$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ae5e9b-00e9-3dfb-81c3-8d46e0b7e000.roa File: 49ae5e9b-00e9-3dfb-81c3-8d46e0b7e000.roa (raw, json) Hash identifier: h+XGnp4Ik3rRMC2pb8igzhwYUqHpgfmtT8oQOOg55YA= Subject key identifier: 7B:F7:D3:C9:06:DC:30:DD:EF:F4:B0:3C:0D:60:7F:18:AB:9C:F0:13 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AC2E12159CB6ACB8D7BCBF360 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ae5e9b-00e9-3dfb-81c3-8d46e0b7e000.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.153.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:21:59:cb:6a:cb:8d:7b:cb:f3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=8137149d-6b69-4c28-8ac6-7d72205e1711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9d:8e:92:e8:2e:25:86:76:b4:6f:23:a3:82: b7:76:b8:f4:6d:46:0c:6c:14:bc:a2:e7:a1:06:96: 31:a6:c1:c0:2a:62:34:5b:e6:b3:10:29:7f:1c:50: d8:79:c6:5d:cf:23:d6:4b:ec:6d:0f:d0:a9:6f:6f: 78:65:82:52:32:fb:2f:fb:21:9d:3f:2b:ea:b7:16: 4f:a4:d5:ad:81:eb:94:95:0b:61:14:92:aa:70:43: 48:fb:b8:98:5b:9f:e5:79:f8:26:53:95:3a:c6:5a: 34:87:67:41:67:7b:1b:80:57:ac:db:67:53:af:25: 18:55:6b:c2:3e:d8:0c:db:ed:dc:e2:3f:96:dd:90: 58:1f:4e:1e:32:88:2d:42:a7:56:c0:00:c4:02:84: bd:85:2e:67:30:9e:79:24:03:e9:26:b6:52:1c:be: 2b:5e:78:55:7b:59:c8:28:62:a5:76:d3:32:13:e5: 89:29:ea:f9:65:45:0d:58:09:99:d0:13:46:71:4e: 70:8d:30:b8:3c:ce:0d:ab:11:d5:98:77:8a:e3:86: 13:9d:9e:fb:26:09:a7:12:3b:f7:bd:b2:12:bc:5d: 3b:25:e7:6d:89:ce:7d:88:52:3a:db:df:c5:31:97: ff:9f:4a:8f:c4:d6:82:61:8e:98:6f:15:76:70:66: 43:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F7:D3:C9:06:DC:30:DD:EF:F4:B0:3C:0D:60:7F:18:AB:9C:F0:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ae5e9b-00e9-3dfb-81c3-8d46e0b7e000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:19:f1:b8:55:7c:20:f8:96:ff:83:cc:a2:f0:4d:b6:93:57: 17:05:b1:ca:78:cb:20:e0:c5:4c:02:46:ad:f9:13:8a:a9:82: fe:22:50:4c:b8:e1:7e:20:12:99:2a:07:fd:e1:d1:d6:0d:ff: 5f:61:10:a1:8d:67:4a:d7:9c:27:a0:7f:41:32:68:25:55:7f: ab:71:bd:23:98:86:dd:74:a1:74:39:c6:16:00:ea:42:13:63: c9:c2:7a:d5:a0:dd:d0:2c:01:6c:f9:b3:ee:33:9d:00:b4:8d: bf:4e:4b:fb:a9:a1:a2:8b:55:2a:17:dc:0b:98:99:b8:29:d0: 31:d4:8b:db:1e:df:3b:81:0d:7e:b8:dc:ec:9a:99:ef:dd:73: 42:b1:47:4a:ba:ad:05:16:16:03:7f:31:7a:df:d3:f8:97:68: 6b:b4:71:37:a2:f7:15:c9:f5:b0:59:31:f5:c6:cd:d1:08:89: 44:45:4a:37:42:9e:73:56:e1:77:77:2d:3a:bb:93:91:74:be: 6d:a0:46:54:ff:04:7c:39:0d:be:9f:c4:1b:ef:1f:d6:15:b7: 81:50:1c:15:89:19:7a:ce:1c:a5:80:b1:bf:7b:33:7c:a0:b7: 82:12:30:cf:8e:b5:33:13:9d:61:36:af:95:eb:49:f2:30:af: 0f:9c:02:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4SFZy2rLjXvL82AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ODEzNzE0OWQtNmI2OS00YzI4LThhYzYtN2Q3MjIwNWUxNzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr52OkuguJYZ2tG8jo4K3drj0bUYMbBS8oueh BpYxpsHAKmI0W+azECl/HFDYecZdzyPWS+xtD9Cpb294ZYJSMvsv+yGdPyvqtxZP pNWtgeuUlQthFJKqcENI+7iYW5/lefgmU5U6xlo0h2dBZ3sbgFes22dTryUYVWvC PtgM2+3c4j+W3ZBYH04eMogtQqdWwADEAoS9hS5nMJ55JAPpJrZSHL4rXnhVe1nI KGKldtMyE+WJKer5ZUUNWAmZ0BNGcU5wjTC4PM4NqxHVmHeK44YTnZ77JgmnEjv3 vbISvF07Jedtic59iFI629/FMZf/n0qPxNaCYY6YbxV2cGZDXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHv308kG3DDd7/SwPA1gfxirnPATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDlhZTVlOWItMDBlOS0z ZGZiLTgxYzMtOGQ0NmUwYjdlMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0Z8bhVfCD4lv+DzKLwTbaTVxcFscp4yyDgxUwCRq35E4qpgv4iUEy4 4X4gEpkqB/3h0dYN/19hEKGNZ0rXnCegf0EyaCVVf6txvSOYht10oXQ5xhYA6kIT Y8nCetWg3dAsAWz5s+4znQC0jb9OS/upoaKLVSoX3AuYmbgp0DHUi9se3zuBDX64 3Oyame/dc0KxR0q6rQUWFgN/MXrf0/iXaGu0cTei9xXJ9bBZMfXGzdEIiURFSjdC nnNW4Xd3LTq7k5F0vm2gRlT/BHw5Db6fxBvvH9YVt4FQHBWJGXrOHKWAsb97M3yg t4ISMM+OtTMTnWE2r5XrSfIwrw+cAq4= -----END CERTIFICATE-----Generated at Sun Aug 24 06:57:36 2025 by rpki-client