$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a23b9368-29fe-3dbb-9648-b983c9edf365.roa File: a23b9368-29fe-3dbb-9648-b983c9edf365.roa (raw, json) Hash identifier: NWoQYc4km95u0mDN984b9b4ydiSxqTFN6S69we1WV6g= Subject key identifier: 17:E1:B7:0D:59:65:DB:BF:36:4C:45:CE:0E:F8:42:73:91:BE:1B:02 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52E98E7AEF3893DE9323FF80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a23b9368-29fe-3dbb-9648-b983c9edf365.roa Signing time: Fri 26 Sep 2025 15:14:34 +0000 ROA not before: Fri 26 Sep 2025 15:14:34 +0000 ROA not after: Thu 25 Dec 2025 16:14:34 +0000 asID: 8069 IP address blocks: 20.157.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:e9:8e:7a:ef:38:93:de:93:23:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 15:14:34 2025 GMT Not After : Dec 25 16:14:34 2025 GMT Subject: CN=21e537a4-6f70-40f4-971a-1375223906b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:50:51:77:f6:16:ae:28:58:ed:64:0d:7e:8f: 3f:22:62:c1:9b:db:ad:29:22:24:01:df:54:27:88: b7:67:35:9c:91:69:70:03:9c:52:70:63:69:69:9d: 38:93:7c:ff:83:f7:7b:ca:85:43:26:34:94:8b:8f: 26:0c:34:75:1c:b8:9e:89:ca:60:66:38:b7:77:be: 51:e1:f3:c2:ed:78:15:f9:24:aa:dc:49:b1:b0:9a: 25:12:9c:9c:10:f2:06:e9:e0:65:98:1e:08:ae:1f: 8c:cc:ef:81:34:d1:85:31:de:fc:0e:c6:5a:db:47: 40:a8:bf:f5:d9:2d:5a:25:50:64:9d:8f:53:07:7a: ff:d4:02:0d:e9:b0:9d:0d:1a:ca:59:cd:1b:55:9a: 65:7b:a7:a6:83:09:6e:78:ad:31:66:4e:8e:db:dc: 31:60:29:7d:34:3b:55:b6:54:2e:2b:67:c6:65:46: da:22:7d:2d:97:09:37:58:e8:7a:eb:b8:13:e0:51: fc:8c:06:ba:ee:02:ad:6f:59:b6:7e:5f:bb:16:0e: 2a:1d:c5:85:1a:27:2a:46:84:6f:fe:ba:df:03:c1: 80:43:83:b2:85:b3:d3:54:17:3c:db:ea:f8:3d:af: 46:3e:97:ce:97:bc:c9:7f:c5:0b:f8:45:bd:49:a0: 3b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E1:B7:0D:59:65:DB:BF:36:4C:45:CE:0E:F8:42:73:91:BE:1B:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a23b9368-29fe-3dbb-9648-b983c9edf365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:0e:26:b3:eb:0d:32:f2:78:9c:2a:80:5e:19:e6:33:f5:c5: c3:d6:4a:cd:03:b9:11:c2:df:50:39:20:ce:27:f7:95:5e:4f: 1a:f5:c5:9f:27:b5:80:aa:18:99:de:37:1f:18:a3:63:2c:26: 6f:f3:de:81:49:7a:7d:53:f3:80:32:b0:21:1c:b8:2d:c6:44: 06:af:9d:57:ea:67:10:a4:86:0c:55:64:9f:28:5b:e1:15:4c: 90:b8:e1:aa:9c:da:74:8f:ad:d3:6a:22:e1:4a:4f:6c:12:c5: de:51:67:0e:29:28:ed:bf:f4:5c:96:6e:b7:6a:8c:c6:ce:dd: ee:b4:08:b3:93:d3:60:a5:7c:fd:ce:20:b7:b1:5e:e8:5d:37: 37:69:6d:ed:8a:df:b2:80:df:5d:43:79:84:2d:21:12:04:9c: 10:99:16:dc:86:05:fe:70:4b:17:48:ac:f8:0e:3e:55:c6:bc: cd:2e:05:16:23:bc:da:b9:b1:61:e4:e8:33:2a:b5:24:5f:5c: c7:ac:91:48:6c:8c:58:f1:f6:71:5c:e3:38:cd:2c:69:96:15: b5:2c:c9:eb:1b:bd:76:e7:87:a7:2d:7d:1c:2c:3d:e2:71:75: 23:e9:b3:7a:6d:ef:a0:ec:f9:e9:41:8d:15:c7:af:db:67:41: 87:5c:6f:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtS6Y567ziT3pMj/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjE1MTQzNFoXDTI1MTIyNTE2MTQzNFowLzEtMCsGA1UEAxMk MjFlNTM3YTQtNmY3MC00MGY0LTk3MWEtMTM3NTIyMzkwNmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lBRd/YWrihY7WQNfo8/ImLBm9utKSIkAd9U J4i3ZzWckWlwA5xScGNpaZ04k3z/g/d7yoVDJjSUi48mDDR1HLieicpgZji3d75R 4fPC7XgV+SSq3EmxsJolEpycEPIG6eBlmB4Irh+MzO+BNNGFMd78DsZa20dAqL/1 2S1aJVBknY9TB3r/1AIN6bCdDRrKWc0bVZple6emgwlueK0xZk6O29wxYCl9NDtV tlQuK2fGZUbaIn0tlwk3WOh667gT4FH8jAa67gKtb1m2fl+7Fg4qHcWFGicqRoRv /rrfA8GAQ4OyhbPTVBc82+r4Pa9GPpfOl7zJf8UL+EW9SaA7JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfhtw1ZZdu/NkxFzg74QnORvhsCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTIzYjkzNjgtMjlmZS0z ZGJiLTk2NDgtYjk4M2M5ZWRmMzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8OJrPrDTLyeJwqgF4Z5jP1xcPWSs0DuRHC31A5IM4n95VeTxr1xZ8n tYCqGJneNx8Yo2MsJm/z3oFJen1T84AysCEcuC3GRAavnVfqZxCkhgxVZJ8oW+EV TJC44aqc2nSPrdNqIuFKT2wSxd5RZw4pKO2/9FyWbrdqjMbO3e60CLOT02ClfP3O ILexXuhdNzdpbe2K37KA311DeYQtIRIEnBCZFtyGBf5wSxdIrPgOPlXGvM0uBRYj vNq5sWHk6DMqtSRfXMeskUhsjFjx9nFc4zjNLGmWFbUsyesbvXbnh6ctfRwsPeJx dSPps3pt76Ds+elBjRXHr9tnQYdcbyE= -----END CERTIFICATE-----Generated at Wed Nov 5 10:19:48 2025 by rpki-client