$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c96e5dc-d183-360b-abed-630e7d86fc75.roa File: 5c96e5dc-d183-360b-abed-630e7d86fc75.roa (raw, json) Hash identifier: 25A6y0/SRJ/vQnonmSAxV3jERemhD7Up6jGiexXOU84= Subject key identifier: BC:DE:4F:DA:1F:49:F8:A8:62:92:85:79:99:11:13:8E:C8:D0:A5:C2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AC2E120F01BE541F509113280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c96e5dc-d183-360b-abed-630e7d86fc75.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.153.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:20:f0:1b:e5:41:f5:09:11:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=334a22c7-f8b9-4174-9f17-e1c1472c9dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1a:35:04:5e:46:eb:92:41:13:17:a1:03:97: 71:58:ba:95:a0:8c:79:14:28:f3:13:f0:79:fb:2a: a2:37:20:ed:5d:88:7a:6b:c6:7e:f2:c4:44:3f:41: 50:f5:2a:ac:9e:5f:7f:89:cc:9a:db:fa:36:b0:a2: 2b:96:ee:cd:ad:cf:78:6d:b1:ff:06:5e:36:07:4d: c8:37:87:e5:bb:4b:54:0c:e0:d3:11:3e:0c:b2:31: 28:27:9a:ef:78:b7:66:f7:e1:46:fa:3c:59:f8:5e: 07:01:2a:8a:c0:7c:0a:f8:96:a8:ff:bc:4b:d7:2a: a8:c0:e4:37:22:74:78:ff:95:a0:98:9b:3e:5b:a4: c5:9e:51:cd:2b:22:d2:b8:4a:bf:9f:b5:b2:ab:6f: 4f:70:56:d1:97:04:f3:fd:3b:7e:c2:19:68:ec:30: 21:87:35:67:6c:c7:37:fb:51:93:98:6b:4a:bd:6e: 47:bb:6a:25:ba:3e:cd:11:2f:05:62:fc:7f:c4:e6: 70:3c:dc:1f:35:9f:a4:c0:e7:65:15:54:5c:c9:d9: 7e:69:e4:e9:c9:9d:bc:80:9c:1e:a8:80:76:51:3a: 64:a7:24:a2:55:2e:2b:70:af:fb:7b:27:45:d4:16: a4:92:c7:20:ff:49:9b:09:b6:e5:6d:c2:ba:08:f5: bf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DE:4F:DA:1F:49:F8:A8:62:92:85:79:99:11:13:8E:C8:D0:A5:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c96e5dc-d183-360b-abed-630e7d86fc75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:87:86:2c:6d:f0:6a:81:15:64:51:a2:a0:c8:d4:9b:d3:ab: d5:0c:5d:27:b7:ee:3c:41:f9:a4:9d:52:1e:93:79:4a:8c:08: ea:09:2f:6b:8e:a5:eb:2b:0e:1f:f1:62:0a:38:23:70:11:c5: 43:06:d5:4a:7e:db:48:29:f5:b2:7d:1e:70:69:93:2c:e4:c8: 9a:6a:51:b3:72:16:32:14:0d:8c:c1:18:38:5a:f5:78:1b:f4: a7:9b:6b:71:4f:3d:26:c9:ad:fb:e8:11:89:8e:13:44:60:62: c5:09:11:d6:58:d4:ce:28:0c:6d:a3:c4:4b:5d:ae:fc:29:98: b5:9e:5f:37:ce:f8:03:70:af:34:46:0c:9f:a9:16:76:82:0f: ee:50:6d:a2:1a:43:56:67:0d:ef:87:34:80:38:2f:23:6c:b6: d1:6a:99:8b:82:24:db:8e:92:8d:8c:4f:6a:a5:3e:24:a6:e2: 3d:a0:4c:5f:26:43:8d:da:bf:4a:db:f1:e7:89:6f:44:0b:84: fd:ef:97:23:a8:79:3e:79:56:ce:ef:db:10:f6:6e:77:5e:1e: 24:68:bf:78:ed:48:61:d4:6c:6c:49:a6:20:4a:6e:0b:2f:a7: 21:69:e4:7c:c5:4f:dd:e5:8c:b3:67:4f:23:72:61:b7:d2:99: cb:7d:be:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4SDwG+VB9QkRMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MzM0YTIyYzctZjhiOS00MTc0LTlmMTctZTFjMTQ3MmM5ZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xo1BF5G65JBExehA5dxWLqVoIx5FCjzE/B5 +yqiNyDtXYh6a8Z+8sREP0FQ9Sqsnl9/icya2/o2sKIrlu7Nrc94bbH/Bl42B03I N4flu0tUDODTET4MsjEoJ5rveLdm9+FG+jxZ+F4HASqKwHwK+Jao/7xL1yqowOQ3 InR4/5WgmJs+W6TFnlHNKyLSuEq/n7Wyq29PcFbRlwTz/Tt+whlo7DAhhzVnbMc3 +1GTmGtKvW5Hu2oluj7NES8FYvx/xOZwPNwfNZ+kwOdlFVRcydl+aeTpyZ28gJwe qIB2UTpkpySiVS4rcK/7eydF1Bakkscg/0mbCbblbcK6CPW/PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzeT9ofSfioYpKFeZkRE47I0KXCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWM5NmU1ZGMtZDE4My0z NjBiLWFiZWQtNjMwZTdkODZmYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJnBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGHhixt8GqBFWRRoqDI1JvTq9UMXSe37jxB+aSdUh6TeUqMCOoJL2uO pesrDh/xYgo4I3ARxUMG1Up+20gp9bJ9HnBpkyzkyJpqUbNyFjIUDYzBGDha9Xgb 9Keba3FPPSbJrfvoEYmOE0RgYsUJEdZY1M4oDG2jxEtdrvwpmLWeXzfO+ANwrzRG DJ+pFnaCD+5QbaIaQ1ZnDe+HNIA4LyNsttFqmYuCJNuOko2MT2qlPiSm4j2gTF8m Q43av0rb8eeJb0QLhP3vlyOoeT55Vs7v2xD2bndeHiRov3jtSGHUbGxJpiBKbgsv pyFp5HzFT93ljLNnTyNyYbfSmct9vq4= -----END CERTIFICATE-----Generated at Sun Aug 24 06:57:31 2025 by rpki-client