$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a7f6ca8d-3bb5-31b8-ab97-4e2f08e094ff.roa File: a7f6ca8d-3bb5-31b8-ab97-4e2f08e094ff.roa (raw, json) Hash identifier: iQMDwpC3FKb2Z4XzXNoB7kLFa5zRne6f2k2gtFWLU7k= Subject key identifier: 88:91:B8:FE:84:40:D3:41:A0:6D:84:97:3D:58:3D:72:DB:5A:7C:57 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AC2E121B0924A90694FD35500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a7f6ca8d-3bb5-31b8-ab97-4e2f08e094ff.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.153.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:21:b0:92:4a:90:69:4f:d3:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=6939a8f9-9244-4521-adb3-5fc0bb0c0b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:70:29:72:c6:c0:e0:26:37:fb:ba:f7:8f:e8: 76:eb:87:3d:03:5c:f7:f5:c8:12:5d:30:0f:e6:dc: dc:3e:e0:af:fb:63:7c:6f:39:fb:84:10:14:38:62: a4:05:f2:6a:82:0a:b4:a6:6c:5c:b3:01:28:ed:24: ff:13:02:23:33:06:ae:b9:14:41:9c:38:fc:77:2a: d7:9f:d1:f6:be:01:4f:ad:25:99:d8:30:86:94:58: 60:75:28:0a:4f:80:47:c8:b0:a4:3c:70:0b:bd:f7: ec:2f:30:a7:f5:46:f0:c4:33:eb:7b:c8:cf:c3:f4: 9b:7a:b4:aa:1d:56:68:84:70:e8:26:6e:4d:a3:75: d7:bc:64:58:5d:7d:05:1b:87:a3:94:4c:40:2a:82: fe:6d:b6:21:fb:a7:08:dd:97:f7:88:de:c9:2c:4e: d2:45:f2:b2:7e:8a:b5:27:9b:17:29:f1:db:e0:47: e0:6a:1c:f8:97:9d:2f:cf:99:ac:3e:c3:5a:32:d9: 88:f0:9a:92:c2:85:ab:aa:af:16:86:28:8c:19:96: 30:88:7a:fb:61:0a:43:49:40:04:9a:99:a2:17:f5: 0e:d1:56:c4:f9:43:87:9c:43:3e:0d:ea:45:95:14: 00:93:ac:f1:b4:b3:94:b0:c9:ff:b9:b7:40:39:8d: 39:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:91:B8:FE:84:40:D3:41:A0:6D:84:97:3D:58:3D:72:DB:5A:7C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a7f6ca8d-3bb5-31b8-ab97-4e2f08e094ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ab:96:bd:76:1c:73:3d:fe:9a:40:03:83:cb:be:8b:80:85: f3:7e:37:c2:fe:1c:c2:e9:4b:36:5f:cb:da:d9:9e:cb:13:35: 26:ac:84:e3:e5:43:aa:73:ca:fa:56:0a:00:e2:7c:6b:9a:af: a2:ed:e0:f4:01:64:54:3d:29:8a:96:d8:09:bb:05:d5:0f:43: 7f:55:a8:f4:6b:b2:4a:fe:b1:9a:c2:46:f1:49:c4:c9:03:2c: 53:77:23:80:9d:67:e4:3d:bf:1e:f0:85:cb:c9:02:b1:06:23: 16:81:5f:f5:2b:94:b3:47:99:3e:1d:c9:15:9e:be:5a:9b:b8: 2e:06:ea:ae:8f:f9:67:eb:63:09:00:36:f1:a5:99:5e:2f:d3: b6:77:d3:2c:76:a9:6d:82:66:b8:ed:d6:90:f4:b2:22:bd:00: 8d:e7:56:d8:7f:e4:d5:aa:78:25:31:9d:5f:53:af:6b:82:c5: db:9c:6a:38:2a:ff:b2:df:60:dd:a2:f2:99:71:58:49:06:4a: dc:63:9f:78:87:e1:72:7b:4e:d1:11:65:a3:9e:ce:64:65:a4: 36:f1:38:9f:bd:1f:b7:6a:b3:a6:03:ba:81:e9:f7:9f:db:a5: ef:94:0b:2e:93:c0:c6:b1:8b:99:ee:0b:9b:ba:6e:f3:b3:e9: a6:77:f4:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4SGwkkqQaU/TVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NjkzOWE4ZjktOTI0NC00NTIxLWFkYjMtNWZjMGJiMGMwYjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXApcsbA4CY3+7r3j+h264c9A1z39cgSXTAP 5tzcPuCv+2N8bzn7hBAUOGKkBfJqggq0pmxcswEo7ST/EwIjMwauuRRBnDj8dyrX n9H2vgFPrSWZ2DCGlFhgdSgKT4BHyLCkPHALvffsLzCn9UbwxDPre8jPw/SberSq HVZohHDoJm5No3XXvGRYXX0FG4ejlExAKoL+bbYh+6cI3Zf3iN7JLE7SRfKyfoq1 J5sXKfHb4Efgahz4l50vz5msPsNaMtmI8JqSwoWrqq8WhiiMGZYwiHr7YQpDSUAE mpmiF/UO0VbE+UOHnEM+DepFlRQAk6zxtLOUsMn/ubdAOY05eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiRuP6EQNNBoG2Elz1YPXLbWnxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTdmNmNhOGQtM2JiNS0z MWI4LWFiOTctNGUyZjA4ZTA5NGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJm0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImrlr12HHM9/ppAA4PLvouAhfN+N8L+HMLpSzZfy9rZnssTNSashOPl Q6pzyvpWCgDifGuar6Lt4PQBZFQ9KYqW2Am7BdUPQ39VqPRrskr+sZrCRvFJxMkD LFN3I4CdZ+Q9vx7whcvJArEGIxaBX/UrlLNHmT4dyRWevlqbuC4G6q6P+WfrYwkA NvGlmV4v07Z30yx2qW2CZrjt1pD0siK9AI3nVth/5NWqeCUxnV9Tr2uCxducajgq /7LfYN2i8plxWEkGStxjn3iH4XJ7TtERZaOezmRlpDbxOJ+9H7dqs6YDuoHp95/b pe+UCy6TwMaxi5nuC5u6bvOz6aZ39JQ= -----END CERTIFICATE-----Generated at Sun Aug 24 06:56:36 2025 by rpki-client