$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d0c868c-622f-3528-9fd1-29db14f7e967.roa File: 7d0c868c-622f-3528-9fd1-29db14f7e967.roa (raw, json) Hash identifier: 8/LL0fXTB6grQ577ceITMtDYhE2+xmeF4oMI5cZLx4s= Subject key identifier: 35:72:3E:77:47:F7:AE:79:84:56:E2:D2:C5:8C:86:CE:66:08:AE:00 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AC2E121371B72766C2300FF40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d0c868c-622f-3528-9fd1-29db14f7e967.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.153.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:21:37:1b:72:76:6c:23:00:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=088e0699-4e32-4836-b148-5730e1add1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7c:b9:c7:ef:e5:64:83:c1:d7:0b:64:ff:dd: 06:37:ff:58:a1:a0:2b:b3:bd:f7:77:db:86:ab:ed: 52:e6:06:66:69:30:22:d3:75:82:17:ae:c5:2c:99: 29:f4:b7:67:34:96:5d:0d:04:78:ce:c9:c2:5e:31: 85:3c:01:3c:30:86:33:e5:34:2a:bb:52:3f:a2:72: f3:f5:fd:cb:63:20:e6:3b:ad:63:f4:fd:8f:d3:f4: c8:12:27:f2:9c:ea:33:40:5a:02:6d:23:59:fb:41: 1c:43:af:49:b2:c6:f0:52:01:4f:7d:5f:bc:7d:88: 2c:45:3e:31:75:7a:6e:4f:76:12:53:e2:c8:a2:cd: 47:03:78:fe:19:bd:cd:1d:2d:db:0f:a4:17:6b:4f: 4a:43:ba:12:34:95:84:78:21:2b:b0:13:29:c9:47: 11:2f:76:62:a7:3b:29:b6:74:83:18:bf:c5:5f:c6: fa:61:f1:bd:f6:ca:20:60:bc:13:15:99:e6:48:9a: 2c:ab:9e:27:cd:e4:b5:a6:f1:c2:10:7e:ac:4b:fd: eb:0d:e0:c7:76:f9:3e:05:20:8c:66:a8:30:34:78: b6:65:c4:af:3b:9e:13:7f:7e:f0:00:b2:bc:59:5e: 6a:f4:7e:e2:b2:0b:0a:5a:fe:68:26:b3:47:df:02: 22:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:72:3E:77:47:F7:AE:79:84:56:E2:D2:C5:8C:86:CE:66:08:AE:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d0c868c-622f-3528-9fd1-29db14f7e967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:d6:db:d0:d4:b4:fe:a0:bc:e2:43:94:4a:38:71:a3:33:82: 8c:55:3c:3c:c1:95:cb:f7:2f:f7:30:c8:45:ba:a9:26:36:8a: a4:98:ee:7c:b1:c2:87:94:dc:1e:5f:5b:dd:d1:00:ae:8a:e4: cd:e6:c3:4e:de:cb:3a:b0:b6:a9:12:6d:79:eb:73:5b:d4:15: 7d:05:8f:5c:26:75:a4:67:7a:be:bd:d4:89:91:4c:49:01:c1: 2b:1e:5f:5a:fb:cd:34:0c:f9:70:44:a9:cb:aa:f8:ad:c3:11: 4a:6c:b0:22:13:af:0d:39:27:db:e9:d2:2d:62:7e:23:95:c7: 1f:18:da:ff:cb:8f:2a:02:9b:19:02:e5:a3:85:ab:39:0a:27: 34:67:ec:4e:bb:8a:ab:7f:4f:3d:2a:ca:3e:0e:9d:0a:91:94: d4:40:0d:73:e8:8a:ee:fc:4b:5e:9c:ca:b3:92:03:2a:90:39: 90:d0:5b:f3:3b:a2:cf:6a:c8:7e:74:28:14:11:ca:ef:26:92: eb:2e:86:03:fa:a9:cc:b4:26:5f:ba:07:56:4a:54:b8:6b:ac: be:eb:40:67:ba:98:00:12:e2:fb:45:f7:3d:87:2c:c4:63:6d: 00:c6:8c:a5:01:17:a8:65:43:a0:5a:82:a8:3c:60:40:ed:59: 0d:e1:95:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4SE3G3J2bCMA/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MDg4ZTA2OTktNGUzMi00ODM2LWIxNDgtNTczMGUxYWRkMWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXy5x+/lZIPB1wtk/90GN/9YoaArs733d9uG q+1S5gZmaTAi03WCF67FLJkp9LdnNJZdDQR4zsnCXjGFPAE8MIYz5TQqu1I/onLz 9f3LYyDmO61j9P2P0/TIEifynOozQFoCbSNZ+0EcQ69JssbwUgFPfV+8fYgsRT4x dXpuT3YSU+LIos1HA3j+Gb3NHS3bD6QXa09KQ7oSNJWEeCErsBMpyUcRL3Zipzsp tnSDGL/FX8b6YfG99sogYLwTFZnmSJosq54nzeS1pvHCEH6sS/3rDeDHdvk+BSCM ZqgwNHi2ZcSvO54Tf37wALK8WV5q9H7isgsKWv5oJrNH3wIiuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVyPndH9655hFbi0sWMhs5mCK4AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2QwYzg2OGMtNjIyZi0z NTI4LTlmZDEtMjlkYjE0ZjdlOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJniMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPW29DUtP6gvOJDlEo4caMzgoxVPDzBlcv3L/cwyEW6qSY2iqSY7nyx woeU3B5fW93RAK6K5M3mw07eyzqwtqkSbXnrc1vUFX0Fj1wmdaRner691ImRTEkB wSseX1r7zTQM+XBEqcuq+K3DEUpssCITrw05J9vp0i1ifiOVxx8Y2v/LjyoCmxkC 5aOFqzkKJzRn7E67iqt/Tz0qyj4OnQqRlNRADXPoiu78S16cyrOSAyqQOZDQW/M7 os9qyH50KBQRyu8mkusuhgP6qcy0Jl+6B1ZKVLhrrL7rQGe6mAAS4vtF9z2HLMRj bQDGjKUBF6hlQ6Bagqg8YEDtWQ3hlWI= -----END CERTIFICATE-----Generated at Sun Aug 24 08:43:16 2025 by rpki-client