$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f05bd21-fa8a-381e-a8d1-e35ececf5041.roa File: 7f05bd21-fa8a-381e-a8d1-e35ececf5041.roa (raw, json) Hash identifier: DlXpDj9wWnMZj9a5rtP7w+A6C+j1wJxuAHIog9TtsJo= Subject key identifier: DE:78:A4:80:0A:1B:27:50:05:14:7F:63:AC:F2:66:00:B2:85:94:3C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF686903B3AA3578D50687080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f05bd21-fa8a-381e-a8d1-e35ececf5041.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.153.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:90:3b:3a:a3:57:8d:50:68:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=d799a14a-a527-468e-aaa2-0c27fe5235be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a9:8d:d9:2f:41:b4:18:ab:13:aa:f8:eb:02: ad:fe:2a:2d:f7:bf:3a:0b:c1:ff:96:5b:56:aa:20: fa:0f:2b:ef:17:37:90:3f:77:b6:6d:b0:a2:43:e6: 9f:52:8d:6f:b7:6e:27:33:28:39:a2:9b:82:d9:63: 64:6e:fc:15:3e:65:39:c7:b3:5f:4b:e7:0c:63:23: ba:95:37:23:dc:fc:48:6b:ca:53:bc:6a:6d:1f:8a: 96:86:16:e4:77:27:c7:92:cc:fb:76:55:05:dc:32: 35:13:e6:2c:0b:c5:e0:fb:06:7d:4c:45:fa:80:82: 63:3e:b7:cf:b1:88:ac:be:3a:e0:05:89:10:1c:e6: 7a:17:9d:9c:21:4b:ae:8c:56:61:d5:f4:3c:8f:a1: 86:2c:9e:15:8e:79:34:8c:1d:b8:d4:ca:3c:2d:1b: 88:97:e6:c7:08:03:41:ea:3e:a6:cc:b9:bf:a0:17: e5:34:24:6e:a2:60:45:45:45:87:a4:56:ae:e2:cf: d8:f4:8d:70:ae:de:09:28:9a:b8:43:15:81:c2:b0: a6:e2:ad:d1:0f:fa:6a:81:39:7e:52:06:ce:4f:55: 72:a7:aa:54:f2:20:4d:43:1e:74:f9:c6:bd:b7:04: 90:0c:66:dd:ab:7c:87:ca:7c:46:78:74:ca:84:fb: 28:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:78:A4:80:0A:1B:27:50:05:14:7F:63:AC:F2:66:00:B2:85:94:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7f05bd21-fa8a-381e-a8d1-e35ececf5041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:8d:96:14:30:16:9d:f0:22:40:b3:ef:77:7f:91:43:70:85: 1e:fd:f1:ab:08:9f:36:b0:d7:0f:7d:4c:f0:d4:78:5e:82:c3: a4:e3:bc:15:e3:95:69:f5:ee:3d:5c:17:2e:22:81:0f:85:30: b7:94:e0:44:fe:4a:93:cf:02:f7:71:14:d9:cb:43:67:d5:f6: 7e:c2:79:f2:e1:15:b0:36:2d:b3:32:ae:ed:3d:0f:d8:12:e2: d6:3e:68:4b:c5:24:02:fc:fe:09:0c:71:77:be:76:b6:6b:77: 84:32:e4:39:dc:d0:f2:57:60:e5:45:b6:f4:c2:36:e1:9d:5d: dc:a3:a7:3c:1f:f2:0a:f5:82:e2:ef:fa:5e:0d:3b:84:8e:e0: 46:8e:3b:a8:78:80:59:c6:e5:03:1d:6b:70:33:bd:20:3b:e3: c4:d3:64:98:de:f9:9e:c5:22:39:62:a6:3b:cd:b4:1b:41:58: fb:1b:fb:66:1e:f0:a8:eb:8b:b3:b8:d6:3f:f1:64:21:5b:93: 49:fb:4c:dd:e6:15:6a:7b:03:b3:72:52:45:03:b5:24:da:11: ee:c0:4d:4d:5c:47:e8:7d:ad:67:0f:92:23:88:ff:23:b3:ac: 1b:d5:1f:e9:f1:3e:44:33:d6:e0:d3:bf:72:e1:0d:5b:2a:86: 65:88:38:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpA7OqNXjVBocIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZDc5OWExNGEtYTUyNy00NjhlLWFhYTItMGMyN2ZlNTIzNWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqmN2S9BtBirE6r46wKt/iot9786C8H/lltW qiD6DyvvFzeQP3e2bbCiQ+afUo1vt24nMyg5opuC2WNkbvwVPmU5x7NfS+cMYyO6 lTcj3PxIa8pTvGptH4qWhhbkdyfHksz7dlUF3DI1E+YsC8Xg+wZ9TEX6gIJjPrfP sYisvjrgBYkQHOZ6F52cIUuujFZh1fQ8j6GGLJ4Vjnk0jB241Mo8LRuIl+bHCANB 6j6mzLm/oBflNCRuomBFRUWHpFau4s/Y9I1wrt4JKJq4QxWBwrCm4q3RD/pqgTl+ UgbOT1Vyp6pU8iBNQx50+ca9twSQDGbdq3yHynxGeHTKhPsomQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN54pIAKGydQBRR/Y6zyZgCyhZQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2YwNWJkMjEtZmE4YS0z ODFlLWE4ZDEtZTM1ZWNlY2Y1MDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSNlhQwFp3wIkCz73d/kUNwhR798asInzaw1w99TPDUeF6Cw6TjvBXj lWn17j1cFy4igQ+FMLeU4ET+SpPPAvdxFNnLQ2fV9n7CefLhFbA2LbMyru09D9gS 4tY+aEvFJAL8/gkMcXe+drZrd4Qy5Dnc0PJXYOVFtvTCNuGdXdyjpzwf8gr1guLv +l4NO4SO4EaOO6h4gFnG5QMda3AzvSA748TTZJje+Z7FIjlipjvNtBtBWPsb+2Ye 8Kjri7O41j/xZCFbk0n7TN3mFWp7A7NyUkUDtSTaEe7ATU1cR+h9rWcPkiOI/yOz rBvVH+nxPkQz1uDTv3LhDVsqhmWIOIs= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:55 2025 by rpki-client