$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c349633-601c-3ce2-8871-3815903a32e1.roa File: 5c349633-601c-3ce2-8871-3815903a32e1.roa (raw, json) Hash identifier: kkFODX4hcC8OA3PxaaLO1S8tUrNGBA60O2xuDpxZz7U= Subject key identifier: 5F:8F:27:9F:69:77:85:16:CE:00:13:46:81:B2:63:26:4E:AD:07:F0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584ADECBD66C8424CBB8B49F3880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c349633-601c-3ce2-8871-3815903a32e1.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.153.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:d6:6c:84:24:cb:b8:b4:9f:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=0ca34178-782d-4d7f-baef-6ccf0435545d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3e:14:75:46:59:14:7d:f4:50:b1:c8:c4:03: f6:c0:a6:f0:9a:04:f1:08:a1:d2:ff:e0:dc:68:87: 59:14:9b:c6:a7:b4:9d:19:cb:9d:28:7a:bd:a9:c6: bd:f0:a3:d5:3b:7b:54:50:81:8c:d6:ba:60:87:83: 5a:19:a6:d2:46:75:6e:94:c8:c6:ee:58:49:80:97: 01:34:d1:54:87:e0:e6:08:cd:f8:b5:0b:0a:0c:d1: fd:77:05:cb:9b:c5:46:62:67:88:98:40:68:b2:3e: ff:1f:59:45:3d:bf:c4:dd:b6:93:cb:4f:06:1e:79: e3:d8:ab:0b:16:05:78:96:e4:ed:10:f3:e0:5c:4b: 38:4b:ce:83:99:ce:93:3e:7d:c8:af:6e:50:5f:9a: bb:f2:15:52:c5:ee:e8:a2:78:3c:63:f5:8c:6b:96: 2a:d9:38:90:1c:25:aa:ba:c0:fb:39:ff:25:ff:88: a6:26:6a:6a:bc:06:d9:0c:b4:6c:58:3a:08:47:12: bf:92:57:e9:08:5e:98:2a:e0:ca:99:00:25:8b:2f: 47:e9:7f:d8:39:49:69:8e:69:30:f4:6a:7a:f6:b2: a1:42:a1:ed:75:42:19:52:bc:69:0b:29:a9:f0:20: c1:3a:e9:ad:50:6c:80:e0:f4:f4:0d:ad:05:b7:97: 44:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8F:27:9F:69:77:85:16:CE:00:13:46:81:B2:63:26:4E:AD:07:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c349633-601c-3ce2-8871-3815903a32e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:d3:bc:68:4f:62:24:d5:49:dc:fb:dc:e7:a8:2e:cd:df:88: 4b:84:02:39:36:3c:7c:2b:d7:3c:de:d3:18:05:2b:51:3d:0f: ac:1e:f5:24:56:5c:67:de:0c:3a:4b:37:94:76:cf:7a:9f:56: ab:85:03:87:dd:d3:98:03:2a:0c:18:e3:29:fa:4c:d3:8f:82: 25:aa:d5:b6:30:a7:6a:3f:11:51:04:c8:6c:6f:b4:39:a4:9a: 40:6f:6d:ae:58:26:d5:50:57:95:d0:1e:cd:43:38:d0:64:fb: 15:c2:b9:b8:77:99:52:7e:c0:6d:6c:3f:6a:52:1b:6d:06:dd: d5:63:b9:ba:fd:0d:68:06:9f:18:59:85:e1:8a:14:5a:c5:a7: 72:19:d6:25:c4:25:9d:48:4a:f8:14:08:47:6c:bb:8b:47:61: 59:8f:b1:9e:f2:be:45:2b:05:20:b8:11:db:cf:55:bd:d0:e2: 43:91:83:68:92:81:82:b7:1e:d5:e0:c7:b9:41:79:90:24:18: 99:e6:56:73:64:5f:64:ae:97:db:0c:48:30:5a:6e:38:f7:3e: 98:83:ec:08:f8:47:e0:f2:e3:58:09:51:90:68:48:72:02:e5: bc:53:61:95:65:23:d0:28:3b:66:d8:39:bb:6b:4b:63:26:5c: 94:de:be:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey9ZshCTLuLSfOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MGNhMzQxNzgtNzgyZC00ZDdmLWJhZWYtNmNjZjA0MzU1NDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz4UdUZZFH30ULHIxAP2wKbwmgTxCKHS/+Dc aIdZFJvGp7SdGcudKHq9qca98KPVO3tUUIGM1rpgh4NaGabSRnVulMjG7lhJgJcB NNFUh+DmCM34tQsKDNH9dwXLm8VGYmeImEBosj7/H1lFPb/E3baTy08GHnnj2KsL FgV4luTtEPPgXEs4S86Dmc6TPn3Ir25QX5q78hVSxe7oong8Y/WMa5Yq2TiQHCWq usD7Of8l/4imJmpqvAbZDLRsWDoIRxK/klfpCF6YKuDKmQAliy9H6X/YOUlpjmkw 9Gp69rKhQqHtdUIZUrxpCymp8CDBOumtUGyA4PT0Da0Ft5dETwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+PJ59pd4UWzgATRoGyYyZOrQfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWMzNDk2MzMtNjAxYy0z Y2UyLTg4NzEtMzgxNTkwM2EzMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3TvGhPYiTVSdz73OeoLs3fiEuEAjk2PHwr1zze0xgFK1E9D6we9SRW XGfeDDpLN5R2z3qfVquFA4fd05gDKgwY4yn6TNOPgiWq1bYwp2o/EVEEyGxvtDmk mkBvba5YJtVQV5XQHs1DONBk+xXCubh3mVJ+wG1sP2pSG20G3dVjubr9DWgGnxhZ heGKFFrFp3IZ1iXEJZ1ISvgUCEdsu4tHYVmPsZ7yvkUrBSC4EdvPVb3Q4kORg2iS gYK3HtXgx7lBeZAkGJnmVnNkX2Sul9sMSDBabjj3PpiD7Aj4R+Dy41gJUZBoSHIC 5bxTYZVlI9AoO2bYObtrS2MmXJTevvc= -----END CERTIFICATE-----Generated at Sun Aug 24 08:46:04 2025 by rpki-client