$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/99262335-e4d0-30ea-8231-d57c9635e705.roa File: 99262335-e4d0-30ea-8231-d57c9635e705.roa (raw, json) Hash identifier: 9xijKp8O+ukkW1l86zHvQX1IiZNzvL6nPzi8MJ75AY8= Subject key identifier: 6B:5B:58:89:C0:19:75:A2:A6:FA:DC:9B:E6:DB:6E:40:24:E4:8B:1F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF5215908B7BD039D2737CF00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/99262335-e4d0-30ea-8231-d57c9635e705.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.157.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:59:08:b7:bd:03:9d:27:37:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=8f4cd52b-0b48-4622-9942-863d348e97d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:48:03:98:60:bc:bc:f7:ca:56:3b:4f:8b: c2:eb:8d:62:37:cc:a6:a1:16:4f:cb:d1:ac:7b:5c: 94:82:31:17:06:b0:43:e8:99:3f:84:9b:88:7f:af: 28:83:5d:b3:9b:fa:61:9d:79:b7:30:46:48:b3:24: 8a:91:14:63:01:bf:0f:31:01:15:8f:1e:5c:d6:68: f7:ef:c8:59:18:79:70:4e:82:2b:dd:16:a7:6b:07: cf:6b:d8:21:dc:2b:fd:8c:a8:dd:eb:03:7b:16:a8: d9:73:38:db:44:89:b9:67:c3:58:54:6e:e8:4d:76: 47:23:9c:2b:a9:02:9e:79:08:e7:81:81:b7:bd:8c: 1e:64:fe:f0:b7:5a:c3:b2:26:ca:1b:b0:74:a5:4d: 64:8e:0b:f3:20:4f:37:a9:a8:87:df:21:56:47:0b: 96:05:1e:29:92:ff:97:6d:59:51:8a:26:ef:bb:56: 02:1c:e1:09:00:3e:85:c7:dc:31:9c:6c:f2:34:83: 27:b0:bb:b2:1c:7b:74:00:2d:8b:d3:41:41:b9:2d: b0:ff:dd:87:e8:8a:2f:ab:0a:ea:a7:f4:47:03:79: 06:65:15:67:8d:77:7b:77:c9:cd:33:05:a7:e4:3f: 9f:70:4c:c3:df:19:41:9c:0d:44:d4:07:ec:01:93: bd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5B:58:89:C0:19:75:A2:A6:FA:DC:9B:E6:DB:6E:40:24:E4:8B:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/99262335-e4d0-30ea-8231-d57c9635e705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b8:cc:df:2d:27:4c:9f:11:e5:17:36:0a:0b:4d:06:ab:6d: 5d:b1:70:c1:fc:cf:25:b8:99:cf:a2:57:91:fd:75:b2:f0:cd: 46:3d:66:0b:d1:7f:6d:7e:a9:f8:01:e6:b4:06:5e:c5:5f:5e: 2b:b4:ab:45:42:5a:bb:89:a8:54:cd:8e:db:8d:82:bf:a4:83: 09:9b:f3:09:06:03:4a:54:68:66:b9:8d:5e:da:35:46:8c:d6: fe:1b:c9:64:15:e6:c2:99:39:7c:86:5b:c4:98:a2:fa:f8:6e: a6:74:87:45:cd:56:65:43:61:28:cb:91:56:79:96:33:38:1e: a6:f5:9e:cc:14:de:df:f0:be:a8:04:9b:f8:2c:03:73:37:72: 7f:07:75:c5:d1:9b:f6:7c:b7:37:3d:da:e1:e2:9f:c5:91:46: fa:d8:bc:74:1c:42:c3:c1:b5:15:54:af:91:15:de:0c:67:8f: 08:49:5b:95:af:a7:b7:94:ea:90:d3:15:51:53:ea:72:61:2a: 28:80:f2:10:31:fe:e4:09:d8:bc:f3:0b:03:2f:e7:20:4c:15: e7:14:6d:50:ba:14:a7:fd:0e:1c:e4:a3:58:e2:35:60:69:9e: f5:da:1a:42:8f:8f:00:27:a9:5a:46:df:ee:55:8a:d0:89:f2: c8:4e:5d:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVkIt70DnSc3zwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk OGY0Y2Q1MmItMGI0OC00NjIyLTk5NDItODYzZDM0OGU5N2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz9IA5hgvLz3ylY7T4vC641iN8ymoRZPy9Gs e1yUgjEXBrBD6Jk/hJuIf68og12zm/phnXm3MEZIsySKkRRjAb8PMQEVjx5c1mj3 78hZGHlwToIr3RanawfPa9gh3Cv9jKjd6wN7FqjZczjbRIm5Z8NYVG7oTXZHI5wr qQKeeQjngYG3vYweZP7wt1rDsibKG7B0pU1kjgvzIE83qaiH3yFWRwuWBR4pkv+X bVlRiibvu1YCHOEJAD6Fx9wxnGzyNIMnsLuyHHt0AC2L00FBuS2w/92H6Iovqwrq p/RHA3kGZRVnjXd7d8nNMwWn5D+fcEzD3xlBnA1E1AfsAZO9nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtbWInAGXWipvrcm+bbbkAk5IsfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTkyNjIzMzUtZTRkMC0z MGVhLTgyMzEtZDU3Yzk2MzVlNzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD64zN8tJ0yfEeUXNgoLTQarbV2xcMH8zyW4mc+iV5H9dbLwzUY9ZgvR f21+qfgB5rQGXsVfXiu0q0VCWruJqFTNjtuNgr+kgwmb8wkGA0pUaGa5jV7aNUaM 1v4byWQV5sKZOXyGW8SYovr4bqZ0h0XNVmVDYSjLkVZ5ljM4Hqb1nswU3t/wvqgE m/gsA3M3cn8HdcXRm/Z8tzc92uHin8WRRvrYvHQcQsPBtRVUr5EV3gxnjwhJW5Wv p7eU6pDTFVFT6nJhKiiA8hAx/uQJ2LzzCwMv5yBMFecUbVC6FKf9Dhzko1jiNWBp nvXaGkKPjwAnqVpG3+5VitCJ8shOXTs= -----END CERTIFICATE-----Generated at Sun Aug 24 08:45:59 2025 by rpki-client