$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dab934c0-ce20-3a4d-af1f-b4178e3a1e61.roa File: dab934c0-ce20-3a4d-af1f-b4178e3a1e61.roa (raw, json) Hash identifier: f+nsFayb7EALM9WsS0F8KsZl8Fy/owv/MF/waKKDeos= Subject key identifier: 11:DB:30:FE:CA:E0:57:D4:E8:F8:FF:DC:A6:9D:F1:02:2D:EE:02:98 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234D76961AB676FF982100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dab934c0-ce20-3a4d-af1f-b4178e3a1e61.roa Signing time: Wed 19 Aug 2026 18:03:57 +0000 ROA not before: Wed 19 Aug 2026 18:03:57 +0000 ROA not after: Sat 09 Mar 2030 05:00:00 +0000 asID: 8069 IP address blocks: 20.47.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4d:76:96:1a:b6:76:ff:98:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:57 2026 GMT Not After : Mar 9 05:00:00 2030 GMT Subject: CN=4cd8c87c-980f-4b42-84fc-1871f330f72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c2:df:c0:1a:4f:45:a4:a2:7a:f8:47:d1:33: c0:78:56:e5:52:d7:2b:8b:b6:6c:96:22:f5:8e:6e: cb:9e:e8:95:13:5d:ad:35:76:bf:cf:67:4e:13:4f: 95:ef:e2:41:25:f4:5e:9e:cb:bf:ac:17:16:a9:55: 51:75:af:4e:9c:8a:9e:52:9f:4d:38:3e:33:eb:c3: 46:1b:de:c6:e8:16:b8:be:fa:1d:d1:4e:73:67:2b: 5e:85:97:21:f2:e6:fd:e1:52:08:d0:13:fb:51:a8: 73:ac:6f:16:f3:ed:21:2c:30:79:2e:56:d4:14:c5: 3f:c1:6c:eb:cc:5a:a7:0d:2b:0f:07:58:cc:65:a5: 76:31:23:1b:db:78:2c:5b:59:ca:fd:b8:01:6a:38: 63:f7:67:0b:09:74:30:ef:c9:f1:06:3c:c9:7c:70: fc:84:5d:c9:70:22:72:47:05:d3:8f:9f:6e:b1:1c: 8e:be:97:74:e8:fd:b9:74:a2:14:c4:69:cc:32:45: cd:5e:a6:2e:9b:43:74:76:cd:cb:ff:a0:a4:9e:29: c7:98:8a:66:91:80:0c:6f:5e:1c:e6:1d:98:0e:64: 30:ed:66:99:af:87:2a:45:33:7b:e5:7e:7d:80:96: 82:2a:22:c9:9a:d7:67:cd:c0:8d:b1:db:f9:fe:21: f9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DB:30:FE:CA:E0:57:D4:E8:F8:FF:DC:A6:9D:F1:02:2D:EE:02:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dab934c0-ce20-3a4d-af1f-b4178e3a1e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:f7:75:7a:12:0a:f0:a5:e8:0c:10:30:47:75:1f:83:d5:a4: 28:2b:e9:53:64:3e:65:37:11:e3:35:2b:f3:bb:95:72:4c:d2: 0b:d5:b4:12:2d:79:46:0e:89:81:eb:ae:20:f8:63:15:c0:3c: 08:3d:80:dc:97:4e:e9:47:62:a3:90:ea:93:90:65:b1:ae:fb: 21:64:2a:74:e4:17:5e:4c:3b:51:66:6f:00:d8:98:15:2e:52: 63:fc:6c:45:98:95:55:e7:7a:bc:61:b0:4c:cd:8a:74:13:ec: 13:39:f6:bd:e7:5f:d2:12:80:ee:3c:9d:e4:68:e8:ff:3d:a7: 84:78:88:a3:eb:f0:77:a4:82:e5:2e:72:38:40:e5:23:5c:e6: 72:2b:c6:f8:62:88:38:bd:1b:84:5e:a5:f6:c0:a4:bc:ae:da: f9:46:54:de:ef:d7:fc:b3:93:3c:00:c1:34:4a:73:1f:31:65: 55:48:4f:da:5d:c1:dc:51:83:9b:da:75:34:77:78:0b:00:3c: 96:87:1a:18:c9:d5:44:f9:87:f8:38:5b:d8:59:e9:49:1c:8c: 27:7e:7f:99:61:82:82:5c:0a:01:da:8e:c4:69:ce:e6:38:b6: f8:51:00:19:da:08:23:39:db:f8:c7:fe:96:2f:be:c7:eb:59: 1f:20:f9:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI012lhq2dv+YIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1N1oXDTMwMDMwOTA1MDAwMFowLzEtMCsGA1UEAxMk NGNkOGM4N2MtOTgwZi00YjQyLTg0ZmMtMTg3MWYzMzBmNzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMLfwBpPRaSievhH0TPAeFblUtcri7ZsliL1 jm7LnuiVE12tNXa/z2dOE0+V7+JBJfRensu/rBcWqVVRda9OnIqeUp9NOD4z68NG G97G6Ba4vvod0U5zZytehZch8ub94VII0BP7UahzrG8W8+0hLDB5LlbUFMU/wWzr zFqnDSsPB1jMZaV2MSMb23gsW1nK/bgBajhj92cLCXQw78nxBjzJfHD8hF3JcCJy RwXTj59usRyOvpd06P25dKIUxGnMMkXNXqYum0N0ds3L/6CkninHmIpmkYAMb14c 5h2YDmQw7WaZr4cqRTN75X59gJaCKiLJmtdnzcCNsdv5/iH5nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHbMP7K4FfU6Pj/3Kad8QIt7gKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGFiOTM0YzAtY2UyMC0z YTRkLWFmMWYtYjQxNzhlM2ExZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFC9mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEX3dXoSCvCl6AwQMEd1H4PVpCgr6VNkPmU3EeM1K/O7lXJM0gvVtBIt eUYOiYHrriD4YxXAPAg9gNyXTulHYqOQ6pOQZbGu+yFkKnTkF15MO1FmbwDYmBUu UmP8bEWYlVXnerxhsEzNinQT7BM59r3nX9ISgO48neRo6P89p4R4iKPr8HekguUu cjhA5SNc5nIrxvhiiDi9G4RepfbApLyu2vlGVN7v1/yzkzwAwTRKcx8xZVVIT9pd wdxRg5vadTR3eAsAPJaHGhjJ1UT5h/g4W9hZ6UkcjCd+f5lhgoJcCgHajsRpzuY4 tvhRABnaCCM52/jH/pYvvsfrWR8g+Wk= -----END CERTIFICATE-----Generated at Sat Sep 5 05:23:47 2026 by rpki-client