$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f677773a-b10a-380d-a881-4cc73b5bed13.roa File: f677773a-b10a-380d-a881-4cc73b5bed13.roa (raw, json) Hash identifier: AOyxqQvpJ6vJ3G8TOalAFsa+RdaXdmp6hMOuVV+W4IY= Subject key identifier: 9A:79:F0:C6:D2:9E:6F:00:80:76:1D:35:71:E3:31:87:D4:93:C4:8C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B05E1416245401F69D6D3E0C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f677773a-b10a-380d-a881-4cc73b5bed13.roa Signing time: Sat 30 Aug 2025 01:00:34 +0000 ROA not before: Sat 30 Aug 2025 01:00:34 +0000 ROA not after: Fri 28 Nov 2025 02:00:34 +0000 asID: 8069 IP address blocks: 20.153.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:e1:41:62:45:40:1f:69:d6:d3:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 30 01:00:34 2025 GMT Not After : Nov 28 02:00:34 2025 GMT Subject: CN=a209a343-94a1-455f-9029-418ad15271f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:63:55:f6:51:71:15:a7:5b:14:24:6c:ac:db: af:0b:4d:95:37:51:15:5b:8d:92:38:2e:fd:7b:65: cd:ce:a6:80:ca:0c:2b:6d:cd:45:e1:be:c3:d2:3a: e5:bb:13:ce:58:dc:28:9b:46:6a:16:91:1e:37:94: c7:e8:88:a6:6d:d6:8d:67:3a:37:50:e8:39:be:37: 32:14:a1:90:c8:3a:07:c4:6a:6d:74:f4:64:2a:12: 5a:ab:16:bc:c6:b0:80:a6:34:c5:41:72:02:0b:40: 72:2f:74:6e:b6:cf:d1:0a:b2:89:2c:ee:34:e3:72: 2d:0d:06:3f:6a:1b:57:d6:3d:22:30:4b:76:b0:d6: 9f:d3:8e:a7:00:ec:50:1e:df:0f:88:f6:61:87:2e: 3f:6c:e5:38:c7:e2:01:a4:28:3b:e4:54:32:65:0d: f9:3d:0e:55:f4:ae:90:0f:25:fe:e3:5d:6e:f9:75: a9:9b:d2:bb:d6:83:cc:ff:5f:30:37:a7:0f:3c:28: ce:04:b9:0f:46:86:09:99:91:fc:66:1a:5b:cc:10: 13:2c:33:99:9e:e2:c1:bd:4a:9e:40:eb:b8:11:c5: f3:c7:45:94:65:27:e0:50:81:be:05:a8:c4:39:cd: ba:63:72:b6:9b:19:d1:6f:81:d5:ac:0b:1a:d2:ba: 61:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:79:F0:C6:D2:9E:6F:00:80:76:1D:35:71:E3:31:87:D4:93:C4:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f677773a-b10a-380d-a881-4cc73b5bed13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:f1:26:92:86:d7:3f:ab:0b:25:be:c5:d1:0d:dc:b8:2f:b6: d7:b1:44:d7:9a:20:4d:8c:2f:1f:49:f6:8d:1b:50:00:53:e6: 24:66:5f:82:bd:a3:70:2d:50:1c:90:ac:8c:23:ba:dc:d2:4e: 6b:d2:88:a8:22:c9:39:72:6b:06:8e:8c:fc:ec:e9:00:c5:47: f6:44:3d:99:1a:fc:9c:6c:3b:b4:fe:ea:f8:89:80:6e:c1:f0: 64:ba:24:e9:32:e9:49:19:f3:82:20:0f:7b:89:cf:fc:cc:fe: ee:15:db:25:64:48:13:14:49:fe:1d:ef:a4:ba:72:43:20:e0: d8:a9:5b:ad:c6:a0:16:a3:d4:db:68:38:58:4f:88:ac:45:4c: 1d:c1:34:92:17:7c:fc:f4:d5:9c:ae:d2:08:46:19:0a:ca:12: 71:9b:b4:c8:32:34:6f:f4:80:7b:98:ac:8b:ed:6a:03:78:39: b8:64:ce:59:e9:9c:10:8f:17:0e:18:55:98:bf:ec:a8:a4:be: de:5a:ec:a4:48:48:d0:12:79:a8:5c:8c:29:a6:bc:09:90:12: ac:9e:4a:a2:0c:fd:d6:9d:92:bb:ee:96:c6:27:ae:6f:0d:f2: d1:bd:07:8a:c3:fe:f2:ad:e7:00:cb:c3:60:f5:55:fd:61:9e: 90:ec:1e:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsF4UFiRUAfadbT4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgzMDAxMDAzNFoXDTI1MTEyODAyMDAzNFowLzEtMCsGA1UEAxMk YTIwOWEzNDMtOTRhMS00NTVmLTkwMjktNDE4YWQxNTI3MWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GNV9lFxFadbFCRsrNuvC02VN1EVW42SOC79 e2XNzqaAygwrbc1F4b7D0jrluxPOWNwom0ZqFpEeN5TH6IimbdaNZzo3UOg5vjcy FKGQyDoHxGptdPRkKhJaqxa8xrCApjTFQXICC0ByL3Ruts/RCrKJLO4043ItDQY/ ahtX1j0iMEt2sNaf046nAOxQHt8PiPZhhy4/bOU4x+IBpCg75FQyZQ35PQ5V9K6Q DyX+411u+XWpm9K71oPM/18wN6cPPCjOBLkPRoYJmZH8ZhpbzBATLDOZnuLBvUqe QOu4EcXzx0WUZSfgUIG+BajEOc26Y3K2mxnRb4HVrAsa0rphlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJp58MbSnm8AgHYdNXHjMYfUk8SMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjY3Nzc3M2EtYjEwYS0z ODBkLWE4ODEtNGNjNzNiNWJlZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJnjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXxJpKG1z+rCyW+xdEN3LgvttexRNeaIE2MLx9J9o0bUABT5iRmX4K9 o3AtUByQrIwjutzSTmvSiKgiyTlyawaOjPzs6QDFR/ZEPZka/JxsO7T+6viJgG7B 8GS6JOky6UkZ84IgD3uJz/zM/u4V2yVkSBMUSf4d76S6ckMg4NipW63GoBaj1Nto OFhPiKxFTB3BNJIXfPz01Zyu0ghGGQrKEnGbtMgyNG/0gHuYrIvtagN4Obhkzlnp nBCPFw4YVZi/7Kikvt5a7KRISNASeahcjCmmvAmQEqyeSqIM/dadkrvulsYnrm8N 8tG9B4rD/vKt5wDLw2D1Vf1hnpDsHuY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:28 2025 by rpki-client