$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e9fca1b3-87eb-347a-9cf7-d2b10a9f49b8.roa File: e9fca1b3-87eb-347a-9cf7-d2b10a9f49b8.roa (raw, json) Hash identifier: TRmW+ir5KVd9ivfeETaClacuuqckC3Zl1QqaOLTKbk8= Subject key identifier: 35:4C:04:50:78:0A:10:D6:31:15:9D:B5:B5:1C:2D:38:21:D7:9B:A5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE42356EF5E389F608000E3A8 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e9fca1b3-87eb-347a-9cf7-d2b10a9f49b8.roa Signing time: Wed 19 Aug 2026 18:04:01 +0000 ROA not before: Wed 19 Aug 2026 18:04:01 +0000 ROA not after: Mon 04 Mar 2030 05:00:00 +0000 asID: 8069 IP address blocks: 20.47.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:56:ef:5e:38:9f:60:80:00:e3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:01 2026 GMT Not After : Mar 4 05:00:00 2030 GMT Subject: CN=5542ec4c-d117-4406-9717-ad1ce642773a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:de:22:17:c1:62:c2:2b:28:14:a7:31:8a: 64:3c:83:c7:84:96:28:10:ac:80:de:87:e0:75:e4: 06:b8:74:5a:94:55:e0:c8:6b:90:39:f4:08:de:a7: f9:68:dc:31:aa:3f:e4:04:03:f8:1e:d0:68:64:db: 43:dc:3d:46:ab:ea:ca:b2:4b:53:99:d3:3c:c2:b1: 87:99:a7:9e:af:d9:fc:fa:77:b6:12:b4:da:c5:2c: 66:ce:d0:9d:23:42:55:f0:77:4e:0f:18:f6:f2:ec: c3:b6:f5:43:32:c7:98:87:bd:06:de:ae:92:01:fb: ea:0d:f8:49:e8:d6:ea:ca:17:fa:7a:0b:d8:c6:4a: e6:21:08:60:e4:8b:a0:47:bd:6f:2e:30:ec:98:4c: 97:b1:c6:5e:bf:68:a8:f0:e9:d2:d7:4e:29:74:23: 3b:f4:19:bb:0c:06:bc:63:05:7e:15:b6:bc:3b:26: bc:ee:f5:42:7b:24:01:4b:18:1d:d2:c3:52:76:41: 50:63:0a:a1:5d:27:29:a8:54:1c:34:b6:ba:42:b8: eb:0c:7b:1d:2e:83:c5:92:97:50:9d:a8:d1:03:ba: 80:05:65:f3:c1:e9:79:03:00:e4:d6:56:b7:d0:4f: 04:2d:90:d5:d1:2d:16:a5:35:89:e8:9c:8d:94:41: bf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4C:04:50:78:0A:10:D6:31:15:9D:B5:B5:1C:2D:38:21:D7:9B:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e9fca1b3-87eb-347a-9cf7-d2b10a9f49b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:8a:e4:66:59:af:c9:31:b2:70:76:6b:0d:f5:cc:a3:55:91: d2:84:97:23:83:d5:50:11:c0:b2:cb:3d:32:79:fa:5d:6e:90: 5c:b7:e5:7b:9b:85:aa:79:a3:79:45:53:8b:84:fe:d8:6e:a2: 20:50:3d:56:7b:db:64:ad:ad:77:0c:78:e2:92:2d:12:e5:52: 7a:1e:97:b4:0c:99:48:b4:c0:33:ed:1a:2e:0f:76:b3:8f:56: 28:95:52:07:ca:c7:27:f9:0c:78:b3:e8:56:3f:22:47:6c:89: 16:eb:12:df:18:52:b2:48:71:da:59:e7:c3:71:99:b4:3b:65: 36:8b:ce:a8:28:e0:5d:40:5e:1d:08:a0:45:30:da:d6:ce:61: 9b:76:9d:a5:04:88:d9:c9:ca:87:4d:28:a9:f1:c8:7d:c2:93: 95:bc:e6:a2:20:72:09:c7:79:38:4d:e9:a2:da:2d:95:c1:67: 59:47:b3:b6:12:4b:b9:b1:30:95:ac:d4:54:f7:5d:6d:4b:a7: 66:b6:b9:80:b2:44:c2:39:dc:27:9c:ce:27:91:ba:d2:b1:38: 80:e4:4a:4e:96:06:e9:1c:5e:b9:c9:ae:32:5a:0e:75:5b:91: ab:cd:cb:f5:36:d7:67:57:ce:72:7d:67:5a:8c:10:0f:22:07: 6b:1d:ab:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1bvXjifYIAA46gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMVoXDTMwMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk NTU0MmVjNGMtZDExNy00NDA2LTk3MTctYWQxY2U2NDI3NzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonreIhfBYsIrKBSnMYpkPIPHhJYoEKyA3ofg deQGuHRalFXgyGuQOfQI3qf5aNwxqj/kBAP4HtBoZNtD3D1Gq+rKsktTmdM8wrGH maeer9n8+ne2ErTaxSxmztCdI0JV8HdODxj28uzDtvVDMseYh70G3q6SAfvqDfhJ 6Nbqyhf6egvYxkrmIQhg5IugR71vLjDsmEyXscZev2io8OnS104pdCM79Bm7DAa8 YwV+Fba8Oya87vVCeyQBSxgd0sNSdkFQYwqhXScpqFQcNLa6QrjrDHsdLoPFkpdQ najRA7qABWXzwel5AwDk1la30E8ELZDV0S0WpTWJ6JyNlEG/nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVMBFB4ChDWMRWdtbUcLTgh15ulMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTlmY2ExYjMtODdlYi0z NDdhLTljZjctZDJiMTBhOWY0OWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFC8tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGK5GZZr8kxsnB2aw31zKNVkdKElyOD1VARwLLLPTJ5+l1ukFy35Xub hap5o3lFU4uE/thuoiBQPVZ722StrXcMeOKSLRLlUnoel7QMmUi0wDPtGi4PdrOP ViiVUgfKxyf5DHiz6FY/IkdsiRbrEt8YUrJIcdpZ58NxmbQ7ZTaLzqgo4F1AXh0I oEUw2tbOYZt2naUEiNnJyodNKKnxyH3Ck5W85qIgcgnHeThN6aLaLZXBZ1lHs7YS S7mxMJWs1FT3XW1Lp2a2uYCyRMI53CeczieRutKxOIDkSk6WBukcXrnJrjJaDnVb kavNy/U212dXznJ9Z1qMEA8iB2sdqxU= -----END CERTIFICATE-----Generated at Sat Sep 5 07:04:46 2026 by rpki-client