$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6899acbd-6cc1-305a-bac0-08fe09d5e3f1.roa File: 6899acbd-6cc1-305a-bac0-08fe09d5e3f1.roa (raw, json) Hash identifier: bvXaV722WBrtEfprgW4efVEREvaurETFaG6UUY8VMx0= Subject key identifier: 9D:C5:96:9C:DA:68:7A:AF:5D:77:D6:03:FE:B1:88:54:67:8F:5B:F6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52A75913E6DF54A856062300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6899acbd-6cc1-305a-bac0-08fe09d5e3f1.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.157.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:59:13:e6:df:54:a8:56:06:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=10eef2cd-27b8-4544-adbb-2689cdeb91e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:18:48:f6:bc:c6:5f:39:e3:9f:3e:87:44: 3b:26:fe:85:89:65:52:b0:e3:ad:2f:e4:6c:c3:53: d4:bc:58:a4:03:ff:ed:f0:5f:02:f9:32:d4:41:f2: ce:79:11:f7:77:2e:35:a7:28:b3:1f:37:7c:e5:3e: a5:8f:b0:85:9b:13:d5:30:f5:19:5a:71:c2:d6:66: c1:04:26:b4:49:8f:0b:96:29:49:03:bf:36:8c:77: 82:1f:20:c2:bf:2a:4a:aa:b2:bd:4d:3d:03:f4:c0: 6b:68:20:3e:34:fd:31:13:8b:b3:a3:8f:aa:15:67: 9a:11:1e:c1:5f:e2:27:33:34:32:0c:92:62:f2:27: 70:77:59:4a:86:65:ef:31:64:02:8a:ae:a9:1e:e7: 82:97:c8:27:e4:e3:16:0a:ee:93:60:c8:f4:c4:a0: 5e:bc:b4:c9:8c:e6:35:56:69:9d:fa:9c:ee:2e:d1: 4a:9c:2f:94:b1:bd:f0:1f:8d:2e:83:c6:7c:ad:3f: f6:07:7d:03:46:15:06:8f:7f:0b:56:a9:f6:2f:f6: 88:9b:7b:fb:d0:81:3b:4f:3d:5e:69:dd:a3:af:bc: 0f:f0:08:f4:fd:2f:f8:e7:aa:05:2d:37:45:07:c9: c3:de:9b:d9:af:9f:24:62:60:a3:02:76:3b:ae:29: 5a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C5:96:9C:DA:68:7A:AF:5D:77:D6:03:FE:B1:88:54:67:8F:5B:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6899acbd-6cc1-305a-bac0-08fe09d5e3f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:52:06:66:ba:6e:0a:92:97:6c:03:1e:c6:aa:74:c2:e5:b7: bc:07:4d:9d:c2:f7:17:f0:3e:04:36:48:08:06:d5:ed:c7:3a: 7b:ba:56:91:f6:fa:b0:39:ac:ab:cc:ad:41:48:ea:c8:c8:9c: d8:7a:a5:25:bf:44:a0:f0:e8:bf:56:41:0f:9a:c3:29:de:4c: 76:65:3f:5d:d1:1f:e1:9d:54:31:17:ee:f0:10:f8:b8:85:6f: 24:c3:1d:f6:00:84:b5:29:08:3b:7c:31:d5:ce:c6:18:d7:f8: 61:d5:e7:75:5f:63:14:c8:26:eb:f4:73:7e:de:fd:32:fa:68: 80:58:f0:a1:4c:1c:e7:f8:b4:69:0b:02:36:e5:eb:fe:31:b7: 46:01:a4:c4:e8:e5:bf:4a:c3:0d:2e:0b:fd:95:67:7f:a7:01: 24:1a:6a:90:fb:ec:0d:ca:9c:ec:f7:4a:a2:1d:62:45:a9:30: b4:25:7e:e7:43:fb:e2:95:ad:be:4c:66:a4:ed:cf:8a:e3:d6: 24:a3:bd:db:10:68:d2:60:8a:30:09:7e:4a:4f:75:18:a3:37: 2f:79:cc:29:d6:0f:c2:32:db:1e:8d:b0:ba:91:21:61:fc:0f: de:85:46:82:45:fc:af:68:67:5b:7b:89:3f:74:8f:e0:a9:3e: 53:f5:bc:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1kT5t9UqFYGIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MTBlZWYyY2QtMjdiOC00NTQ0LWFkYmItMjY4OWNkZWI5MWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJcYSPa8xl85458+h0Q7Jv6FiWVSsOOtL+Rs w1PUvFikA//t8F8C+TLUQfLOeRH3dy41pyizHzd85T6lj7CFmxPVMPUZWnHC1mbB BCa0SY8LlilJA782jHeCHyDCvypKqrK9TT0D9MBraCA+NP0xE4uzo4+qFWeaER7B X+InMzQyDJJi8idwd1lKhmXvMWQCiq6pHueCl8gn5OMWCu6TYMj0xKBevLTJjOY1 Vmmd+pzuLtFKnC+Usb3wH40ug8Z8rT/2B30DRhUGj38LVqn2L/aIm3v70IE7Tz1e ad2jr7wP8Aj0/S/456oFLTdFB8nD3pvZr58kYmCjAnY7rilaSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3FlpzaaHqvXXfWA/6xiFRnj1v2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjg5OWFjYmQtNmNjMS0z MDVhLWJhYzAtMDhmZTA5ZDVlM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABSBma6bgqSl2wDHsaqdMLlt7wHTZ3C9xfwPgQ2SAgG1e3HOnu6VpH2 +rA5rKvMrUFI6sjInNh6pSW/RKDw6L9WQQ+awyneTHZlP13RH+GdVDEX7vAQ+LiF byTDHfYAhLUpCDt8MdXOxhjX+GHV53VfYxTIJuv0c37e/TL6aIBY8KFMHOf4tGkL Ajbl6/4xt0YBpMTo5b9Kww0uC/2VZ3+nASQaapD77A3KnOz3SqIdYkWpMLQlfudD ++KVrb5MZqTtz4rj1iSjvdsQaNJgijAJfkpPdRijNy95zCnWD8Iy2x6NsLqRIWH8 D96FRoJF/K9oZ1t7iT90j+CpPlP1vDk= -----END CERTIFICATE-----Generated at Mon Oct 20 07:30:26 2025 by rpki-client