$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f75d8ad8-b7b5-3eed-b306-06679405db65.roa File: f75d8ad8-b7b5-3eed-b306-06679405db65.roa (raw, json) Hash identifier: 11NvTzgUn0pjtl1Wdgf7I6l3Jp6dEhrW0lYNfy8DHXo= Subject key identifier: 9B:26:05:2A:C9:C8:AE:67:FA:94:D4:59:5C:0F:39:D9:49:B0:0D:BD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584ADECBD65C35E88C2FCD1B0F70 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f75d8ad8-b7b5-3eed-b306-06679405db65.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.153.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:d6:5c:35:e8:8c:2f:cd:1b:0f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=54a93c01-4fd5-4584-8301-a96fc25fe0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:fc:60:a7:cf:8a:57:b1:2b:b1:a5:82:34: b0:69:ff:b0:cb:8f:59:b0:5d:87:d2:0b:c8:3e:57: d9:0d:66:be:fa:1d:86:f8:d8:69:72:83:6e:a1:4d: 7a:58:78:71:f9:9e:ee:51:55:eb:83:c4:9b:5f:d4: 07:82:9f:7d:1d:3d:fb:a8:e6:43:e1:90:43:4d:8c: 8d:2d:77:14:ec:a4:48:9c:21:02:91:01:ac:54:39: 21:f1:69:44:bc:6d:94:80:3f:48:30:19:34:60:9c: 92:17:13:cc:2c:1e:2f:dc:eb:b3:32:96:52:26:60: a0:ea:78:9f:0c:9c:84:72:85:4d:fb:e9:77:47:67: ef:ce:b7:c1:2a:15:bb:b8:1b:88:18:4c:46:dd:d4: 17:4c:a9:ce:36:99:59:a8:e2:ce:9c:ed:f4:51:34: cb:97:df:51:6e:5c:be:b1:6c:6c:fb:2c:09:60:94: ad:bf:28:20:87:80:55:49:a7:be:83:98:35:69:d2: 67:78:50:67:8a:4f:a3:33:0e:2f:1d:40:59:57:87: 78:da:fe:f7:44:1c:b8:09:da:59:3b:c4:9f:31:2d: cc:85:f4:60:0e:3d:c1:d0:1a:8e:ea:b4:ee:4e:2b: 4e:f9:2c:90:c0:78:a7:ff:97:bf:2d:c6:22:65:ef: 9d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:26:05:2A:C9:C8:AE:67:FA:94:D4:59:5C:0F:39:D9:49:B0:0D:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f75d8ad8-b7b5-3eed-b306-06679405db65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d3:75:ad:78:f8:fc:13:63:29:9a:5b:10:ff:91:31:28:bc: 1b:78:9f:72:c8:17:11:ab:09:56:82:4d:7c:75:d6:de:c2:32: ae:08:e3:7c:df:43:6b:16:e2:5a:18:3d:03:f8:f6:ae:ef:dd: a3:45:01:4d:cc:da:00:92:49:a4:e4:1f:ff:b2:c1:14:ec:3f: 12:1f:97:ab:0d:77:1f:9a:4f:55:d5:28:ab:48:4f:ba:03:0e: 83:6b:a6:19:a0:e5:d9:17:4e:22:9c:76:06:58:1c:21:e2:cc: 0a:f6:17:2c:8b:19:ae:c2:04:2c:af:b7:8e:af:0c:e2:be:5c: 3f:5b:96:6c:6a:5c:58:ea:3f:96:e3:f3:5a:11:db:68:bc:69: 17:65:e4:29:d6:e5:8a:40:e9:c9:bc:a7:c2:d9:fc:1d:e2:94: 4e:9e:bc:98:1e:45:15:6d:0d:f8:2f:a2:7e:34:28:f0:2b:a5: f3:db:26:70:f3:aa:86:f2:a5:01:c5:d4:75:90:a3:12:e7:82: c8:f4:41:f5:65:87:4d:0e:05:df:3c:63:6c:80:80:9a:70:92: 1a:27:aa:3e:ab:ae:38:f6:2e:9c:b1:1e:7e:69:38:d9:4d:c8: d0:ac:95:25:39:9f:79:08:f3:1c:1f:fb:f5:79:8b:19:6f:47: ce:ff:0f:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey9ZcNeiML80bD3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NTRhOTNjMDEtNGZkNS00NTg0LTgzMDEtYTk2ZmMyNWZlMGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0X8YKfPilexK7GlgjSwaf+wy49ZsF2H0gvI PlfZDWa++h2G+NhpcoNuoU16WHhx+Z7uUVXrg8SbX9QHgp99HT37qOZD4ZBDTYyN LXcU7KRInCECkQGsVDkh8WlEvG2UgD9IMBk0YJySFxPMLB4v3OuzMpZSJmCg6nif DJyEcoVN++l3R2fvzrfBKhW7uBuIGExG3dQXTKnONplZqOLOnO30UTTLl99Rbly+ sWxs+ywJYJStvyggh4BVSae+g5g1adJneFBnik+jMw4vHUBZV4d42v73RBy4CdpZ O8SfMS3MhfRgDj3B0BqO6rTuTitO+SyQwHin/5e/LcYiZe+dRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsmBSrJyK5n+pTUWVwPOdlJsA29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjc1ZDhhZDgtYjdiNS0z ZWVkLWIzMDYtMDY2Nzk0MDVkYjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLTda14+PwTYymaWxD/kTEovBt4n3LIFxGrCVaCTXx11t7CMq4I43zf Q2sW4loYPQP49q7v3aNFAU3M2gCSSaTkH/+ywRTsPxIfl6sNdx+aT1XVKKtIT7oD DoNrphmg5dkXTiKcdgZYHCHizAr2FyyLGa7CBCyvt46vDOK+XD9blmxqXFjqP5bj 81oR22i8aRdl5CnW5YpA6cm8p8LZ/B3ilE6evJgeRRVtDfgvon40KPArpfPbJnDz qobypQHF1HWQoxLngsj0QfVlh00OBd88Y2yAgJpwkhonqj6rrjj2LpyxHn5pONlN yNCslSU5n3kI8xwf+/V5ixlvR87/Dzo= -----END CERTIFICATE-----Generated at Sun Aug 24 06:57:46 2025 by rpki-client