$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732/23d75607-f66e-3813-839e-a4479f32a829.roa File: 23d75607-f66e-3813-839e-a4479f32a829.roa (raw, json) Hash identifier: vXHHGF9AW5d3TWXJmTcAEHB6cntLYQpZZQNxGbRuJR0= Subject key identifier: 6F:45:13:53:18:7A:32:52:82:17:32:5F:0B:CF:75:00:43:C2:24:2E Certificate issuer: /CN=135ec5a7-d9dd-467e-ac4a-236383b21732 Certificate serial: 010D0C9F4328584B180892A75DC3AAE2967EF600 Authority key identifier: 15:10:86:1D:D7:ED:97:C6:5A:D8:83:16:D1:7B:F0:B6:26:9F:54:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732/23d75607-f66e-3813-839e-a4479f32a829.roa Signing time: Fri 05 Sep 2025 13:04:22 +0000 ROA not before: Fri 05 Sep 2025 13:04:22 +0000 ROA not after: Thu 04 Dec 2025 14:04:22 +0000 asID: 47870 IP address blocks: 68.170.20.0/24 maxlen: 24 68.170.21.0/24 maxlen: 24 68.170.22.0/24 maxlen: 24 68.170.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732/135ec5a7-d9dd-467e-ac4a-236383b21732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732/135ec5a7-d9dd-467e-ac4a-236383b21732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:08:92:a7:5d:c3:aa:e2:96:7e:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=135ec5a7-d9dd-467e-ac4a-236383b21732 Validity Not Before: Sep 5 13:04:22 2025 GMT Not After : Dec 4 14:04:22 2025 GMT Subject: CN=877d460a-8ae6-4221-afee-b14a43e4dfab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7e:41:c5:7e:20:1e:12:44:50:69:4e:6f:92: b7:a0:26:fa:6d:34:02:b6:5e:82:5b:e4:d5:27:3d: 35:55:7e:65:fa:45:07:8e:3e:9b:53:f8:59:04:48: 89:d3:ca:4d:e5:2a:d0:b1:74:5d:1b:cb:b0:d3:f8: 41:ce:b5:2c:8f:9c:c7:fb:c2:75:09:3a:74:b1:ca: e9:f4:83:bf:70:2b:77:fa:bd:f7:b1:67:16:fb:66: 1d:df:58:11:db:c5:4a:35:5d:53:18:3b:e4:1c:d1: 29:94:b0:d3:ac:42:c0:8a:1d:72:89:ec:61:8c:0e: 05:14:62:33:a9:81:02:31:24:97:24:1d:ea:40:5c: f6:98:34:16:46:11:06:17:b7:49:49:82:09:d6:aa: 45:33:5d:3b:93:de:0d:ac:c8:df:9d:c3:c8:43:89: 46:23:db:ac:b2:70:f4:af:76:2d:c8:0d:ee:f1:66: 5d:ab:84:f0:b9:f5:b4:01:39:02:82:59:28:2b:29: 0d:8f:0d:04:1d:f2:fa:f2:2c:26:cd:9c:4f:b8:41: 09:37:18:a3:60:7a:7e:89:d8:f1:20:56:d2:35:43: 60:98:81:54:b1:0a:92:89:ed:b9:5e:fe:a1:3d:5e: 23:5b:a2:e2:95:a2:ac:18:0e:8e:f2:24:5e:69:fc: ac:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:45:13:53:18:7A:32:52:82:17:32:5F:0B:CF:75:00:43:C2:24:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732/23d75607-f66e-3813-839e-a4479f32a829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732/135ec5a7-d9dd-467e-ac4a-236383b21732.crl X509v3 Authority Key Identifier: keyid:15:10:86:1D:D7:ED:97:C6:5A:D8:83:16:D1:7B:F0:B6:26:9F:54:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732.cer sbgp-ipAddrBlock: critical IPv4: 68.170.20.0-68.170.22.255 68.170.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:58:d9:9c:4b:10:bc:8c:f9:63:30:03:54:8d:f7:35:ac:e6: 99:c7:96:a4:81:a8:66:b3:06:de:cd:ac:b7:eb:4b:3f:a5:bb: 1a:6f:44:3b:c5:09:d2:5e:4d:8c:78:3d:c9:87:ed:1e:0d:c8: cd:0f:66:b8:57:38:79:ff:d4:23:99:ba:47:f0:bb:9e:df:9d: b9:8c:31:34:c2:a4:0c:24:ae:82:84:01:2a:66:3e:d4:6e:6f: 09:51:57:d1:af:2c:7e:44:f1:8f:98:5c:ab:80:c1:cc:30:8b: 5f:1f:5b:0a:51:87:83:8e:b9:5e:a0:68:65:e0:99:24:cd:72: 58:ef:54:6f:ab:68:a8:32:e5:ca:2a:e0:ff:26:42:a4:73:8d: 7b:00:18:79:cb:79:6c:ce:b4:41:83:72:53:95:85:d8:49:80: ef:ca:59:31:ab:60:9b:e9:7e:63:7b:19:4e:c2:cc:c2:9d:dc: 43:0f:66:71:d6:61:f0:8a:b4:bf:a0:99:8e:b1:30:90:d3:e3: ca:b4:91:98:95:8b:8a:c1:d9:55:89:b1:37:88:8f:eb:d2:ee: 7f:d8:e8:bd:09:79:da:9e:16:4b:78:5b:cd:5b:8b:8a:b8:a3: 2d:65:c7:17:34:83:95:3b:45:e8:be:9f:94:21:80:07:8e:95: fd:c1:9b:4c -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEsYCJKnXcOq4pZ+9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM1ZWM1YTctZDlkZC00NjdlLWFjNGEtMjM2MzgzYjIx NzMyMB4XDTI1MDkwNTEzMDQyMloXDTI1MTIwNDE0MDQyMlowLzEtMCsGA1UEAxMk ODc3ZDQ2MGEtOGFlNi00MjIxLWFmZWUtYjE0YTQzZTRkZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX5BxX4gHhJEUGlOb5K3oCb6bTQCtl6CW+TV Jz01VX5l+kUHjj6bU/hZBEiJ08pN5SrQsXRdG8uw0/hBzrUsj5zH+8J1CTp0scrp 9IO/cCt3+r33sWcW+2Yd31gR28VKNV1TGDvkHNEplLDTrELAih1yiexhjA4FFGIz qYECMSSXJB3qQFz2mDQWRhEGF7dJSYIJ1qpFM107k94NrMjfncPIQ4lGI9ussnD0 r3YtyA3u8WZdq4TwufW0ATkCglkoKykNjw0EHfL68iwmzZxPuEEJNxijYHp+idjx IFbSNUNgmIFUsQqSie25Xv6hPV4jW6LilaKsGA6O8iReafys+QIDAQABo4IDYzCC A18wHQYDVR0OBBYEFG9FE1MYejJSghcyXwvPdQBDwiQuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMzVl YzVhNy1kOWRkLTQ2N2UtYWM0YS0yMzYzODNiMjE3MzIvMjNkNzU2MDctZjY2ZS0z ODEzLTgzOWUtYTQ0NzlmMzJhODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTM1ZWM1YTctZDlkZC00NjdlLWFj NGEtMjM2MzgzYjIxNzMyLzEzNWVjNWE3LWQ5ZGQtNDY3ZS1hYzRhLTIzNjM4M2Iy MTczMi5jcmwwHwYDVR0jBBgwFoAUFRCGHdftl8Za2IMW0XvwtiafVB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMzVlYzVhNy1kOWRkLTQ2N2UtYWM0YS0yMzYz ODNiMjE3MzIuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAJEqhQD BABEqhYDBABEqhkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEABljZnEsQvIz5YzADVI33NazmmceWpIGoZrMG 3s2st+tLP6W7Gm9EO8UJ0l5NjHg9yYftHg3IzQ9muFc4ef/UI5m6R/C7nt+duYwx NMKkDCSugoQBKmY+1G5vCVFX0a8sfkTxj5hcq4DBzDCLXx9bClGHg465XqBoZeCZ JM1yWO9Ub6toqDLlyirg/yZCpHONewAYect5bM60QYNyU5WF2EmA78pZMatgm+l+ Y3sZTsLMwp3cQw9mcdZh8Iq0v6CZjrEwkNPjyrSRmJWLisHZVYmxN4iP69Luf9jo vQl52p4WS3hbzVuLirijLWXHFzSDlTtF6L6flCGAB46V/cGbTA== -----END CERTIFICATE-----Generated at Tue Sep 16 02:56:39 2025 by rpki-client