$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a75ef9ac-039c-3b4c-827a-083b988f4873.roa File: a75ef9ac-039c-3b4c-827a-083b988f4873.roa (raw, json) Hash identifier: W98gGsshsVmbNLrAuCEeO3zgfMzao9EXgP4kWrTH/AQ= Subject key identifier: 4C:C2:A8:66:75:51:78:D2:22:8F:37:C6:B0:2A:03:9F:17:76:83:50 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B05E1414E3DF03F2DFB635080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a75ef9ac-039c-3b4c-827a-083b988f4873.roa Signing time: Sat 30 Aug 2025 01:00:34 +0000 ROA not before: Sat 30 Aug 2025 01:00:34 +0000 ROA not after: Fri 28 Nov 2025 02:00:34 +0000 asID: 8069 IP address blocks: 20.153.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:e1:41:4e:3d:f0:3f:2d:fb:63:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 30 01:00:34 2025 GMT Not After : Nov 28 02:00:34 2025 GMT Subject: CN=eec0a510-cf99-4977-863d-6583a5c040fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:63:a0:2d:b9:12:11:c6:8c:24:89:32:db:f9: 22:fa:2e:4e:54:83:1b:97:d2:7b:e4:39:d7:8e:cf: 18:26:41:47:2f:f3:db:b2:5a:3b:ae:3b:f0:15:75: 27:de:7e:77:4d:3c:74:d5:c4:c3:41:bd:ee:77:bd: 95:0f:01:30:0c:14:3b:87:39:d8:6e:47:7a:b6:af: bf:d6:11:41:13:60:34:ae:5e:77:b2:af:6c:fb:ec: b5:ff:c5:ae:d0:3f:14:f1:d0:61:3b:e8:d8:bf:c4: bc:8a:53:8d:b5:a3:b9:d2:f6:07:4b:b7:2e:40:b1: 86:07:ed:5e:90:a0:45:d2:44:56:8f:26:13:0c:13: fe:b3:a2:44:3a:6d:5b:96:af:e5:73:7d:10:36:a9: da:69:d2:2e:55:d3:bd:b4:93:c9:f1:af:65:54:c9: 6a:da:60:45:1c:12:a9:6f:14:86:7e:75:9c:bd:36: f5:c6:66:e3:d5:5e:87:41:2b:45:af:37:fd:9c:d8: 2c:f8:72:a5:92:81:d3:f5:c1:bf:8c:59:33:0b:08: a8:49:28:b4:39:42:80:19:0e:4b:90:30:53:e5:3a: 9e:8c:ee:2f:2f:da:53:11:b3:f5:60:62:ee:c7:a6: 19:77:7a:7d:6b:49:de:6e:98:8a:21:76:63:7b:74: ea:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C2:A8:66:75:51:78:D2:22:8F:37:C6:B0:2A:03:9F:17:76:83:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a75ef9ac-039c-3b4c-827a-083b988f4873.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:07:29:2c:8a:49:29:20:5a:94:75:6a:bc:a9:2c:7e:f4:73: 89:dd:ae:f2:66:d8:84:82:c6:a3:88:c3:59:2b:80:e3:f4:a0: a4:0a:bf:3b:49:b9:25:ad:b7:30:d8:e6:f9:7e:b0:6d:7d:2c: 86:8b:ed:44:95:8b:3e:37:29:72:8e:06:b1:f8:24:92:98:a7: f7:92:95:70:92:77:54:fe:ae:a3:2c:56:7b:fc:3e:52:81:2b: da:c6:25:20:2c:99:b6:d5:3b:9d:23:ba:2e:3a:60:81:95:33: 41:5e:ff:0e:80:c8:a6:40:6d:51:1c:c1:e3:8a:c6:42:f9:39: 6e:03:0e:0b:b8:bd:02:f0:f8:49:e4:a7:5c:cc:52:1a:9c:95: 0e:5a:65:cd:80:31:ad:64:2b:62:b2:0e:90:bc:f0:01:7b:6f: f4:f1:fb:75:da:ad:6e:b7:6a:f2:09:9c:cf:14:8f:a3:d1:19: a1:53:ab:e5:e3:7d:0d:80:81:07:ed:6c:8b:db:77:a9:20:cf: 35:20:e4:72:9b:8a:ec:3c:a9:ef:44:bc:7d:fe:88:53:44:a0: f9:43:2e:c4:bd:f9:3f:d8:a4:ae:f8:d8:66:b4:25:5e:2b:8a: 6b:4a:19:ba:3c:81:a1:cf:83:0a:e8:08:c5:23:f4:4e:d2:3c: 34:61:be:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsF4UFOPfA/LftjUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgzMDAxMDAzNFoXDTI1MTEyODAyMDAzNFowLzEtMCsGA1UEAxMk ZWVjMGE1MTAtY2Y5OS00OTc3LTg2M2QtNjU4M2E1YzA0MGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WOgLbkSEcaMJIky2/ki+i5OVIMbl9J75DnX js8YJkFHL/Pbslo7rjvwFXUn3n53TTx01cTDQb3ud72VDwEwDBQ7hznYbkd6tq+/ 1hFBE2A0rl53sq9s++y1/8Wu0D8U8dBhO+jYv8S8ilONtaO50vYHS7cuQLGGB+1e kKBF0kRWjyYTDBP+s6JEOm1blq/lc30QNqnaadIuVdO9tJPJ8a9lVMlq2mBFHBKp bxSGfnWcvTb1xmbj1V6HQStFrzf9nNgs+HKlkoHT9cG/jFkzCwioSSi0OUKAGQ5L kDBT5TqejO4vL9pTEbP1YGLux6YZd3p9a0nebpiKIXZje3TqQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzCqGZ1UXjSIo83xrAqA58XdoNQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTc1ZWY5YWMtMDM5Yy0z YjRjLTgyN2EtMDgzYjk4OGY0ODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMHKSyKSSkgWpR1arypLH70c4ndrvJm2ISCxqOIw1krgOP0oKQKvztJ uSWttzDY5vl+sG19LIaL7USViz43KXKOBrH4JJKYp/eSlXCSd1T+rqMsVnv8PlKB K9rGJSAsmbbVO50jui46YIGVM0Fe/w6AyKZAbVEcweOKxkL5OW4DDgu4vQLw+Enk p1zMUhqclQ5aZc2AMa1kK2KyDpC88AF7b/Tx+3XarW63avIJnM8Uj6PRGaFTq+Xj fQ2AgQftbIvbd6kgzzUg5HKbiuw8qe9EvH3+iFNEoPlDLsS9+T/YpK742Ga0JV4r imtKGbo8gaHPgwroCMUj9E7SPDRhvsc= -----END CERTIFICATE-----Generated at Mon Oct 20 07:26:12 2025 by rpki-client