$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65df7823-ba47-3444-b05e-486205632b0f.roa File: 65df7823-ba47-3444-b05e-486205632b0f.roa (raw, json) Hash identifier: qGp0LpreKveu0GTuUFzdm3EYCFqwc/+gdUVWDTbJtms= Subject key identifier: 2D:29:98:53:22:36:CC:0E:D2:A9:C0:80:14:71:1C:7B:80:45:AD:9D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF6868FD785372D3FB4909700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65df7823-ba47-3444-b05e-486205632b0f.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.157.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:8f:d7:85:37:2d:3f:b4:90:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=0a25fb3d-6f2e-4a27-b4ae-6e7680be47de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9e:76:5a:bb:26:73:74:93:78:be:89:06:c8: bb:52:50:4d:1c:f9:16:2d:69:f7:91:01:7a:96:96: 67:0d:37:7b:12:cf:bc:64:65:87:34:f8:43:90:15: 7e:df:9b:3d:0a:42:4e:2a:27:ba:e3:a7:0c:3a:44: f7:99:ad:ac:9e:f5:75:ce:6c:22:46:d4:99:d4:4f: 83:3a:b1:37:ba:c3:94:21:4c:31:4f:5a:9c:bf:f3: f5:b3:ea:70:04:90:65:70:36:e7:23:2a:8b:e3:19: 9e:8e:df:34:d4:d3:d1:36:1d:8f:00:f2:76:fb:37: 7a:a9:f3:ef:49:dc:e8:b3:09:00:b8:4e:0a:fb:d1: 96:51:7d:2b:ee:10:c6:51:72:5d:01:55:85:ad:72: aa:04:69:a8:fe:2c:d7:91:7e:4b:db:b7:1b:82:53: 96:71:31:df:25:1b:a5:27:82:34:69:62:af:6c:d2: 87:47:5b:29:40:c8:4d:b3:5e:9a:27:c4:30:95:60: 07:8e:69:2e:a6:5d:81:42:44:13:37:25:fd:a9:f3: 7d:f6:9f:47:85:90:7a:e6:b8:8f:72:d1:8d:4a:44: ed:50:64:7d:62:21:97:ad:be:f4:01:ac:fd:83:7b: c1:ca:d6:f3:9e:f2:60:49:0e:58:02:ef:7f:a3:c0: bb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:29:98:53:22:36:CC:0E:D2:A9:C0:80:14:71:1C:7B:80:45:AD:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65df7823-ba47-3444-b05e-486205632b0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:8a:eb:4e:9e:5a:51:2d:65:b2:08:1a:fe:67:7f:09:6c:fe: 21:c6:cf:37:0a:c9:77:ab:8a:22:d8:30:3e:ff:dc:3d:64:7e: 1b:a9:f6:47:44:ad:2c:cc:48:b1:36:61:cf:f2:a1:67:6d:6e: d1:ea:25:e6:5a:e3:51:74:a7:31:a8:3e:c7:db:02:3d:c8:26: 89:cb:aa:b4:02:11:77:2d:c8:d0:c0:dd:14:5e:2b:12:ba:43: ab:55:82:fb:fb:e8:f0:4e:eb:7a:30:41:2d:c8:b4:c4:71:61: 65:02:d8:f5:5c:99:8d:4d:dc:7e:9f:0b:69:8c:e8:a8:66:73: 07:e3:4c:6a:3d:be:ee:de:91:fc:3a:d9:62:d0:6a:be:45:3a: 34:55:ac:89:7b:21:e3:fc:df:f5:b5:04:5f:dc:81:0a:f4:45: 1e:ea:fe:42:fd:97:7f:e2:cc:7d:e8:d4:3a:b7:ff:98:52:b6: fa:c9:63:9c:5f:a3:fa:e2:6a:cc:d3:7f:c9:3f:37:fb:97:25: cb:e9:4b:8a:33:e8:dc:72:02:af:8e:ca:e9:2d:5a:d8:8f:04: 11:96:14:f9:39:35:91:20:1f:69:71:1e:9d:67:32:09:37:a0: 99:dc:54:f9:d9:0d:48:1e:bc:73:85:73:9e:de:16:59:cb:25: 75:23:a1:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2ho/XhTctP7SQlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk MGEyNWZiM2QtNmYyZS00YTI3LWI0YWUtNmU3NjgwYmU0N2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ52Wrsmc3STeL6JBsi7UlBNHPkWLWn3kQF6 lpZnDTd7Es+8ZGWHNPhDkBV+35s9CkJOKie646cMOkT3ma2snvV1zmwiRtSZ1E+D OrE3usOUIUwxT1qcv/P1s+pwBJBlcDbnIyqL4xmejt801NPRNh2PAPJ2+zd6qfPv SdzoswkAuE4K+9GWUX0r7hDGUXJdAVWFrXKqBGmo/izXkX5L27cbglOWcTHfJRul J4I0aWKvbNKHR1spQMhNs16aJ8QwlWAHjmkupl2BQkQTNyX9qfN99p9HhZB65riP ctGNSkTtUGR9YiGXrb70Aaz9g3vBytbznvJgSQ5YAu9/o8C7ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0pmFMiNswO0qnAgBRxHHuARa2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjVkZjc4MjMtYmE0Ny0z NDQ0LWIwNWUtNDg2MjA1NjMyYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWK606eWlEtZbIIGv5nfwls/iHGzzcKyXeriiLYMD7/3D1kfhup9kdE rSzMSLE2Yc/yoWdtbtHqJeZa41F0pzGoPsfbAj3IJonLqrQCEXctyNDA3RReKxK6 Q6tVgvv76PBO63owQS3ItMRxYWUC2PVcmY1N3H6fC2mM6KhmcwfjTGo9vu7ekfw6 2WLQar5FOjRVrIl7IeP83/W1BF/cgQr0RR7q/kL9l3/izH3o1Dq3/5hStvrJY5xf o/riaszTf8k/N/uXJcvpS4oz6NxyAq+OyuktWtiPBBGWFPk5NZEgH2lxHp1nMgk3 oJncVPnZDUgevHOFc57eFlnLJXUjoV4= -----END CERTIFICATE-----Generated at Tue Aug 26 06:48:37 2025 by rpki-client