$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3eef707b-8fc4-3ee2-b4b2-5ce43ae2d1c0.roa File: 3eef707b-8fc4-3ee2-b4b2-5ce43ae2d1c0.roa (raw, json) Hash identifier: +3SSagGq77YWBC4YWIY8h1UZmhJtHFRKCoeB+8YUfnA= Subject key identifier: 7B:94:50:C4:B6:8F:F8:9E:35:D0:76:A8:4F:D9:86:AA:EF:76:A8:77 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AC2E12093ED8504FFA06CAA20 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3eef707b-8fc4-3ee2-b4b2-5ce43ae2d1c0.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.153.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:20:93:ed:85:04:ff:a0:6c:aa:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=494073eb-fbba-453d-a891-73e11b5649ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:08:1c:75:c1:8e:f1:58:0c:be:87:22:fe:17: 9e:61:d9:23:e6:03:fc:e1:c2:14:10:d7:da:73:09: 7f:b0:7c:40:49:fe:cb:47:2b:77:87:b5:4c:c6:23: 09:d6:9d:75:24:2a:77:b5:eb:04:21:cd:c6:47:6e: 87:8f:01:0c:44:a0:32:9c:a4:db:f3:82:32:8f:a5: 26:81:6c:24:db:30:5f:cf:69:73:1f:6c:59:8a:08: eb:84:86:40:fd:82:4e:a5:35:c5:a2:cc:ed:1d:8f: 8f:9a:89:e3:ac:2f:87:83:0e:42:ba:3c:d0:aa:c2: da:a8:c4:29:eb:0f:74:fd:0d:7f:41:d7:0c:3e:fb: 70:cb:3f:8e:88:76:6a:36:43:c2:99:b3:6d:86:c3: 89:0f:78:56:b9:c7:29:86:88:42:72:60:4e:10:95: eb:41:4c:ac:fc:57:35:72:3d:11:03:87:f8:53:b9: 7f:f1:54:66:19:ba:eb:aa:72:e4:46:b1:20:b8:a2: 56:fd:3c:60:81:a0:00:0d:d5:53:13:69:5a:09:87: 65:04:93:2f:42:c0:74:2a:35:de:b9:26:59:8e:a7: 7e:25:50:31:ac:c5:13:da:18:b8:85:ab:76:0e:6c: fc:6c:54:58:38:7e:bf:79:00:8c:70:f2:47:27:ca: 92:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:94:50:C4:B6:8F:F8:9E:35:D0:76:A8:4F:D9:86:AA:EF:76:A8:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3eef707b-8fc4-3ee2-b4b2-5ce43ae2d1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:9d:45:b3:42:3b:f8:df:d4:f4:a1:09:b4:49:61:97:99:88: 37:72:6b:a4:55:35:dd:ac:4e:34:0e:c7:a3:65:05:3a:46:9a: 0c:a2:9e:e9:4a:41:34:ea:09:88:15:b7:e9:78:3e:f4:c9:0b: c3:81:4d:d9:bb:69:44:f3:f0:38:5a:78:4f:67:20:d1:3f:7e: 0e:e5:3d:33:ed:e0:8b:94:4a:73:57:e0:4b:9f:e3:04:89:6d: af:48:cd:e7:8a:60:d5:24:1f:69:1f:21:61:a2:a2:45:c8:2f: 85:c1:c2:9a:5f:7d:c4:09:41:67:ee:16:39:79:1e:3d:97:96: bd:fe:b6:be:e7:58:95:02:21:b8:89:4b:b8:aa:d2:f6:86:ca: f4:f6:7a:1d:4e:8c:8d:c4:55:65:d4:ed:97:81:cc:3e:7a:34: 95:c6:d6:5d:03:08:e4:43:7c:24:9a:e2:e8:e4:24:77:92:dc: 71:33:5d:dd:9e:ae:c1:0f:07:b7:0d:de:da:8a:75:73:23:ac: 54:a9:ea:51:54:5f:73:bb:99:75:c3:46:4a:28:3c:94:bf:8a: f7:c2:ee:de:84:0b:df:40:89:99:7c:cf:27:b7:d9:60:47:8a: e3:4d:cd:27:01:f5:b6:38:b3:f7:f6:a1:6b:be:6d:f7:53:c3: 6c:94:83:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4SCT7YUE/6BsqiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NDk0MDczZWItZmJiYS00NTNkLWE4OTEtNzNlMTFiNTY0OWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQgcdcGO8VgMvoci/heeYdkj5gP84cIUENfa cwl/sHxASf7LRyt3h7VMxiMJ1p11JCp3tesEIc3GR26HjwEMRKAynKTb84Iyj6Um gWwk2zBfz2lzH2xZigjrhIZA/YJOpTXFosztHY+PmonjrC+Hgw5CujzQqsLaqMQp 6w90/Q1/QdcMPvtwyz+OiHZqNkPCmbNthsOJD3hWuccphohCcmBOEJXrQUys/Fc1 cj0RA4f4U7l/8VRmGbrrqnLkRrEguKJW/TxggaAADdVTE2laCYdlBJMvQsB0KjXe uSZZjqd+JVAxrMUT2hi4hat2Dmz8bFRYOH6/eQCMcPJHJ8qSSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuUUMS2j/ieNdB2qE/Zhqrvdqh3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2VlZjcwN2ItOGZjNC0z ZWUyLWI0YjItNWNlNDNhZTJkMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGudRbNCO/jf1PShCbRJYZeZiDdya6RVNd2sTjQOx6NlBTpGmgyinulK QTTqCYgVt+l4PvTJC8OBTdm7aUTz8DhaeE9nINE/fg7lPTPt4IuUSnNX4Euf4wSJ ba9IzeeKYNUkH2kfIWGiokXIL4XBwppffcQJQWfuFjl5Hj2Xlr3+tr7nWJUCIbiJ S7iq0vaGyvT2eh1OjI3EVWXU7ZeBzD56NJXG1l0DCORDfCSa4ujkJHeS3HEzXd2e rsEPB7cN3tqKdXMjrFSp6lFUX3O7mXXDRkooPJS/ivfC7t6EC99AiZl8zye32WBH iuNNzScB9bY4s/f2oWu+bfdTw2yUgzM= -----END CERTIFICATE-----Generated at Sun Aug 24 06:56:32 2025 by rpki-client