$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/51de0f90-d04b-3ee5-8cd9-8de517542b74.roa File: 51de0f90-d04b-3ee5-8cd9-8de517542b74.roa (raw, json) Hash identifier: XspygaulafWQSuDtrE7/q+zqLNE19AuCuEb/eIj8AcQ= Subject key identifier: 79:AF:CC:C9:0C:3E:B3:E8:3E:AF:B7:5D:F4:39:86:E2:14:83:79:AA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B2A2C3FB4EE3D6567917DC140 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/51de0f90-d04b-3ee5-8cd9-8de517542b74.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.157.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3f:b4:ee:3d:65:67:91:7d:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=8490e318-9dbd-49f8-ae67-be41b5b6ce9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1a:cb:42:a0:7c:a2:8d:cb:7d:f5:bd:6b:a4: 6e:2a:f6:3d:b8:a4:de:75:f0:da:81:6a:ba:f3:aa: f8:a1:73:3a:03:67:e7:dc:12:9f:0f:52:1e:60:b9: 09:a4:b4:39:19:29:c8:bf:49:78:a7:bf:3c:38:6b: 08:c2:ea:69:a1:6d:44:2a:00:30:fe:f1:05:9b:67: d0:ac:82:bd:82:16:25:35:69:46:3d:55:cc:1d:82: be:4b:85:f1:6a:76:fb:a8:71:ca:36:94:86:70:55: f1:61:f0:fc:7a:72:ed:8e:a5:fc:63:b2:23:c9:27: 4a:65:a5:2a:07:b1:bb:9d:57:81:66:b9:28:35:c6: 33:18:c2:b9:9f:d5:52:15:1d:14:4e:58:20:a9:6f: 58:b8:16:e3:de:29:13:c8:61:ee:71:bc:3d:6e:52: 0e:24:65:4c:b5:31:7d:f9:4e:51:f9:4f:7b:39:90: 8e:4e:8f:b6:a5:a9:3e:c5:72:65:b8:43:8d:cd:2f: 6b:76:fe:79:c4:e6:80:37:25:85:e9:a6:1e:0f:47: 23:15:da:98:1d:07:cb:e9:c4:75:66:c5:92:23:82: 83:b0:bf:18:69:33:69:ca:09:cd:57:ca:7c:a9:08: cf:e4:57:de:bb:2c:78:db:0a:06:1f:36:d4:54:c6: ca:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AF:CC:C9:0C:3E:B3:E8:3E:AF:B7:5D:F4:39:86:E2:14:83:79:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/51de0f90-d04b-3ee5-8cd9-8de517542b74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:0c:dd:cd:10:ad:fc:91:61:c0:c4:35:d1:13:62:2f:38:7e: 87:c6:5a:e4:10:00:12:d1:ea:39:9d:94:31:6a:03:9b:3a:50: 5c:4c:11:94:cd:32:19:ff:ca:19:c7:53:54:c8:a9:13:74:cb: 42:ef:0f:68:f0:71:1c:14:ce:1e:28:3c:1e:c5:72:df:2e:3a: b3:d3:d4:e0:e1:3f:4d:a4:a6:52:19:07:e6:e2:88:79:85:05: cd:0b:7d:f4:9b:dd:57:9e:a2:2d:f1:c5:ab:b4:f2:c7:3e:6f: 00:17:3f:2d:eb:1b:2c:c4:0e:ec:9e:31:67:3c:c7:13:31:4f: 81:20:8f:02:e3:e9:0e:30:a6:60:3e:81:e2:a0:2a:09:61:a2: 20:ab:a5:0f:9c:29:db:90:ad:f9:17:b4:24:f6:89:91:0a:a5: ae:c0:cc:95:88:48:33:96:67:b9:77:ed:4f:93:85:c5:ff:c8: d2:27:32:02:c9:e7:91:9b:64:c6:5b:df:7d:53:3d:ed:11:f2: 46:ff:b2:e2:11:83:04:a2:22:02:66:c3:23:54:7c:cd:14:cd: 17:b6:c4:c3:55:e0:06:b3:18:71:c9:ab:e3:39:3d:6f:7a:7f: 79:62:e5:63:66:b5:b7:5b:d3:e9:78:6d:53:f9:4f:7f:bb:70: a1:44:66:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLD+07j1lZ5F9wUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ODQ5MGUzMTgtOWRiZC00OWY4LWFlNjctYmU0MWI1YjZjZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhrLQqB8oo3LffW9a6RuKvY9uKTedfDagWq6 86r4oXM6A2fn3BKfD1IeYLkJpLQ5GSnIv0l4p788OGsIwuppoW1EKgAw/vEFm2fQ rIK9ghYlNWlGPVXMHYK+S4Xxanb7qHHKNpSGcFXxYfD8enLtjqX8Y7IjySdKZaUq B7G7nVeBZrkoNcYzGMK5n9VSFR0UTlggqW9YuBbj3ikTyGHucbw9blIOJGVMtTF9 +U5R+U97OZCOTo+2pak+xXJluEONzS9rdv55xOaANyWF6aYeD0cjFdqYHQfL6cR1 ZsWSI4KDsL8YaTNpygnNV8p8qQjP5Ffeuyx42woGHzbUVMbKdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmvzMkMPrPoPq+3XfQ5huIUg3mqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTFkZTBmOTAtZDA0Yi0z ZWU1LThjZDktOGRlNTE3NTQyYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwM3c0QrfyRYcDENdETYi84fofGWuQQABLR6jmdlDFqA5s6UFxMEZTN Mhn/yhnHU1TIqRN0y0LvD2jwcRwUzh4oPB7Fct8uOrPT1ODhP02kplIZB+biiHmF Bc0LffSb3Veeoi3xxau08sc+bwAXPy3rGyzEDuyeMWc8xxMxT4EgjwLj6Q4wpmA+ geKgKglhoiCrpQ+cKduQrfkXtCT2iZEKpa7AzJWISDOWZ7l37U+ThcX/yNInMgLJ 55GbZMZb331TPe0R8kb/suIRgwSiIgJmwyNUfM0UzRe2xMNV4AazGHHJq+M5PW96 f3li5WNmtbdb0+l4bVP5T3+7cKFEZt4= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:21 2025 by rpki-client