$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa File: dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa (raw, json) Hash identifier: Wh7ZXqVFvTLqPXuoNrXuoTX3WXNMcxKviIenIKJt5wk= Subject key identifier: 91:B8:5E:43:E1:EA:C7:63:C6:31:8E:7A:87:AC:A7:40:F1:39:6F:00 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B2A2C3F79D2E67763D99528C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.157.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3f:79:d2:e6:77:63:d9:95:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=edff368e-66c0-4ae9-bb2d-616471f115dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:e5:99:a9:a7:fb:d6:78:8f:70:af:00:a7: 81:ed:e5:d7:1d:c8:5e:f1:a9:54:c5:07:01:e2:df: 70:ac:67:88:1c:7b:aa:f2:bb:5c:20:9c:08:92:94: e5:08:f7:b9:12:f4:f2:46:b9:ad:45:bf:2d:00:68: 4a:3f:91:42:b6:46:ef:cf:3c:5d:de:86:c5:ab:a6: b0:a9:6c:18:26:b4:ee:e6:ec:14:2a:4d:8b:bd:fd: f8:30:7e:62:87:93:91:47:52:3c:01:4b:34:fe:f7: 51:59:80:b0:73:ee:35:9f:b6:bc:98:74:f1:14:3b: fd:ed:19:53:0b:a0:34:bf:eb:9b:1d:df:bc:84:87: c6:a3:b0:1f:54:7f:d0:c0:bc:fb:fe:e9:41:4c:6a: 42:a1:9c:75:7c:3e:4c:37:2b:9e:01:8d:d9:f7:db: 43:4a:3d:78:c9:57:c1:90:4a:b9:86:fc:ee:fd:89: a5:6b:05:b0:a8:7b:36:44:0b:fc:30:83:78:69:24: e5:84:e2:0b:86:1a:69:b2:9e:5e:fc:bd:fd:8b:e2: 8a:83:2c:00:0e:0e:60:d8:40:b6:76:35:e3:6f:72: 8b:d0:e8:d8:31:0d:a4:61:0a:63:20:c6:77:71:3a: 51:79:76:99:db:90:e9:d1:23:db:9b:da:e3:1d:b6: 39:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B8:5E:43:E1:EA:C7:63:C6:31:8E:7A:87:AC:A7:40:F1:39:6F:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:cd:31:b4:2f:b0:2d:54:79:52:fd:15:6e:ec:79:7e:29:3c: 8a:a9:de:2d:ff:fc:a5:97:81:d1:12:3f:c9:21:7d:7a:a3:04: 4e:89:9d:60:ea:d2:55:fe:df:8d:69:4c:e9:fa:bb:e6:78:44: d0:b0:93:48:21:37:d6:36:40:d8:82:4b:4b:a6:b8:03:2b:a0: f8:48:3b:f6:cc:15:a0:d9:36:9d:5c:8d:83:e3:e9:63:3e:9d: 57:58:75:0b:92:7e:79:e0:cb:1c:2b:b5:13:7d:b3:33:0a:5a: 98:c9:6f:9e:f6:34:30:87:0f:3c:33:3b:c3:ac:5d:cf:bb:22: 30:34:54:31:a3:9e:a2:85:53:35:15:ef:f1:c7:d8:dd:70:1c: 48:cd:39:3c:56:40:47:4b:ad:be:c8:8c:b4:ac:0c:0d:e3:f0: b7:15:ff:59:70:1c:f0:a3:29:33:1a:67:0d:d6:d6:32:d7:7c: 76:e0:6f:cf:d8:89:3d:82:45:0f:59:ff:e5:ad:f6:c4:d3:ab: 39:d7:e5:54:ec:b6:ca:b4:cf:66:29:b6:c7:30:33:30:db:f4: 37:6d:62:cb:8f:eb:95:82:8a:0e:66:33:d8:07:94:2c:c1:26: 61:8b:fd:b6:d8:26:44:8c:1a:b1:4e:35:10:b5:e2:67:5a:76: c8:fc:96:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLD950uZ3Y9mVKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZWRmZjM2OGUtNjZjMC00YWU5LWJiMmQtNjE2NDcxZjExNWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUflmamn+9Z4j3CvAKeB7eXXHche8alUxQcB 4t9wrGeIHHuq8rtcIJwIkpTlCPe5EvTyRrmtRb8tAGhKP5FCtkbvzzxd3obFq6aw qWwYJrTu5uwUKk2Lvf34MH5ih5ORR1I8AUs0/vdRWYCwc+41n7a8mHTxFDv97RlT C6A0v+ubHd+8hIfGo7AfVH/QwLz7/ulBTGpCoZx1fD5MNyueAY3Z99tDSj14yVfB kEq5hvzu/YmlawWwqHs2RAv8MIN4aSTlhOILhhppsp5e/L39i+KKgywADg5g2EC2 djXjb3KL0OjYMQ2kYQpjIMZ3cTpReXaZ25Dp0SPbm9rjHbY5CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG4XkPh6sdjxjGOeoesp0DxOW8AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGJlMWVhMmEtNTVhYS0z MWY2LThjZWMtYmZhZGUwMzc3MmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHNMbQvsC1UeVL9FW7seX4pPIqp3i3//KWXgdESP8khfXqjBE6JnWDq 0lX+341pTOn6u+Z4RNCwk0ghN9Y2QNiCS0umuAMroPhIO/bMFaDZNp1cjYPj6WM+ nVdYdQuSfnngyxwrtRN9szMKWpjJb572NDCHDzwzO8OsXc+7IjA0VDGjnqKFUzUV 7/HH2N1wHEjNOTxWQEdLrb7IjLSsDA3j8LcV/1lwHPCjKTMaZw3W1jLXfHbgb8/Y iT2CRQ9Z/+Wt9sTTqznX5VTstsq0z2YptscwMzDb9DdtYsuP65WCig5mM9gHlCzB JmGL/bbYJkSMGrFONRC14mdadsj8ltw= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:19 2025 by rpki-client