$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d6154821-8d17-388c-b098-d36cb3c0c50b.roa File: d6154821-8d17-388c-b098-d36cb3c0c50b.roa (raw, json) Hash identifier: NhoYBwg4KKxlohdDjkvzJ/fjABYr4CDo+t8J1OuGm8U= Subject key identifier: EA:39:B0:21:C8:53:4E:77:FC:EE:7C:E1:59:49:83:F0:21:2D:8D:7D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234E69FACED14D0B9CEA40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d6154821-8d17-388c-b098-d36cb3c0c50b.roa Signing time: Wed 19 Aug 2026 18:03:57 +0000 ROA not before: Wed 19 Aug 2026 18:03:57 +0000 ROA not after: Thu 18 Apr 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4e:69:fa:ce:d1:4d:0b:9c:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:57 2026 GMT Not After : Apr 18 04:00:00 2030 GMT Subject: CN=3d40b70a-d1ab-4ab3-80ee-451219ec1dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:aa:01:c7:e8:7d:9b:63:ec:11:0d:9a:83:b5: ad:d7:2b:b2:19:02:77:4f:8c:88:92:70:ce:cf:aa: a1:46:f0:fe:2e:6e:a4:cb:d0:e5:48:41:f0:d0:cc: a8:79:b3:75:f7:70:53:c3:13:47:b2:f7:8a:1d:c1: 07:d6:23:a3:c2:6d:4e:b0:02:9f:b9:63:45:c3:b9: 40:bc:09:7e:01:bd:64:cb:29:6c:65:4e:0f:6d:59: 27:11:26:c8:55:66:c6:20:af:da:69:be:cb:15:eb: 41:8b:6e:f8:4f:ab:27:8e:2f:9a:75:6b:5b:d1:5b: 22:fc:25:a2:e8:54:8b:4a:a9:63:91:75:27:f9:7d: dd:1c:f1:57:72:7e:cd:e8:68:1d:4d:83:b8:0a:7b: 74:10:5a:5d:4d:6c:c0:d8:b8:87:c6:0e:32:23:f8: ea:13:b7:04:27:2e:0b:53:ea:69:f5:e4:1c:1a:aa: 7c:20:4e:67:1d:1e:88:68:63:6d:7c:2d:7c:c7:f0: 37:fb:5c:dd:29:28:c1:c4:41:0b:67:6b:b7:fa:49: a7:3d:63:b3:83:a1:cc:a0:48:3f:83:c4:cb:08:9f: a7:4d:0f:c9:d1:33:16:5e:1e:dd:1b:d0:5a:2d:d2: a0:27:45:18:49:f9:88:59:10:9f:72:74:00:e8:32: e1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:39:B0:21:C8:53:4E:77:FC:EE:7C:E1:59:49:83:F0:21:2D:8D:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d6154821-8d17-388c-b098-d36cb3c0c50b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a3:67:94:63:d4:1a:52:77:b3:e3:50:88:d9:67:38:23:21: 5d:85:53:d0:97:ff:8c:aa:79:45:24:a3:d1:29:4f:51:39:e1: 38:c2:59:17:73:94:87:f9:8e:8f:c5:30:53:a5:4c:97:21:54: f7:d1:83:cc:c1:8f:ca:ae:fe:64:43:ff:d0:de:9d:ed:d1:7b: 7d:24:85:ad:8f:d0:fc:e7:4f:2f:f5:2f:a0:37:32:4f:59:d1: 65:43:80:df:bb:c7:d3:81:ee:16:a1:d9:26:bb:ac:e3:1d:b2: d7:ae:84:98:89:75:18:87:68:5c:60:49:82:e7:cd:f4:7e:67: c6:98:93:98:e0:9d:d8:bd:82:7a:41:20:88:b0:6a:89:73:14: 0e:83:4b:2e:38:35:05:93:2e:64:86:d1:58:e7:24:1c:9c:fa: 82:e4:02:4c:86:08:d7:c6:1d:6b:b8:88:22:01:63:22:ce:3c: d8:35:51:cd:55:d2:be:2e:34:65:ca:ba:9c:f9:b7:88:0f:bb: 7a:e7:d1:05:fb:67:1f:3f:15:df:3e:a3:60:be:df:e9:36:24: a4:b3:6e:b5:cb:17:24:73:5e:df:c1:24:29:64:f4:3c:79:0b: 58:4b:33:f3:61:1d:ae:72:5b:7b:0d:11:e2:7d:de:11:6d:77: 76:e7:90:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI05p+s7RTQuc6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1N1oXDTMwMDQxODA0MDAwMFowLzEtMCsGA1UEAxMk M2Q0MGI3MGEtZDFhYi00YWIzLTgwZWUtNDUxMjE5ZWMxZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6oBx+h9m2PsEQ2ag7Wt1yuyGQJ3T4yIknDO z6qhRvD+Lm6ky9DlSEHw0MyoebN193BTwxNHsveKHcEH1iOjwm1OsAKfuWNFw7lA vAl+Ab1kyylsZU4PbVknESbIVWbGIK/aab7LFetBi274T6snji+adWtb0Vsi/CWi 6FSLSqljkXUn+X3dHPFXcn7N6GgdTYO4Cnt0EFpdTWzA2LiHxg4yI/jqE7cEJy4L U+pp9eQcGqp8IE5nHR6IaGNtfC18x/A3+1zdKSjBxEELZ2u3+kmnPWOzg6HMoEg/ g8TLCJ+nTQ/J0TMWXh7dG9BaLdKgJ0UYSfmIWRCfcnQA6DLhrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOo5sCHIU053/O584VlJg/AhLY19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDYxNTQ4MjEtOGQxNy0z ODhjLWIwOTgtZDM2Y2IzYzBjNTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFC8FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqjZ5Rj1BpSd7PjUIjZZzgjIV2FU9CX/4yqeUUko9EpT1E54TjCWRdz lIf5jo/FMFOlTJchVPfRg8zBj8qu/mRD/9Dene3Re30kha2P0PznTy/1L6A3Mk9Z 0WVDgN+7x9OB7hah2Sa7rOMdsteuhJiJdRiHaFxgSYLnzfR+Z8aYk5jgndi9gnpB IIiwaolzFA6DSy44NQWTLmSG0VjnJByc+oLkAkyGCNfGHWu4iCIBYyLOPNg1Uc1V 0r4uNGXKupz5t4gPu3rn0QX7Zx8/Fd8+o2C+3+k2JKSzbrXLFyRzXt/BJClk9Dx5 C1hLM/NhHa5yW3sNEeJ93hFtd3bnkFs= -----END CERTIFICATE-----Generated at Sat Sep 5 05:25:07 2026 by rpki-client