$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa File: 6986273c-343b-39c2-9dd1-bb8ca363c568.roa (raw, json) Hash identifier: nGDRx6KwNM28VHJGh3TQe833w5U8cjiKy9nMlFvwLoA= Subject key identifier: 92:0F:63:96:D0:67:75:05:0E:A5:70:84:A8:AD:8F:8B:48:EB:04:E4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF686907CD9DA9B5A1C1D2D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 40.87.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:90:7c:d9:da:9b:5a:1c:1d:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=51b36da5-0bed-4ab0-84b1-9352b01e6c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:a1:ba:8f:4c:d5:fa:f4:47:6a:cb:42:e0: d5:46:05:47:07:a2:57:9f:45:df:9d:b5:b8:65:a0: 96:11:a9:2c:25:fd:e1:a6:95:64:a0:5a:96:03:fd: ee:50:d2:48:1a:43:cd:99:b4:67:14:7d:33:1f:a9: ce:b1:12:40:4f:50:f9:4d:74:0d:9e:a6:54:e7:15: 4a:b1:a8:7d:f6:d3:d8:6c:85:34:91:9d:ed:a2:c9: eb:91:0e:41:58:e0:93:02:98:65:d2:07:bd:34:82: c5:0d:ad:44:3b:8d:75:39:1f:56:fe:35:5c:87:61: 4e:5d:ae:8e:02:9b:b1:a0:e4:e6:9b:46:9a:95:c0: 3c:a2:51:ad:c3:b1:09:f8:fd:25:f8:55:eb:da:93: 98:06:fb:7b:fb:6d:aa:52:80:b2:fe:6e:fb:82:28: 13:83:f6:ea:85:c1:e3:49:3f:33:ca:56:59:c8:0a: 0a:84:bc:02:62:8c:de:a6:03:31:6f:18:0a:7f:1c: 50:e7:0d:3a:cb:cb:10:1f:52:ee:1a:04:d3:f7:1a: 83:13:95:3d:d7:53:fa:ad:42:e3:5d:fc:64:c6:9d: 6e:8d:3d:72:a2:2a:73:8d:e6:33:96:91:0f:87:0d: a6:28:42:94:25:fa:b2:0f:c0:45:8c:59:c0:f1:be: 8f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0F:63:96:D0:67:75:05:0E:A5:70:84:A8:AD:8F:8B:48:EB:04:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.87.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:5b:42:e3:cb:98:c2:91:d8:3e:ff:b5:28:3d:b9:1a:3d:e1: 44:de:72:d4:1a:5b:8c:58:78:fb:93:c6:b2:34:b2:ca:ac:08: ba:50:cc:8b:6f:64:4a:33:25:16:88:65:a7:71:8b:66:64:93: 66:e5:68:4d:03:97:d1:bc:ae:a7:45:54:3e:3d:ce:30:27:ad: fc:60:51:d2:09:70:6d:64:0e:69:b0:8b:10:89:63:bf:e1:70: f7:25:f7:45:9d:62:5d:58:61:83:f8:6f:b0:30:94:44:d5:bc: 71:45:9a:ab:2c:74:d3:0e:ae:41:98:38:47:e4:0a:7a:73:d5: 96:f6:e5:49:e9:ea:b9:d1:ab:80:20:92:a4:2f:31:4f:c6:5e: b8:42:66:1c:4f:7a:f4:02:55:54:b9:be:c7:55:33:c5:e4:43: d8:68:ed:55:05:0d:16:c5:4e:24:3d:6f:24:49:ff:f8:35:f2: 58:0d:ec:ad:94:1f:94:b1:be:31:e4:ea:d9:21:cf:02:22:4a: 94:a5:d8:1b:98:cb:05:ec:85:68:66:3d:3d:71:bc:5a:17:0f: 60:84:d2:da:1b:72:c2:11:55:5a:53:b1:64:fd:f0:f0:65:e3: bc:a1:3f:75:13:7b:8a:dd:11:87:23:5e:8b:12:85:6b:6d:5e: 33:32:6f:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpB82dqbWhwdLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk NTFiMzZkYTUtMGJlZC00YWIwLTg0YjEtOTM1MmIwMWU2YzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfqhuo9M1fr0R2rLQuDVRgVHB6JXn0XfnbW4 ZaCWEaksJf3hppVkoFqWA/3uUNJIGkPNmbRnFH0zH6nOsRJAT1D5TXQNnqZU5xVK sah99tPYbIU0kZ3tosnrkQ5BWOCTAphl0ge9NILFDa1EO411OR9W/jVch2FOXa6O ApuxoOTmm0aalcA8olGtw7EJ+P0l+FXr2pOYBvt7+22qUoCy/m77gigTg/bqhcHj ST8zylZZyAoKhLwCYozepgMxbxgKfxxQ5w06y8sQH1LuGgTT9xqDE5U911P6rULj Xfxkxp1ujT1yoipzjeYzlpEPhw2mKEKUJfqyD8BFjFnA8b6PDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIPY5bQZ3UFDqVwhKitj4tI6wTkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjk4NjI3M2MtMzQzYi0z OWMyLTlkZDEtYmI4Y2EzNjNjNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKFcnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARbQuPLmMKR2D7/tSg9uRo94UTectQaW4xYePuTxrI0ssqsCLpQzItv ZEozJRaIZadxi2Zkk2blaE0Dl9G8rqdFVD49zjAnrfxgUdIJcG1kDmmwixCJY7/h cPcl90WdYl1YYYP4b7AwlETVvHFFmqssdNMOrkGYOEfkCnpz1Zb25Unp6rnRq4Ag kqQvMU/GXrhCZhxPevQCVVS5vsdVM8XkQ9ho7VUFDRbFTiQ9byRJ//g18lgN7K2U H5SxvjHk6tkhzwIiSpSl2BuYywXshWhmPT1xvFoXD2CE0tobcsIRVVpTsWT98PBl 47yhP3UTe4rdEYcjXosShWttXjMyb+k= -----END CERTIFICATE-----Generated at Tue Aug 26 06:48:13 2025 by rpki-client