$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6952396b-a10f-3821-b98d-b381344b9d00.roa File: 6952396b-a10f-3821-b98d-b381344b9d00.roa (raw, json) Hash identifier: +qEPwOqho2dOxT/WusF6lqgH92MrbYxl+Wuqfrkfg28= Subject key identifier: EC:7A:BE:82:79:F8:FB:15:35:6C:D4:61:99:43:82:DD:64:26:68:A4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B05E141B90A1D0C24EF64A280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6952396b-a10f-3821-b98d-b381344b9d00.roa Signing time: Sat 30 Aug 2025 01:00:34 +0000 ROA not before: Sat 30 Aug 2025 01:00:34 +0000 ROA not after: Fri 28 Nov 2025 02:00:34 +0000 asID: 8069 IP address blocks: 20.153.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:e1:41:b9:0a:1d:0c:24:ef:64:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 30 01:00:34 2025 GMT Not After : Nov 28 02:00:34 2025 GMT Subject: CN=a750d9c8-2c27-40ab-bbdc-49596f0f687b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8d:bb:96:b2:a8:cf:d6:f1:27:31:20:ca:40: a4:ed:77:cf:6e:bc:ff:85:2f:cd:71:9d:6d:55:b8: 33:dd:4c:e7:69:56:a5:54:65:f8:f4:39:e7:cd:9b: 29:1e:dd:df:1f:9d:81:14:8e:4c:5f:0a:a7:55:34: cf:75:15:c8:c7:21:df:85:a2:78:45:61:7a:99:b5: ba:51:05:ad:53:b8:76:89:e3:37:0c:b2:3f:99:d3: e6:ce:3c:a3:11:e1:a6:f6:3a:1f:93:21:18:7f:03: 42:77:e9:e8:d1:53:16:41:45:ac:8e:37:a0:24:03: 83:07:5c:d5:d1:73:20:71:e3:58:99:a7:70:f3:77: 46:a0:16:d6:0c:12:ce:51:c2:20:69:6e:97:18:4b: a5:a7:56:60:e0:27:6a:aa:5b:24:59:11:44:c1:ee: a0:78:b5:db:dc:fc:5c:3c:98:9c:2b:b0:92:9e:7c: 0e:25:09:d9:54:6a:d7:ed:18:f4:39:75:1a:01:66: de:b2:8a:50:38:96:7d:e8:12:a5:8e:61:2a:48:62: be:8e:0e:db:65:9a:f8:52:c7:b3:49:d7:9b:4f:99: 64:78:96:f3:35:a6:b1:72:96:ae:47:69:89:a7:21: d9:45:42:ac:a7:ec:a0:d2:ff:b9:20:48:c5:64:91: b6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7A:BE:82:79:F8:FB:15:35:6C:D4:61:99:43:82:DD:64:26:68:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6952396b-a10f-3821-b98d-b381344b9d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c3:cc:2e:95:9c:57:47:d8:88:cb:12:bc:8e:56:5d:a3:08: f4:49:8c:cd:d7:c5:b1:6b:07:6a:19:27:2b:94:b8:16:0a:76: 39:2e:f5:86:3d:51:26:0f:c3:c0:3a:73:bd:a3:e4:38:b6:e2: 7e:34:df:b3:68:d0:c1:2d:62:ca:3b:1f:f7:76:38:6c:31:4c: dc:5f:04:5e:4d:21:cc:73:23:23:d6:23:0c:42:a9:0f:24:81: 5e:d9:3d:49:f8:79:eb:01:38:aa:e4:75:0e:ee:e4:6a:33:9c: e6:1e:d8:d8:db:7f:1a:96:2e:76:9d:a3:58:96:d5:53:d5:90: 27:05:ad:57:17:37:6f:e3:ba:ad:82:6f:ce:35:0e:9f:74:d2: b6:38:d6:93:95:e6:29:11:2c:a7:45:b9:7c:8f:bf:96:19:6c: e5:49:c0:c9:bb:9f:58:7e:f7:11:0c:20:50:46:a2:5c:19:d8: c2:9c:d0:b9:82:c6:22:52:6a:88:d7:7e:21:0f:c2:03:87:90: 14:1f:96:bf:09:32:df:ea:d5:3c:9b:3e:c3:df:5c:d7:83:d0: 4c:cb:4c:94:cc:f4:8f:c8:58:c2:90:02:ca:1c:5c:da:e2:97: 1c:7a:5d:8e:56:c7:10:22:45:74:ac:8e:df:3f:7e:46:98:44: b7:e4:63:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsF4UG5Ch0MJO9kooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgzMDAxMDAzNFoXDTI1MTEyODAyMDAzNFowLzEtMCsGA1UEAxMk YTc1MGQ5YzgtMmMyNy00MGFiLWJiZGMtNDk1OTZmMGY2ODdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY27lrKoz9bxJzEgykCk7XfPbrz/hS/NcZ1t Vbgz3UznaValVGX49DnnzZspHt3fH52BFI5MXwqnVTTPdRXIxyHfhaJ4RWF6mbW6 UQWtU7h2ieM3DLI/mdPmzjyjEeGm9jofkyEYfwNCd+no0VMWQUWsjjegJAODB1zV 0XMgceNYmadw83dGoBbWDBLOUcIgaW6XGEulp1Zg4CdqqlskWRFEwe6geLXb3Pxc PJicK7CSnnwOJQnZVGrX7Rj0OXUaAWbesopQOJZ96BKljmEqSGK+jg7bZZr4Usez SdebT5lkeJbzNaaxcpauR2mJpyHZRUKsp+yg0v+5IEjFZJG2aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOx6voJ5+PsVNWzUYZlDgt1kJmikMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjk1MjM5NmItYTEwZi0z ODIxLWI5OGQtYjM4MTM0NGI5ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjDzC6VnFdH2IjLEryOVl2jCPRJjM3XxbFrB2oZJyuUuBYKdjku9YY9 USYPw8A6c72j5Di24n4037No0MEtYso7H/d2OGwxTNxfBF5NIcxzIyPWIwxCqQ8k gV7ZPUn4eesBOKrkdQ7u5GoznOYe2NjbfxqWLnado1iW1VPVkCcFrVcXN2/juq2C b841Dp900rY41pOV5ikRLKdFuXyPv5YZbOVJwMm7n1h+9xEMIFBGolwZ2MKc0LmC xiJSaojXfiEPwgOHkBQflr8JMt/q1TybPsPfXNeD0EzLTJTM9I/IWMKQAsocXNri lxx6XY5WxxAiRXSsjt8/fkaYRLfkYwg= -----END CERTIFICATE-----Generated at Mon Oct 20 16:00:07 2025 by rpki-client