$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa File: b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa (raw, json) Hash identifier: zfi2wE/4KVEI2g27CX0Y8fytFj2UrIN4hwMp+Ki4P0A= Subject key identifier: 58:DF:6A:48:5F:01:9E:AF:69:B7:AE:64:47:96:92:12:82:48:C2:E2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AC2E120817D58BE67FD52E6A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.153.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:20:81:7d:58:be:67:fd:52:e6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=54ba14b3-3f48-4032-8af7-e060d071f94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:35:6f:2d:de:38:b9:ac:95:80:38:08:6a:34: 8d:97:56:12:ea:e6:ee:77:20:4b:cd:97:46:b3:5a: 80:a9:d8:d0:c1:7b:0d:18:9d:57:09:5a:33:76:78: 42:9a:49:05:8a:a8:26:9f:bf:4a:65:59:cc:9b:3a: cc:68:08:5a:c3:c1:8e:82:97:aa:c1:39:c3:5b:e2: 9b:c8:bf:d8:c9:d0:9b:cb:03:e3:3d:87:04:80:8a: 56:e2:67:58:69:6a:89:68:83:97:32:78:b0:2f:2b: 39:da:53:96:2e:45:d6:c7:db:2c:6c:b1:8d:9e:be: 40:bc:ba:d9:78:ae:7b:d6:51:78:f2:31:78:dd:31: a1:17:9d:c2:9c:47:51:46:e3:38:a8:76:64:ab:09: bc:70:fa:93:be:cf:52:54:33:9e:9f:79:56:82:7f: 29:13:fb:f9:1c:6d:68:5e:5e:9b:37:8c:0a:5d:33: dc:ef:3d:3d:05:71:8a:44:d4:83:1a:49:42:17:5c: db:54:10:38:42:65:dc:6d:2b:1e:08:09:df:8b:c7: 9c:ab:79:a2:70:6c:92:c4:d9:96:e5:26:f5:51:74: 2f:05:fe:d6:06:e6:df:24:e7:0d:e1:c7:93:5f:54: b9:65:4a:ca:ba:09:11:5b:5e:2a:47:8c:84:89:46: 55:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DF:6A:48:5F:01:9E:AF:69:B7:AE:64:47:96:92:12:82:48:C2:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c5:00:25:91:56:a2:fd:12:be:ee:11:3f:07:46:1b:29:da: d3:fc:f7:d2:c7:93:58:15:b4:c9:fe:f5:df:a8:54:c1:d1:5c: 2c:a3:f3:3c:3c:b9:7a:b1:f5:e6:ad:1b:ce:aa:c4:2a:19:59: 02:10:6e:dc:23:9b:de:ce:06:e3:e1:21:00:48:57:b4:29:fa: 84:f1:da:7f:5f:46:92:8b:2c:d9:54:c4:77:a6:e4:22:2c:3e: 82:1f:4c:79:30:3a:bb:58:1a:45:e7:b0:22:f2:a9:71:45:e2: 7e:57:be:fb:66:4b:49:bc:52:fe:f5:0d:19:e4:4b:14:5b:36: e7:c0:1f:f2:f7:d6:3a:cf:6c:ab:39:e3:c1:3a:9c:b3:14:4d: 0a:a5:15:f3:fb:1d:5b:d4:97:71:52:d1:70:27:6c:70:90:d1: dc:31:3b:02:6f:68:c4:e8:45:f7:6c:3e:4e:dd:75:a4:43:d1: 9b:23:f1:4f:ba:7e:de:3b:ad:f4:f1:0a:e9:7b:40:fc:4a:81: 38:69:7e:cf:d5:85:fa:16:52:d0:96:4f:75:2a:05:fe:2f:c3: 20:86:0b:c6:2a:33:11:fa:9c:ed:6d:e0:06:71:cf:29:71:84: 31:91:92:fa:86:74:34:23:c1:74:14:0b:ba:b2:cc:4e:7e:9a: d4:07:aa:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4SCBfVi+Z/1S5qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NTRiYTE0YjMtM2Y0OC00MDMyLThhZjctZTA2MGQwNzFmOTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zVvLd44uayVgDgIajSNl1YS6ubudyBLzZdG s1qAqdjQwXsNGJ1XCVozdnhCmkkFiqgmn79KZVnMmzrMaAhaw8GOgpeqwTnDW+Kb yL/YydCbywPjPYcEgIpW4mdYaWqJaIOXMniwLys52lOWLkXWx9ssbLGNnr5AvLrZ eK571lF48jF43TGhF53CnEdRRuM4qHZkqwm8cPqTvs9SVDOen3lWgn8pE/v5HG1o Xl6bN4wKXTPc7z09BXGKRNSDGklCF1zbVBA4QmXcbSseCAnfi8ecq3micGySxNmW 5Sb1UXQvBf7WBubfJOcN4ceTX1S5ZUrKugkRW14qR4yEiUZV+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjfakhfAZ6vabeuZEeWkhKCSMLiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjVlZTdjM2EtZjc1MS0z M2U0LWI5ZTItMzdhZjE1YWFiYTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnFACWRVqL9Er7uET8HRhsp2tP899LHk1gVtMn+9d+oVMHRXCyj8zw8 uXqx9eatG86qxCoZWQIQbtwjm97OBuPhIQBIV7Qp+oTx2n9fRpKLLNlUxHem5CIs PoIfTHkwOrtYGkXnsCLyqXFF4n5XvvtmS0m8Uv71DRnkSxRbNufAH/L31jrPbKs5 48E6nLMUTQqlFfP7HVvUl3FS0XAnbHCQ0dwxOwJvaMToRfdsPk7ddaRD0Zsj8U+6 ft47rfTxCul7QPxKgThpfs/VhfoWUtCWT3UqBf4vwyCGC8YqMxH6nO1t4AZxzylx hDGRkvqGdDQjwXQUC7qyzE5+mtQHqkE= -----END CERTIFICATE-----Generated at Sun Aug 24 08:43:25 2025 by rpki-client