$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8d211431-659b-3203-b22c-11ca3f703d3e.roa File: 8d211431-659b-3203-b22c-11ca3f703d3e.roa (raw, json) Hash identifier: oX+GLy8aMa/yXKiDgSYLk2r+DmXWgUgjm3jmdMt5DLM= Subject key identifier: DB:7B:A0:CC:35:36:55:70:9B:20:4F:13:FE:E2:90:D1:D2:BC:DE:BF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584ADECBD6A44E4DADB87D073D84 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8d211431-659b-3203-b22c-11ca3f703d3e.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.153.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:d6:a4:4e:4d:ad:b8:7d:07:3d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=acb264b3-100f-4626-a492-912b750ff15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fa:f7:43:98:ec:cb:26:6d:49:22:68:09:6d: bd:5b:dc:73:c4:8e:b0:f6:c0:3e:53:84:a0:80:96: 4c:0d:7a:0f:cf:5f:c1:a5:4f:da:34:2c:25:3f:1a: bd:48:5e:d4:2d:24:34:fd:a2:bb:71:96:16:15:dd: 90:9e:af:33:04:47:47:2f:e7:6b:79:a8:15:8a:c9: a2:e6:18:ec:af:19:7d:93:84:7d:48:dc:8e:2d:81: 09:81:48:9d:bb:da:ce:c2:96:63:c7:58:a0:80:87: 02:3e:62:b9:1c:73:56:ab:39:a0:d7:98:c2:97:17: 08:16:d1:cd:49:b7:cb:67:ee:d7:b7:82:c9:89:72: 15:7d:00:a7:09:a1:eb:6a:4b:41:70:bd:8b:34:c5: b5:fd:59:2c:ae:c5:20:f7:21:53:0f:8c:19:f3:88: 0e:68:cb:50:e6:eb:49:7f:35:3d:58:9c:01:f7:f1: 00:80:96:9f:24:99:9c:33:78:14:97:10:57:81:33: 16:ec:2a:3a:d3:a5:3b:59:f7:d1:4a:1c:fb:59:27: 6f:32:c3:af:25:67:20:e0:b9:56:2b:23:84:d0:16: c1:d8:bb:dd:1b:18:72:83:2c:a1:89:bb:d2:22:05: 98:a5:77:13:e1:5b:69:7b:8b:08:a7:52:ec:25:b8: 19:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7B:A0:CC:35:36:55:70:9B:20:4F:13:FE:E2:90:D1:D2:BC:DE:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8d211431-659b-3203-b22c-11ca3f703d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:db:80:1c:62:ff:1c:20:30:60:53:69:da:fa:ea:8e:f9:6e: 7f:5c:21:6d:ee:46:26:b4:c8:7e:e8:97:7e:74:27:a5:97:3b: d5:29:46:21:5d:d9:f9:f0:3d:9e:65:eb:46:85:5a:09:1d:dd: 65:ab:ff:40:ae:17:f7:fd:7f:3c:79:6e:63:ec:4f:8b:42:20: 42:92:e0:a4:20:2b:bc:95:82:34:d9:9c:70:92:6b:ed:15:3d: d3:6f:34:6a:b2:a7:62:1e:3d:a2:2f:bb:93:fd:77:01:44:57: b1:33:19:02:db:a4:5d:60:b4:fb:f2:fa:cd:4e:c6:66:24:bc: 89:02:39:b0:d1:a5:f7:e8:aa:01:48:5e:e7:87:f1:b8:27:2e: 7e:2b:40:68:5f:42:f0:c1:bc:b4:ec:f7:91:fe:bc:af:19:88: 98:f2:e1:81:60:a9:a5:e0:ae:55:d0:e0:40:03:28:c4:93:61: 50:fb:bc:dc:9f:53:8b:bd:e4:d8:02:e5:52:90:d1:ed:fe:81: 56:59:d2:75:b9:a8:30:e3:b3:d7:86:df:93:49:34:43:21:cb: 5d:15:9e:97:1b:d2:f6:00:3c:45:ed:b8:73:ad:9f:a5:80:ac: 12:24:78:4b:89:6c:1a:60:52:1d:73:37:fb:73:8a:fd:f2:e8: 19:ef:f2:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey9akTk2tuH0HPYQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YWNiMjY0YjMtMTAwZi00NjI2LWE0OTItOTEyYjc1MGZmMTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/r3Q5jsyyZtSSJoCW29W9xzxI6w9sA+U4Sg gJZMDXoPz1/BpU/aNCwlPxq9SF7ULSQ0/aK7cZYWFd2Qnq8zBEdHL+dreagVismi 5hjsrxl9k4R9SNyOLYEJgUidu9rOwpZjx1iggIcCPmK5HHNWqzmg15jClxcIFtHN SbfLZ+7Xt4LJiXIVfQCnCaHraktBcL2LNMW1/VksrsUg9yFTD4wZ84gOaMtQ5utJ fzU9WJwB9/EAgJafJJmcM3gUlxBXgTMW7Co606U7WffRShz7WSdvMsOvJWcg4LlW KyOE0BbB2LvdGxhygyyhibvSIgWYpXcT4Vtpe4sIp1LsJbgZkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNt7oMw1NlVwmyBPE/7ikNHSvN6/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGQyMTE0MzEtNjU5Yi0z MjAzLWIyMmMtMTFjYTNmNzAzZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/bgBxi/xwgMGBTadr66o75bn9cIW3uRia0yH7ol350J6WXO9UpRiFd 2fnwPZ5l60aFWgkd3WWr/0CuF/f9fzx5bmPsT4tCIEKS4KQgK7yVgjTZnHCSa+0V PdNvNGqyp2IePaIvu5P9dwFEV7EzGQLbpF1gtPvy+s1OxmYkvIkCObDRpffoqgFI XueH8bgnLn4rQGhfQvDBvLTs95H+vK8ZiJjy4YFgqaXgrlXQ4EADKMSTYVD7vNyf U4u95NgC5VKQ0e3+gVZZ0nW5qDDjs9eG35NJNEMhy10Vnpcb0vYAPEXtuHOtn6WA rBIkeEuJbBpgUh1zN/tziv3y6Bnv8r8= -----END CERTIFICATE-----Generated at Sun Aug 24 06:57:54 2025 by rpki-client