:68:d3:10:64:a4:7e:be:63:b3:2c: e8:e3:d2:2a:73:14:1c:6b:7d:90:62:75:e7:c7:ac: 8d:0c:fb:42:7f:50:43:50:87:e8:8b:63:96:33:22: aa:0c:84:f2:ba:f1:ed:54:8a:9f:ed:e1:8c:61:e8: 9a:c2:b6:b8:c9:aa:dc:93:5d:45:6b:b4:8e:08:63: 96:ff:96:1b:c8:e9:6a:20:33:c5:29:69:f3:72:3a: e8:93:7d:7e:f0:3a:0a:ca:da:aa:f5:e7:df:40:35: 10:a6:d9:54:8e:f7:52:e1:ad:30:72:69:49:d1:28: d6:ec:0e:70:26:c0:0a:4c:8d:3b:c5:12:d4:6c:b5: 5b:d6:34:6c:91:8d:c5:e5:fc:b2:c0:8d:14:19:24: 7c:07:73:e7:57:ec:07:06:46:8d:a5:88:69:f8:52: c5:60:b4:77:73:46:79:e2:8c:62:c3:28:dc:e1:d7: f3:39:b7:e7:50:50:2f:9e:3b:67:80:a5:91:d5:cb: ee:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:80:E1:CC:BE:89:B9:E5:A5:6B:E3:A4:89:6A:6D:D4:1C:04:16:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd9c2fd4-aa22-3133-9309-726ee0e3e373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:34:33:34:d9:c5:b1:b3:21:65:d4:bf:07:3d:e5:db:77:95: 79:11:22:8b:89:d9:cd:d0:27:ac:4a:b3:dd:bc:ab:9a:ba:c7: 8f:f3:5a:97:43:12:f3:f6:49:74:84:cd:52:8d:8c:81:c0:7b: e7:42:e1:b6:9e:70:63:70:46:ea:2e:7b:08:7d:c0:92:01:eb: 3f:9b:05:3c:b8:61:81:2c:e5:cd:95:1c:9c:21:9a:03:70:10: c5:12:fe:45:8b:8f:27:08:8f:61:02:57:2c:d5:b2:d3:61:f3: 89:18:e2:c0:d0:e3:db:16:23:48:90:b6:61:1f:94:57:da:f3: 00:e7:e1:94:eb:09:1b:53:a8:24:c7:81:e3:fd:b5:98:b0:c0: c2:df:6f:39:8e:c2:b2:d9:6e:f7:3d:67:c9:fe:de:83:27:91: 80:36:f2:47:cd:5a:73:f7:8b:db:3e:1f:f4:ae:49:4e:de:55: 00:30:7f:d8:c6:a5:fd:01:92:f8:52:b6:56:53:12:fa:84:00: 18:65:d3:f4:15:1d:33:27:45:fe:ca:d9:58:c3:6f:84:b0:05: d0:7c:e0:06:ff:bf:44:17:81:2b:0b:fa:60:96:88:83:34:06: 90:94:f0:49:fc:b0:21:da:22:da:63:f4:69:60:49:c5:50:3c: fe:81:25:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI03qDEP1nYJ5QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1N1oXDTMwMDMwNTA1MDAwMFowLzEtMCsGA1UEAxMk M2JmN2FiYzctODBmMS00MzVkLWIxZTMtNGE2NDNhY2RlOTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY1ppoWSV2338agtOkZ3e5128T1ntQOL7wW5 9KzyVugXhefnHDxUNIC5AiwbCYwwEM9kOErXf99QeA10ChTkL2jTEGSkfr5jsyzo 49IqcxQca32QYnXnx6yNDPtCf1BDUIfoi2OWMyKqDITyuvHtVIqf7eGMYeiawra4 yarck11Fa7SOCGOW/5YbyOlqIDPFKWnzcjrok31+8DoKytqq9effQDUQptlUjvdS 4a0wcmlJ0SjW7A5wJsAKTI07xRLUbLVb1jRskY3F5fyywI0UGSR8B3PnV+wHBkaN pYhp+FLFYLR3c0Z54oxiwyjc4dfzObfnUFAvnjtngKWR1cvuPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSA4cy+ibnlpWvjpIlqbdQcBBZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2Q5YzJmZDQtYWEyMi0z MTMzLTkzMDktNzI2ZWUwZTNlMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFC9rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG40MzTZxbGzIWXUvwc95dt3lXkRIouJ2c3QJ6xKs928q5q6x4/zWpdD EvP2SXSEzVKNjIHAe+dC4baecGNwRuouewh9wJIB6z+bBTy4YYEs5c2VHJwhmgNw EMUS/kWLjycIj2ECVyzVstNh84kY4sDQ49sWI0iQtmEflFfa8wDn4ZTrCRtTqCTH geP9tZiwwMLfbzmOwrLZbvc9Z8n+3oMnkYA28kfNWnP3i9s+H/SuSU7eVQAwf9jG pf0BkvhStlZTEvqEABhl0/QVHTMnRf7K2VjDb4SwBdB84Ab/v0QXgSsL+mCWiIM0 BpCU8En8sCHaItpj9GlgScVQPP6BJXk= -----END CERTIFICATE-----Generated at Sat Sep 5 06:50:44 2026 by rpki-client