$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa File: 4e67d494-acab-3047-896e-83e082ee4263.roa (raw, json) Hash identifier: ZrrXsKDVkEU4xxhqYQS5Z89krmvoqLxefk2x3+KCwfs= Subject key identifier: 43:F8:7F:87:29:46:4E:63:DC:A0:E2:B3:4B:DD:CE:81:42:1C:E4:30 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AB2212ADB90823231E3A9EA80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 8069 IP address blocks: 20.157.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:2a:db:90:82:32:31:e3:a9:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=f0b269fd-c46b-4064-84b2-c3a542d3d62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b3:eb:c5:ec:4c:c1:f9:30:68:38:e6:23:07: 63:e8:8c:f0:0f:e0:7f:0b:1d:2a:da:e5:3d:17:3a: 4b:c4:0d:fe:11:59:39:21:e3:ca:ef:2d:32:8a:85: 3a:45:7f:cd:8e:42:ba:89:dd:3c:96:03:4e:6c:17: 62:bd:d0:8d:83:74:17:f4:a6:6d:be:9e:fc:a2:f9: 38:bd:83:ff:22:da:5a:5a:b1:b3:4f:14:aa:8a:1b: 25:f9:ec:21:63:a1:1b:a1:ab:e4:4e:aa:e7:0f:9e: ad:04:75:71:84:b4:43:31:21:fe:62:95:94:44:b4: c6:9c:0b:3f:65:d9:fa:fa:88:43:c0:a3:6e:f6:36: be:fa:30:a2:76:3b:3f:1e:b6:6a:fe:d9:e9:a3:77: 35:8c:37:92:27:fd:09:79:f3:3a:9f:73:99:72:e0: 1c:29:db:00:22:b2:41:70:1f:7a:93:2d:dc:e4:7a: 86:e7:cb:3c:5f:a0:b2:cc:28:69:ae:80:be:bd:59: e2:04:4f:44:93:6d:e5:83:7d:01:95:a5:82:c1:4f: 99:36:e5:d6:c1:d3:26:11:aa:da:6b:11:c1:ec:d5: e0:e3:ba:40:17:f0:c7:11:aa:27:fc:ba:a9:69:fd: 7b:53:f5:15:ca:f3:be:95:b1:90:e2:06:31:4e:c0: 80:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F8:7F:87:29:46:4E:63:DC:A0:E2:B3:4B:DD:CE:81:42:1C:E4:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:33:b7:52:eb:4e:5d:e2:2c:7a:48:85:c0:0b:f5:33:c0:a4: 0f:10:1e:b3:36:83:9a:4d:45:b4:4e:28:e6:0d:2a:67:19:cd: 8d:b3:de:81:22:7e:5d:38:f1:bd:ec:f4:67:c9:f5:e0:1e:e2: 07:0f:ba:90:e6:05:93:f2:3a:d9:6c:80:2d:44:db:90:bc:d8: d9:b2:2c:23:aa:9a:3b:71:9a:a1:aa:4f:51:26:86:3a:91:25: e7:88:46:05:fc:3c:61:f3:bb:e4:de:3b:53:41:2a:b7:7f:7c: dc:b4:3a:5e:db:74:ea:11:73:91:e9:fe:4a:b6:64:6e:b4:d8: f6:eb:da:7c:53:d4:5a:e7:a6:e9:77:ee:59:f3:d0:e1:e3:c8: 10:73:aa:9c:5b:c6:c9:7a:a3:fd:5f:95:22:0d:85:a0:6b:6a: 78:89:cb:b1:5b:10:77:e1:15:bc:8e:4f:d8:9b:1a:85:67:6d: 98:c9:a7:44:5a:54:41:d1:aa:51:d2:79:f3:65:a8:a3:73:f4: e1:fd:cc:7d:89:36:d2:3d:eb:99:87:22:50:2d:07:67:71:2a: 2c:e2:3f:2b:dc:db:f6:51:be:17:c4:92:a1:7d:cd:ae:e3:5c: 74:e6:e1:83:de:5e:22:5d:5d:dc:0c:a3:0f:bd:61:f7:27:42: 91:21:c7:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyISrbkIIyMeOp6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjBiMjY5ZmQtYzQ2Yi00MDY0LTg0YjItYzNhNTQyZDNkNjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybPrxexMwfkwaDjmIwdj6IzwD+B/Cx0q2uU9 FzpLxA3+EVk5IePK7y0yioU6RX/NjkK6id08lgNObBdivdCNg3QX9KZtvp78ovk4 vYP/ItpaWrGzTxSqihsl+ewhY6EboavkTqrnD56tBHVxhLRDMSH+YpWURLTGnAs/ Zdn6+ohDwKNu9ja++jCidjs/HrZq/tnpo3c1jDeSJ/0JefM6n3OZcuAcKdsAIrJB cB96ky3c5HqG58s8X6CyzChproC+vVniBE9Ek23lg30BlaWCwU+ZNuXWwdMmEara axHB7NXg47pAF/DHEaon/Lqpaf17U/UVyvO+lbGQ4gYxTsCASwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEP4f4cpRk5j3KDis0vdzoFCHOQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGU2N2Q0OTQtYWNhYi0z MDQ3LTg5NmUtODNlMDgyZWU0MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAzt1LrTl3iLHpIhcAL9TPApA8QHrM2g5pNRbROKOYNKmcZzY2z3oEi fl048b3s9GfJ9eAe4gcPupDmBZPyOtlsgC1E25C82NmyLCOqmjtxmqGqT1EmhjqR JeeIRgX8PGHzu+TeO1NBKrd/fNy0Ol7bdOoRc5Hp/kq2ZG602Pbr2nxT1Frnpul3 7lnz0OHjyBBzqpxbxsl6o/1flSINhaBraniJy7FbEHfhFbyOT9ibGoVnbZjJp0Ra VEHRqlHSefNlqKNz9OH9zH2JNtI965mHIlAtB2dxKiziPyvc2/ZRvhfEkqF9za7j XHTm4YPeXiJdXdwMow+9YfcnQpEhx+g= -----END CERTIFICATE-----Generated at Tue Aug 5 16:44:08 2025 by rpki-client