$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa File: 8dea440f-3599-3031-bd25-4f82936b64f4.roa (raw, json) Hash identifier: Spy/AVhKwN91s6SeFYdUUp67LFaBbOslYyUffcwITrk= Subject key identifier: 54:E1:B6:B7:89:2E:C1:E3:0D:3F:20:98:35:F2:1B:CD:91:A3:D1:BC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF52158E23369369102472720 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.157.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:58:e2:33:69:36:91:02:47:27:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=ca0dc399-b7f9-4ce2-8efc-1b7c186a5fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:ba:01:bc:0d:67:ce:86:56:06:6e:09:91: 0e:10:0f:a9:8b:f7:45:3c:3e:91:ac:62:f8:b2:16: ac:e8:eb:f9:55:c6:2f:03:05:79:69:97:17:4b:f3: 19:90:98:0c:f0:9b:1d:fc:ec:1d:c7:ee:d1:fd:b4: 1f:d0:17:88:bd:c9:79:94:fb:cc:75:1d:35:fb:26: f6:a2:f6:d7:5f:11:fa:19:5b:63:6b:d3:46:0c:ad: 65:0c:ac:45:d6:0a:33:b4:47:3b:72:f4:9f:20:90: d2:58:28:32:9d:4a:cc:2e:44:8c:f4:a5:ba:8b:99: a5:de:3f:3c:eb:ed:7a:4c:e7:b5:65:cf:0a:52:d9: 40:0e:3f:f6:5a:c1:26:b5:e6:87:1a:da:27:c1:e4: b5:af:ba:9c:f7:9e:f4:6c:be:bf:84:15:f9:cd:ec: 03:5c:7d:66:29:52:72:38:ce:1f:4a:e2:1e:b9:bf: 77:75:99:38:c8:b6:94:29:86:5e:6e:97:61:7e:f7: c2:19:03:64:c8:92:f1:79:88:ed:23:f8:93:eb:fa: d7:9d:90:2c:6b:b2:04:28:4c:95:19:17:2f:75:14: e5:2b:59:47:68:90:f8:a3:be:93:7d:67:7f:07:9f: 5e:9f:95:e8:62:45:a8:65:24:1f:fa:75:21:0e:4d: 48:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E1:B6:B7:89:2E:C1:E3:0D:3F:20:98:35:F2:1B:CD:91:A3:D1:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:d4:9c:0a:19:ac:e9:95:39:3d:93:b7:30:c2:af:23:94:cd: 6c:78:4c:a2:a4:17:aa:05:66:29:b3:11:a7:3f:8e:ce:75:4d: de:31:c6:c4:71:ac:da:d1:03:75:36:f5:b0:ce:0b:25:f3:9c: 23:14:c6:ea:51:3d:92:4a:ce:fe:4a:f2:79:ec:ca:6d:2b:c5: fb:a0:c1:5a:a2:10:31:ff:81:5c:ac:46:d6:b4:80:ed:5b:97: 55:e0:29:a3:7a:51:19:e1:b7:40:c1:f5:97:0b:de:a7:10:83: ad:42:c1:25:7d:be:6c:a3:f0:15:3c:02:fb:62:ae:ef:01:79: e3:c4:bf:63:a4:3c:fe:89:2e:0b:ba:6f:eb:63:8b:5f:93:7d: 2f:f5:77:93:6e:38:c0:70:68:c2:6d:1d:ea:63:33:2b:dc:c9: 14:8c:a7:1a:00:0e:15:3b:71:42:43:67:c6:c2:77:07:d7:bd: 6d:63:b9:5e:89:a5:30:87:2c:6d:ae:22:7e:3c:90:9f:9b:c4: 43:14:94:4a:3d:20:f8:fe:b5:70:6a:0c:d3:fe:50:ec:ce:11: b8:e0:ba:a6:db:9b:cb:f9:b0:6e:96:1e:ea:9f:10:82:69:0b: 12:43:f5:e5:b0:f9:eb:72:75:87:ed:a1:09:0e:e7:15:89:22: 88:5a:16:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVjiM2k2kQJHJyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2EwZGMzOTktYjdmOS00Y2UyLThlZmMtMWI3YzE4NmE1ZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ji6AbwNZ86GVgZuCZEOEA+pi/dFPD6RrGL4 shas6Ov5VcYvAwV5aZcXS/MZkJgM8Jsd/Owdx+7R/bQf0BeIvcl5lPvMdR01+yb2 ovbXXxH6GVtja9NGDK1lDKxF1goztEc7cvSfIJDSWCgynUrMLkSM9KW6i5ml3j88 6+16TOe1Zc8KUtlADj/2WsEmteaHGtonweS1r7qc9570bL6/hBX5zewDXH1mKVJy OM4fSuIeub93dZk4yLaUKYZebpdhfvfCGQNkyJLxeYjtI/iT6/rXnZAsa7IEKEyV GRcvdRTlK1lHaJD4o76TfWd/B59en5XoYkWoZSQf+nUhDk1IowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFThtreJLsHjDT8gmDXyG82Ro9G8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGRlYTQ0MGYtMzU5OS0z MDMxLWJkMjUtNGY4MjkzNmI2NGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfUnAoZrOmVOT2TtzDCryOUzWx4TKKkF6oFZimzEac/js51Td4xxsRx rNrRA3U29bDOCyXznCMUxupRPZJKzv5K8nnsym0rxfugwVqiEDH/gVysRta0gO1b l1XgKaN6URnht0DB9ZcL3qcQg61CwSV9vmyj8BU8Avtiru8BeePEv2OkPP6JLgu6 b+tji1+TfS/1d5NuOMBwaMJtHepjMyvcyRSMpxoADhU7cUJDZ8bCdwfXvW1juV6J pTCHLG2uIn48kJ+bxEMUlEo9IPj+tXBqDNP+UOzOEbjguqbbm8v5sG6WHuqfEIJp CxJD9eWw+etydYftoQkO5xWJIohaFlM= -----END CERTIFICATE-----Generated at Sun Aug 24 08:44:34 2025 by rpki-client