$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e9153467-0d16-388c-839e-f1f0596cc816.roa File: e9153467-0d16-388c-839e-f1f0596cc816.roa (raw, json) Hash identifier: jF9cqh1Quo8oiM5I5CJwbJTwaxHXgYSCJeo86/iLYBk= Subject key identifier: 0D:F4:92:A6:C8:F2:F2:27:10:46:9A:CE:4D:F6:1B:AB:C1:5B:1F:A3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE42358AE118C76F6E10C1940 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e9153467-0d16-388c-839e-f1f0596cc816.roa Signing time: Wed 19 Aug 2026 18:04:02 +0000 ROA not before: Wed 19 Aug 2026 18:04:02 +0000 ROA not after: Sat 16 Mar 2030 04:00:00 +0000 asID: 8075 IP address blocks: 20.0.0.0/11 maxlen: 11 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:58:ae:11:8c:76:f6:e1:0c:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:02 2026 GMT Not After : Mar 16 04:00:00 2030 GMT Subject: CN=57306e24-e973-458e-adcc-bac4b6c72836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:61:df:c7:4a:ec:e9:50:45:d5:20:5b:12:ec: 8e:d3:eb:d0:41:30:54:46:ba:52:28:fb:44:45:cd: 0c:62:51:ab:11:60:2c:90:b9:81:7e:e8:51:72:53: ce:27:20:b8:39:e4:d2:29:1f:56:0a:9a:ad:d5:3a: 0a:bb:be:41:a5:4d:1f:68:b9:fe:69:a4:6e:36:de: 4f:42:88:7d:55:f6:30:c8:be:2a:b1:f5:61:f2:0e: ad:6e:df:74:62:62:e0:ed:3e:1d:80:8f:76:ab:6c: 35:36:a1:dd:f4:6a:c4:7f:a2:da:3c:98:ea:7c:f8: 12:81:b5:fb:b7:26:99:15:d5:ec:3b:fe:90:9e:99: 50:e7:3b:1f:ae:c0:ac:ae:d0:4a:e0:cb:d2:74:91: 94:40:c6:b0:0a:b3:65:9a:ce:45:9c:1f:19:b5:9a: 59:5e:61:43:0a:7a:64:db:c4:3e:af:0a:5c:d4:23: 67:31:9a:01:d4:a7:7c:57:22:85:65:a3:50:9e:f1: 78:5c:d0:67:34:65:b1:50:75:9d:66:4a:67:25:44: fe:f1:d8:8c:19:fa:ce:07:d3:8a:37:38:69:61:b1: 73:36:5a:ef:3c:23:28:0d:ba:af:68:45:00:71:0d: 04:ff:56:83:38:ff:e0:1c:32:2f:33:a9:03:5d:0c: 8f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F4:92:A6:C8:F2:F2:27:10:46:9A:CE:4D:F6:1B:AB:C1:5B:1F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e9153467-0d16-388c-839e-f1f0596cc816.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.0.0.0/11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:90:a5:eb:57:e5:50:4b:80:e6:57:8a:7a:62:58:05:47:fd: 4b:c0:b0:b0:81:18:c6:73:fe:b6:42:19:6d:b1:65:c6:04:d1: ba:02:87:97:ec:8c:09:69:81:7c:c8:43:c0:aa:4d:08:65:26: e5:9c:db:5a:0b:03:eb:4b:cd:d8:8c:e9:89:aa:07:b3:3d:ed: cf:ab:fb:66:17:b3:62:07:e1:da:3b:bf:26:09:90:53:49:b5: cf:19:6f:44:16:1a:7d:55:31:b1:5f:4f:16:01:02:3f:f4:6a: bb:49:0d:86:bb:ab:e3:3d:07:39:ff:b8:40:79:8c:60:1b:7a: 0f:40:3b:1c:5c:5d:ab:3b:68:89:63:42:75:49:b8:08:c4:70: ac:7d:dd:18:ab:77:df:44:91:aa:74:77:d8:e2:4a:49:3e:30: fa:72:e8:dc:bc:e0:54:fd:ae:34:62:a6:52:e0:52:01:13:b4: 7d:a3:6b:fc:69:19:26:d1:46:2c:ce:9f:b0:fd:2f:55:58:d6: c3:30:6e:55:29:c2:56:77:2e:2d:01:b7:cc:58:ba:03:d0:4b: 61:7a:5f:01:c1:42:da:01:0c:2c:20:a0:f5:32:1c:ba:2f:b0: 45:01:bd:43:78:87:ab:f1:5c:d7:1c:73:15:4a:85:69:7c:ce: 00:12:4a:4e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI1iuEYx29uEMGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMloXDTMwMDMxNjA0MDAwMFowLzEtMCsGA1UEAxMk NTczMDZlMjQtZTk3My00NThlLWFkY2MtYmFjNGI2YzcyODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWHfx0rs6VBF1SBbEuyO0+vQQTBURrpSKPtE Rc0MYlGrEWAskLmBfuhRclPOJyC4OeTSKR9WCpqt1ToKu75BpU0faLn+aaRuNt5P Qoh9VfYwyL4qsfVh8g6tbt90YmLg7T4dgI92q2w1NqHd9GrEf6LaPJjqfPgSgbX7 tyaZFdXsO/6QnplQ5zsfrsCsrtBK4MvSdJGUQMawCrNlms5FnB8ZtZpZXmFDCnpk 28Q+rwpc1CNnMZoB1Kd8VyKFZaNQnvF4XNBnNGWxUHWdZkpnJUT+8diMGfrOB9OK NzhpYbFzNlrvPCMoDbqvaEUAcQ0E/1aDOP/gHDIvM6kDXQyPjQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFA30kqbI8vInEEaazk32G6vBWx+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTkxNTM0NjctMGQxNi0z ODhjLTgzOWUtZjFmMDU5NmNjODE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFFAAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGpCl61flUEuA5leKemJYBUf9S8CwsIEYxnP+tkIZbbFlxgTRugKHl+yM CWmBfMhDwKpNCGUm5ZzbWgsD60vN2IzpiaoHsz3tz6v7ZhezYgfh2ju/JgmQU0m1 zxlvRBYafVUxsV9PFgECP/Rqu0kNhrur4z0HOf+4QHmMYBt6D0A7HFxdqztoiWNC dUm4CMRwrH3dGKt330SRqnR32OJKST4w+nLo3LzgVP2uNGKmUuBSARO0faNr/GkZ JtFGLM6fsP0vVVjWwzBuVSnCVncuLQG3zFi6A9BLYXpfAcFC2gEMLCCg9TIcui+w RQG9Q3iHq/Fc1xxzFUqFaXzOABJKTg== -----END CERTIFICATE-----Generated at Sat Sep 5 06:10:56 2026 by rpki-client