$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa File: 16646b1c-7273-3e1a-9ca3-efedf58284e9.roa (raw, json) Hash identifier: B1/k1ahTWTinUIjpR7IuXogBMkSnfvgVK8gSEYqXh9s= Subject key identifier: EF:75:58:7B:F3:53:94:74:0F:6F:A2:EC:E2:ED:11:12:0F:08:ED:B3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF6868EB57ECD0E5929414B00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.153.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:8e:b5:7e:cd:0e:59:29:41:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=729fd491-6aae-4afb-9e53-7110ed8ced53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:eb:f8:8b:c1:f8:e8:db:5b:e4:19:26:62:cc: 8e:83:c7:09:57:5f:a9:65:53:77:45:80:83:54:ae: a8:d9:52:7e:8f:ee:c2:a0:4a:e5:1c:03:84:1f:b7: 1a:19:c7:46:c6:1f:e9:44:23:88:4b:18:ad:e1:83: 32:0f:1d:60:8a:c8:6d:a3:e2:1e:cb:f8:86:77:5b: c6:8c:ae:38:b3:a2:6e:99:24:ce:3c:20:f8:d0:2a: f2:73:37:b3:3f:72:95:9d:6d:7a:46:58:51:0b:ec: 81:45:d7:06:ba:ec:ee:17:09:68:ab:ef:85:2d:29: ba:da:6c:dc:a5:fa:0c:ed:2d:b3:3d:78:ad:c1:4d: 4e:3a:8b:d1:5a:a5:4e:fd:fc:41:b3:f5:c7:a5:b0: 0e:55:7d:16:ee:d5:82:e0:75:ba:07:bd:dd:a6:bf: 64:30:a6:13:be:64:b8:c5:a7:1f:3a:a3:e2:6c:b5: 7b:f1:73:c1:7f:3b:7f:bc:6a:64:46:1c:cd:5c:94: 06:d6:7a:07:81:7c:13:02:7d:5f:7b:61:c2:22:6a: 96:38:cd:9c:78:12:21:3f:c3:cc:cc:ea:dc:d6:ed: 57:e9:31:a5:50:d2:94:13:fb:41:ce:39:d1:78:85: ef:c6:bc:d9:8e:ea:bb:47:52:94:ff:53:40:be:4d: 80:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:75:58:7B:F3:53:94:74:0F:6F:A2:EC:E2:ED:11:12:0F:08:ED:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:3f:fd:53:f3:66:ea:37:c6:88:dc:7d:f7:a5:46:e6:ac:16: bb:ab:c5:4b:17:d2:8a:64:f2:89:1a:b3:4b:f3:6a:b6:b1:12: 61:c7:da:e7:00:9a:75:e4:a1:49:0e:7d:03:94:c8:3b:44:cd: 28:84:77:27:c8:a4:9a:1f:b3:a5:88:df:85:6a:4b:c8:8c:c3: 8f:96:22:aa:09:2f:a1:b6:5f:f8:7c:89:48:2c:f7:dd:d2:74: 8e:a5:03:5a:0f:8b:ff:d1:37:22:59:cf:98:1e:4f:49:59:62: 3f:34:68:5a:a4:80:7c:22:a0:fe:2b:13:1a:78:d2:2f:86:fa: 50:bd:2f:9c:f0:b7:cb:ee:d2:f4:25:47:a4:27:e3:14:53:82: 36:e7:de:02:39:93:66:6e:37:c2:77:25:8f:a4:c6:37:6c:94: 28:7e:5b:43:74:9c:17:fa:ce:34:d5:93:bd:f6:1e:cd:55:1d: 11:93:2a:a9:c1:a5:3b:88:b5:63:cc:8c:2f:9a:21:b5:5b:b8: 45:17:f9:f3:a4:a9:77:eb:c3:5f:49:96:f2:57:4b:6c:3a:41: 47:c2:19:16:9f:d0:4d:2f:12:06:66:82:bf:8a:5a:45:65:62: ab:da:73:d8:1f:62:47:fb:0b:6d:c8:d8:52:47:3d:cb:29:06: 00:4a:5c:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2ho61fs0OWSlBSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk NzI5ZmQ0OTEtNmFhZS00YWZiLTllNTMtNzExMGVkOGNlZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgev4i8H46Ntb5BkmYsyOg8cJV1+pZVN3RYCD VK6o2VJ+j+7CoErlHAOEH7caGcdGxh/pRCOISxit4YMyDx1gishto+Iey/iGd1vG jK44s6JumSTOPCD40CryczezP3KVnW16RlhRC+yBRdcGuuzuFwloq++FLSm62mzc pfoM7S2zPXitwU1OOovRWqVO/fxBs/XHpbAOVX0W7tWC4HW6B73dpr9kMKYTvmS4 xacfOqPibLV78XPBfzt/vGpkRhzNXJQG1noHgXwTAn1fe2HCImqWOM2ceBIhP8PM zOrc1u1X6TGlUNKUE/tBzjnReIXvxrzZjuq7R1KU/1NAvk2ApwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO91WHvzU5R0D2+i7OLtERIPCO2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTY2NDZiMWMtNzI3My0z ZTFhLTljYTMtZWZlZGY1ODI4NGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ//VPzZuo3xojcffelRuasFrurxUsX0opk8okas0vzaraxEmHH2ucA mnXkoUkOfQOUyDtEzSiEdyfIpJofs6WI34VqS8iMw4+WIqoJL6G2X/h8iUgs993S dI6lA1oPi//RNyJZz5geT0lZYj80aFqkgHwioP4rExp40i+G+lC9L5zwt8vu0vQl R6Qn4xRTgjbn3gI5k2ZuN8J3JY+kxjdslCh+W0N0nBf6zjTVk732Hs1VHRGTKqnB pTuItWPMjC+aIbVbuEUX+fOkqXfrw19JlvJXS2w6QUfCGRaf0E0vEgZmgr+KWkVl Yqvac9gfYkf7C23I2FJHPcspBgBKXNI= -----END CERTIFICATE-----Generated at Tue Aug 26 06:50:20 2025 by rpki-client