$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9441c3a-aac1-3bca-92fb-30618dd1f2ba.roa File: d9441c3a-aac1-3bca-92fb-30618dd1f2ba.roa (raw, json) Hash identifier: qnE5/mR6sj/rQVmYeqI/o7UvNAQ6Twr3EmAbtakpg9s= Subject key identifier: 70:A8:F1:74:BA:F0:80:F1:82:6B:3C:67:B0:C3:14:B5:C9:A8:94:04 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF68692088E2C24F0953B1D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9441c3a-aac1-3bca-92fb-30618dd1f2ba.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.11.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:92:08:8e:2c:24:f0:95:3b:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=dced316c-30e1-4db5-a4bc-bf2f02efaaee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d3:1f:38:10:fb:cc:bd:b5:b0:60:b3:58:24: e9:f5:63:fd:e6:52:24:1b:1f:f8:44:21:4d:f0:0e: 5a:24:8a:2f:66:ec:d2:26:b9:7b:ea:76:82:d6:61: 23:39:ed:d7:c2:60:86:ab:73:64:87:c9:fb:61:e7: df:06:9c:13:3d:90:68:4d:d5:33:49:1d:3a:b0:5c: 2b:be:fc:fb:45:46:f7:64:f4:18:8f:b8:14:49:fc: 81:33:b4:f5:37:61:c9:b4:50:05:28:6a:c4:4c:b9: 3b:b6:d7:72:a1:cc:eb:a7:6e:25:22:72:b8:6d:be: 4f:c9:20:e3:12:f8:24:df:f6:c6:66:8d:70:88:ac: 7d:91:22:34:b0:2c:18:6f:5c:cc:d0:c7:fc:3d:2c: 62:ea:5f:fe:94:0b:25:45:8a:66:90:01:dc:18:d0: 7a:5c:c5:47:6b:a6:93:64:e2:c2:71:af:0d:08:7a: 15:f7:21:18:82:0c:c0:85:48:87:77:f6:cb:30:0a: eb:e8:1c:31:0a:4f:9d:51:1f:05:52:b9:c0:6d:3b: af:e8:7a:ac:09:07:89:01:05:80:0d:7f:67:3a:62: 20:f0:95:36:fd:05:7a:b6:a3:65:42:c0:21:01:b1: c4:89:70:d2:f7:a4:fa:34:63:5f:8a:f8:69:1e:74: 96:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A8:F1:74:BA:F0:80:F1:82:6B:3C:67:B0:C3:14:B5:C9:A8:94:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9441c3a-aac1-3bca-92fb-30618dd1f2ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.11.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:90:ca:cf:4d:97:39:33:ae:6e:d0:bb:7f:e4:bf:15:3a:0a: 0f:c7:86:88:80:49:be:63:56:4a:f9:9a:77:3e:55:c1:41:5d: 05:4e:5b:3e:ff:da:7e:35:a5:15:9f:a0:0c:ce:9a:c0:3e:ae: 1d:12:c8:15:77:13:e0:20:b3:db:77:4c:57:22:9f:e5:bf:81: 9f:63:3d:90:86:d7:a5:43:c1:98:69:70:06:b3:2c:db:40:e9: f7:c2:d3:17:17:25:c6:22:e5:93:d9:f2:7e:d3:0a:44:c3:f3: db:10:d8:c1:39:ba:34:d5:12:fe:cb:57:73:8e:e7:a7:2e:77: 6a:81:29:cb:a3:da:3e:6f:62:b7:47:09:73:06:b2:73:99:70: 6c:50:69:98:21:7d:37:20:06:f0:55:b3:ad:6b:fd:b1:e7:8c: ac:60:b5:ef:e6:5f:d2:66:10:bd:c3:bf:e4:5f:5e:fc:fd:06: 34:84:a7:b7:35:3c:c2:76:29:40:b5:a8:05:fe:39:65:03:51: 46:0b:ca:45:c2:8c:63:02:3d:22:79:ad:0b:c5:c2:e2:ba:13: fa:1d:ac:93:19:b4:a4:e8:fb:79:a3:41:b2:bf:4f:f1:5c:7b: 04:43:f8:50:11:09:fe:3c:1e:92:d9:e1:6a:3a:22:0c:62:4b: a4:b0:2f:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpIIjiwk8JU7HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZGNlZDMxNmMtMzBlMS00ZGI1LWE0YmMtYmYyZjAyZWZhYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdMfOBD7zL21sGCzWCTp9WP95lIkGx/4RCFN 8A5aJIovZuzSJrl76naC1mEjOe3XwmCGq3Nkh8n7YeffBpwTPZBoTdUzSR06sFwr vvz7RUb3ZPQYj7gUSfyBM7T1N2HJtFAFKGrETLk7ttdyoczrp24lInK4bb5PySDj Evgk3/bGZo1wiKx9kSI0sCwYb1zM0Mf8PSxi6l/+lAslRYpmkAHcGNB6XMVHa6aT ZOLCca8NCHoV9yEYggzAhUiHd/bLMArr6BwxCk+dUR8FUrnAbTuv6HqsCQeJAQWA DX9nOmIg8JU2/QV6tqNlQsAhAbHEiXDS96T6NGNfivhpHnSWqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCo8XS68IDxgms8Z7DDFLXJqJQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDk0NDFjM2EtYWFjMS0z YmNhLTkyZmItMzA2MThkZDFmMmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFAutMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqQys9Nlzkzrm7Qu3/kvxU6Cg/HhoiASb5jVkr5mnc+VcFBXQVOWz7/ 2n41pRWfoAzOmsA+rh0SyBV3E+Ags9t3TFcin+W/gZ9jPZCG16VDwZhpcAazLNtA 6ffC0xcXJcYi5ZPZ8n7TCkTD89sQ2ME5ujTVEv7LV3OO56cud2qBKcuj2j5vYrdH CXMGsnOZcGxQaZghfTcgBvBVs61r/bHnjKxgte/mX9JmEL3Dv+RfXvz9BjSEp7c1 PMJ2KUC1qAX+OWUDUUYLykXCjGMCPSJ5rQvFwuK6E/odrJMZtKTo+3mjQbK/T/Fc ewRD+FARCf48HpLZ4Wo6IgxiS6SwL0I= -----END CERTIFICATE-----Generated at Tue Aug 26 06:33:09 2025 by rpki-client