$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa File: 3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa (raw, json) Hash identifier: Zu8nDoBcI2E4RxxMOOLPQ33I+Plq5rRpaRRA0yMwj3w= Subject key identifier: FF:61:1B:89:8B:A0:1B:4F:F9:E8:08:27:92:A8:6E:51:22:1D:79:78 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B2A2C3F8D5BA2E3E3A7D32080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.157.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3f:8d:5b:a2:e3:e3:a7:d3:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=e01b335d-9984-48d2-bc52-2aa684daa6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9b:da:41:60:7f:6c:17:fd:1f:52:7f:29:30: 85:13:ed:50:e0:db:42:58:a9:09:ef:fc:c2:38:f9: 7c:58:84:35:5f:57:52:d6:48:58:41:50:41:cf:9d: ac:3c:71:f5:23:70:97:42:5a:ae:7c:1d:7a:e8:8a: 6e:ee:9c:78:7e:65:fe:b1:9d:fa:a2:ed:aa:d0:a3: f8:bc:1c:bd:e9:96:56:69:b3:5c:b5:49:24:bc:74: b4:47:af:f3:1c:13:3a:0c:84:37:0b:76:3e:94:6a: f1:01:d0:07:4f:4e:3a:05:fc:d7:b7:2c:c1:eb:90: 2c:ab:f0:bc:0a:aa:e1:3e:a9:4f:b8:ff:4a:27:ec: f4:3d:b2:7b:b1:78:49:e1:85:b3:6a:e9:8e:2f:15: 7d:92:b3:4b:4a:90:ae:ff:34:66:5c:37:f0:b3:1e: 25:34:d4:51:e2:79:45:87:79:56:0b:7d:4a:b7:81: f9:10:b4:67:2a:14:72:c3:c1:8b:21:2a:ab:06:d7: 07:79:1b:85:94:26:07:46:2b:80:a5:fa:84:64:90: 41:7c:74:0d:5b:37:13:83:84:85:f8:a6:e4:68:b3: 55:59:46:11:9e:db:75:e7:17:3f:e7:54:93:57:e1: 09:57:5b:c3:5f:cc:53:14:54:2b:e5:3b:3e:32:ce: aa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:61:1B:89:8B:A0:1B:4F:F9:E8:08:27:92:A8:6E:51:22:1D:79:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8b:f4:4f:a0:8d:6b:f3:6a:a5:12:a8:44:3f:cd:f7:90:95: 45:f8:60:46:7c:01:06:bb:61:68:b8:05:8f:43:d3:71:80:06: 31:d4:51:fd:2b:16:26:ef:bb:5a:d1:56:40:9a:7f:d6:bf:83: 32:7d:90:0d:06:87:a9:8e:dc:d6:bc:bb:59:10:49:f0:3d:a0: a4:3c:48:ae:f0:ae:b8:09:f7:7b:e0:e6:0a:52:72:26:a1:92: 5f:34:d1:d0:71:69:07:6d:23:0a:7e:79:fc:6b:68:02:8d:67: 90:6e:f8:88:6f:a5:19:36:d9:03:aa:70:89:3c:43:f7:be:ed: cc:b4:a6:79:63:36:04:13:1b:1f:fc:56:95:78:73:c2:94:5e: 89:3b:6b:b7:b2:07:e5:61:ec:95:eb:2c:be:2d:9c:23:5b:a9: 50:4f:e4:d6:08:37:fb:2c:77:11:e8:72:46:f0:a4:c5:e5:6b: 82:00:84:01:8d:8d:2c:bf:40:97:44:7f:73:06:c3:c2:88:4e: aa:25:20:0e:b9:39:8a:aa:97:5e:86:a9:44:3d:f6:99:c1:32: f3:a8:6c:8f:32:76:7c:42:eb:5a:17:0d:74:f2:8a:18:85:4d: 61:7e:4c:b3:c6:02:74:b8:af:0a:19:70:2e:0d:9b:9b:be:62: 7e:2c:ab:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLD+NW6Lj46fTIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTAxYjMzNWQtOTk4NC00OGQyLWJjNTItMmFhNjg0ZGFhNmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJvaQWB/bBf9H1J/KTCFE+1Q4NtCWKkJ7/zC OPl8WIQ1X1dS1khYQVBBz52sPHH1I3CXQlqufB166Ipu7px4fmX+sZ36ou2q0KP4 vBy96ZZWabNctUkkvHS0R6/zHBM6DIQ3C3Y+lGrxAdAHT046BfzXtyzB65Asq/C8 CqrhPqlPuP9KJ+z0PbJ7sXhJ4YWzaumOLxV9krNLSpCu/zRmXDfwsx4lNNRR4nlF h3lWC31Kt4H5ELRnKhRyw8GLISqrBtcHeRuFlCYHRiuApfqEZJBBfHQNWzcTg4SF +KbkaLNVWUYRntt15xc/51STV+EJV1vDX8xTFFQr5Ts+Ms6qNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9hG4mLoBtP+egIJ5KoblEiHXl4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2I1YjNmZGMtNjEwZC0z NjM0LWFhMWEtNmY1NzUyNjI0YmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCL9E+gjWvzaqUSqEQ/zfeQlUX4YEZ8AQa7YWi4BY9D03GABjHUUf0r Fibvu1rRVkCaf9a/gzJ9kA0Gh6mO3Na8u1kQSfA9oKQ8SK7wrrgJ93vg5gpSciah kl800dBxaQdtIwp+efxraAKNZ5Bu+IhvpRk22QOqcIk8Q/e+7cy0pnljNgQTGx/8 VpV4c8KUXok7a7eyB+Vh7JXrLL4tnCNbqVBP5NYIN/ssdxHockbwpMXla4IAhAGN jSy/QJdEf3MGw8KITqolIA65OYqql16GqUQ99pnBMvOobI8ydnxC61oXDXTyihiF TWF+TLPGAnS4rwoZcC4Nm5u+Yn4sq4A= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:50 2025 by rpki-client