$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2799286e-a51a-3044-bd67-9ee123f7108f.roa File: 2799286e-a51a-3044-bd67-9ee123f7108f.roa (raw, json) Hash identifier: 4iAfngiBMYROaveVP9bJHm57cJEBB3qYEWfRAwVhKhw= Subject key identifier: 63:64:13:DC:18:63:EC:13:8E:BD:78:A0:03:04:F8:1A:6B:15:92:BD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B05E1412B030AD0F667786E80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2799286e-a51a-3044-bd67-9ee123f7108f.roa Signing time: Sat 30 Aug 2025 01:00:34 +0000 ROA not before: Sat 30 Aug 2025 01:00:34 +0000 ROA not after: Fri 28 Nov 2025 02:00:34 +0000 asID: 8069 IP address blocks: 20.153.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:e1:41:2b:03:0a:d0:f6:67:78:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 30 01:00:34 2025 GMT Not After : Nov 28 02:00:34 2025 GMT Subject: CN=270c41e5-92d1-46c0-84ee-fec4efb911c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:49:de:66:6f:80:e2:53:0e:8a:d2:75:86:d8: 16:06:6d:c6:fa:9f:26:dd:b4:ea:45:43:97:de:f4: 7f:ff:2f:d0:58:a7:17:24:35:b6:37:4b:8a:84:28: 61:94:af:12:d3:53:89:08:0a:26:f6:05:a4:7c:40: a8:02:5e:0b:4c:5b:fc:33:17:e2:4e:5a:b3:de:f7: 0c:86:3e:e2:e3:18:b1:eb:69:7d:fa:25:51:90:92: 49:1b:ec:fa:13:39:29:6a:43:4a:f1:8a:b1:d3:d9: e9:27:c4:d6:b4:34:58:95:7e:53:15:e3:d4:42:3d: 26:87:be:93:86:65:e9:bf:41:62:7f:af:45:1b:fc: f0:6a:cd:be:9b:5d:df:c7:ef:75:ea:90:02:51:b5: 80:79:9d:f7:1c:c5:a6:df:a1:6b:bf:c5:a3:ba:7d: bf:6e:b1:9f:30:cd:f7:95:f2:25:bb:25:f3:eb:3f: 96:f6:ce:eb:b4:6b:ef:9f:f3:a1:86:7d:bf:be:bb: 06:5d:52:64:ea:82:08:54:4c:12:de:ef:8b:a5:63: 53:a2:1b:92:d0:df:a3:02:b5:10:f2:11:b4:69:db: f4:c0:21:aa:28:b7:a9:79:eb:d9:68:33:60:15:79: b1:0b:6c:48:d2:f6:89:5d:19:54:00:9b:17:ba:a7: fd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:64:13:DC:18:63:EC:13:8E:BD:78:A0:03:04:F8:1A:6B:15:92:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2799286e-a51a-3044-bd67-9ee123f7108f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b9:00:08:18:f4:08:6c:87:95:55:2b:32:2e:bb:f5:21:5f: dc:72:af:fe:40:ad:b5:51:b9:17:3a:00:fd:49:35:f9:be:e5: 9a:23:4e:08:81:ec:3d:61:62:04:a0:78:1a:ca:68:bf:73:f2: 1c:9c:58:5b:55:a7:2b:81:5c:88:e0:6e:31:92:cd:1b:a8:85: 1c:f7:7e:5c:9f:7c:ea:83:78:90:dd:23:94:ba:41:36:b5:7f: 7c:78:26:87:e1:e4:1d:dc:85:5f:6f:cd:b7:8c:96:26:3f:62: 4f:0e:54:7b:33:d3:04:8e:cc:11:9e:ad:9b:e0:86:61:0f:c0: 4c:53:8c:df:92:a9:de:3d:1f:b3:bb:39:42:12:16:13:25:10: af:1a:20:92:83:ad:42:2f:ab:ad:39:76:18:b9:03:6e:0f:0c: 50:75:38:97:e9:fb:96:99:c9:50:86:15:20:58:04:6c:3d:e7: c4:b2:6b:15:8d:56:55:dd:83:fb:26:10:63:45:a4:89:ef:17: be:c8:5c:09:4d:eb:5c:8e:0b:6c:2e:04:fa:ef:25:79:2f:7d: 83:6f:ba:31:4e:8b:b4:0b:e7:ab:94:3b:72:5e:be:c0:b4:ca: ed:a2:3b:41:f9:9f:53:95:37:a0:e4:84:b8:90:77:19:7c:4a: 6a:b9:ac:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsF4UErAwrQ9md4boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgzMDAxMDAzNFoXDTI1MTEyODAyMDAzNFowLzEtMCsGA1UEAxMk MjcwYzQxZTUtOTJkMS00NmMwLTg0ZWUtZmVjNGVmYjkxMWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUneZm+A4lMOitJ1htgWBm3G+p8m3bTqRUOX 3vR//y/QWKcXJDW2N0uKhChhlK8S01OJCAom9gWkfECoAl4LTFv8MxfiTlqz3vcM hj7i4xix62l9+iVRkJJJG+z6EzkpakNK8Yqx09npJ8TWtDRYlX5TFePUQj0mh76T hmXpv0Fif69FG/zwas2+m13fx+916pACUbWAeZ33HMWm36Frv8Wjun2/brGfMM33 lfIluyXz6z+W9s7rtGvvn/Ohhn2/vrsGXVJk6oIIVEwS3u+LpWNTohuS0N+jArUQ 8hG0adv0wCGqKLepeevZaDNgFXmxC2xI0vaJXRlUAJsXuqf9lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNkE9wYY+wTjr14oAME+BprFZK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjc5OTI4NmUtYTUxYS0z MDQ0LWJkNjctOWVlMTIzZjcxMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJn7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFu5AAgY9Ahsh5VVKzIuu/UhX9xyr/5ArbVRuRc6AP1JNfm+5ZojTgiB 7D1hYgSgeBrKaL9z8hycWFtVpyuBXIjgbjGSzRuohRz3flyffOqDeJDdI5S6QTa1 f3x4Jofh5B3chV9vzbeMliY/Yk8OVHsz0wSOzBGerZvghmEPwExTjN+Sqd49H7O7 OUISFhMlEK8aIJKDrUIvq605dhi5A24PDFB1OJfp+5aZyVCGFSBYBGw958SyaxWN VlXdg/smEGNFpInvF77IXAlN61yOC2wuBPrvJXkvfYNvujFOi7QL56uUO3JevsC0 yu2iO0H5n1OVN6DkhLiQdxl8Smq5rIo= -----END CERTIFICATE-----Generated at Mon Oct 20 04:30:27 2025 by rpki-client