$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa File: 344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa (raw, json) Hash identifier: xhkvI4rYANsAzLuhXvhk9f4iVDms8ioyOAAkcfcA5cQ= Subject key identifier: 4D:CE:D7:38:42:AC:32:81:E6:60:01:D4:D4:8D:A9:61:94:FA:27:13 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51AF42295D9B7221B66F40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.157.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:af:42:29:5d:9b:72:21:b6:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=5c3be33e-78b9-4a2f-ae89-cb6f5db00a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d8:66:65:19:34:58:9c:24:0e:a8:7e:80:fc: 17:dd:a8:8b:1c:14:67:f7:d1:22:02:28:48:82:17: 5c:0e:9a:4a:c6:f0:e5:1e:6d:f4:ce:55:cd:75:e4: 7a:80:d6:83:48:e2:64:f2:d6:92:ff:48:1b:4b:d0: 89:54:c7:66:95:51:13:fa:34:4f:ca:83:e3:9c:a3: 39:fe:30:15:98:ba:59:f1:cc:aa:06:0b:b5:29:c0: fa:47:01:f3:c8:3d:0e:0f:4e:e6:36:e2:18:40:89: 52:a3:12:11:69:0a:cd:c8:a4:22:cf:64:5e:53:81: 14:f0:32:d3:05:3e:40:4b:e5:39:ae:f5:15:08:74: 27:a8:7a:a6:6b:76:28:79:44:aa:04:ab:d1:5c:a0: 0d:8a:e1:e4:06:c4:af:02:cc:6e:ab:34:e2:35:c5: 25:ca:8e:9f:65:b6:cf:e9:e3:a5:a4:55:d5:07:a2: e4:ed:be:90:29:fc:8d:57:4d:31:77:57:73:23:0c: 57:02:dc:cf:fd:2e:9a:aa:c8:ad:27:de:aa:36:e1: 1e:53:5a:65:32:76:81:6e:52:36:df:85:9a:46:07: 33:38:39:46:5d:3d:2b:e7:83:fc:c1:b2:59:17:7f: c8:94:be:b6:b3:57:a3:6e:77:82:95:2d:f5:96:51: 1a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CE:D7:38:42:AC:32:81:E6:60:01:D4:D4:8D:A9:61:94:FA:27:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:72:ff:0c:34:cb:78:20:01:4c:c4:ef:0d:81:14:8a:82:ff: 43:47:f1:63:5c:ba:6a:49:2e:1c:e4:27:e5:38:2a:59:de:fc: 47:89:93:96:8b:63:ed:9e:b9:ce:e4:80:04:09:a3:17:4c:d3: 60:e3:95:0a:5d:3a:6b:ae:71:16:48:0b:44:5a:e7:9e:4d:d8: 65:1d:de:25:96:d8:07:5b:ab:1e:91:b0:6a:14:af:99:0f:70: 84:cb:ba:a0:1b:40:8a:30:a2:19:88:2b:a0:a6:fd:5e:83:77: ff:e2:bf:2d:55:3f:40:e9:f4:71:47:cb:c7:7a:94:cb:86:ce: 46:aa:74:50:e8:72:9e:1c:f3:ee:6c:98:79:93:05:dc:96:87: f4:c3:47:f0:6c:7b:13:43:b5:ce:f5:d0:05:9c:d9:a7:02:fe: b5:66:5a:fe:52:a1:48:71:ed:76:b0:98:34:5b:58:57:f2:3f: 6c:03:4e:0d:73:5e:b4:a2:e6:12:03:08:34:3f:5f:d1:53:f5: 17:d0:71:9b:90:61:1b:52:92:e0:04:ba:c1:89:de:a3:ba:e0: f2:89:ea:cb:04:a1:27:3f:2c:30:59:fd:c4:34:4b:b9:e4:1d: d9:a0:da:6e:bf:8d:df:b1:e9:1d:e5:51:30:9b:00:e9:36:83: 79:fe:75:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8Ua9CKV2bciG2b0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk NWMzYmUzM2UtNzhiOS00YTJmLWFlODktY2I2ZjVkYjAwYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9hmZRk0WJwkDqh+gPwX3aiLHBRn99EiAihI ghdcDppKxvDlHm30zlXNdeR6gNaDSOJk8taS/0gbS9CJVMdmlVET+jRPyoPjnKM5 /jAVmLpZ8cyqBgu1KcD6RwHzyD0OD07mNuIYQIlSoxIRaQrNyKQiz2ReU4EU8DLT BT5AS+U5rvUVCHQnqHqma3YoeUSqBKvRXKANiuHkBsSvAsxuqzTiNcUlyo6fZbbP 6eOlpFXVB6Lk7b6QKfyNV00xd1dzIwxXAtzP/S6aqsitJ96qNuEeU1plMnaBblI2 34WaRgczODlGXT0r54P8wbJZF3/IlL62s1ejbneClS31llEakQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3O1zhCrDKB5mAB1NSNqWGU+icTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzQ0MjgwYmEtOGJiMy0z MWNkLWFkYTktNGQ1ZGRiZTZjZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChy/ww0y3ggAUzE7w2BFIqC/0NH8WNcumpJLhzkJ+U4Klne/EeJk5aL Y+2euc7kgAQJoxdM02DjlQpdOmuucRZIC0Ra555N2GUd3iWW2Adbqx6RsGoUr5kP cITLuqAbQIowohmIK6Cm/V6Dd//ivy1VP0Dp9HFHy8d6lMuGzkaqdFDocp4c8+5s mHmTBdyWh/TDR/BsexNDtc710AWc2acC/rVmWv5SoUhx7XawmDRbWFfyP2wDTg1z XrSi5hIDCDQ/X9FT9RfQcZuQYRtSkuAEusGJ3qO64PKJ6ssEoSc/LDBZ/cQ0S7nk Hdmg2m6/jd+x6R3lUTCbAOk2g3n+dQY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:01:47 2025 by rpki-client