$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a2f16055-ce8a-303c-8e3f-530ceda242c5.roa File: a2f16055-ce8a-303c-8e3f-530ceda242c5.roa (raw, json) Hash identifier: 2Plydf6/MaJoEZ8m6cN0tZOYHjZf3MOWAYDxRrE747k= Subject key identifier: FA:E4:18:88:6D:B8:E5:52:A1:2E:91:85:71:43:58:3F:68:01:27:E7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF6868E842100C45ACEF6D040 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a2f16055-ce8a-303c-8e3f-530ceda242c5.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 40.65.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:8e:84:21:00:c4:5a:ce:f6:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=87760dd9-4f53-44e4-9dd5-5e11ef09b5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bb:3a:d3:a7:cf:37:63:7d:7a:51:e9:4c:7e: 05:60:0c:0d:23:87:3c:4c:f5:7e:53:48:63:82:27: 1b:b5:48:20:75:49:b1:48:d0:01:f2:6b:4f:a1:9e: 7d:2c:ca:7e:cd:e7:41:4f:8f:ea:d3:a8:b7:3c:dc: 8e:23:c0:9b:c9:2f:5a:f2:93:38:b2:ee:ed:2e:97: 57:7e:92:89:ca:a1:32:c1:0d:6b:25:2d:0b:21:3c: b3:90:9e:71:12:d3:7f:bc:c1:92:7a:a1:bc:7a:a4: f1:a4:33:38:81:68:b2:ba:a3:93:0f:52:50:67:29: ff:68:bc:f6:0a:78:92:d1:83:ef:d1:c6:99:19:bb: ac:0b:2e:1b:cb:42:44:d0:5b:8c:13:6b:21:5e:b2: 4d:89:04:21:36:b7:d5:c5:9c:35:f1:ad:e1:bc:27: 94:34:5e:84:8b:a3:b1:5e:9b:c7:a9:71:5e:5f:22: bb:ef:be:a6:50:b1:e4:83:94:cc:7e:7c:b3:ef:ff: a2:77:1b:08:6f:21:75:c2:24:94:7d:7c:a7:f5:20: 9c:59:3b:19:07:3d:a3:4a:45:b4:c0:d0:db:26:3b: 17:4b:e4:e6:e4:3f:c1:09:5b:ac:b1:9f:b5:c9:8a: 90:40:c2:c2:13:13:8a:69:6c:c6:8a:f7:b4:ad:b9: f3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E4:18:88:6D:B8:E5:52:A1:2E:91:85:71:43:58:3F:68:01:27:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a2f16055-ce8a-303c-8e3f-530ceda242c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.65.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:e6:7f:02:c2:8b:ee:a9:5e:18:d8:a2:dd:4a:6a:48:09:1b: ce:f3:6a:f7:ca:e8:f8:7d:24:82:e9:14:cb:ad:5b:98:80:5b: e0:77:30:e4:88:b5:10:5e:13:01:eb:1c:d8:c6:f0:4a:be:ad: 5e:06:75:e2:04:88:0a:2f:0b:b7:3e:44:ac:10:d6:66:23:64: f2:97:b6:62:25:8c:55:81:a1:e8:ee:29:a1:8f:26:fa:65:89: d4:8a:ba:6e:75:cf:2f:bf:d0:1f:a0:0c:54:0f:89:59:8b:a5: 95:a3:8d:b5:d6:36:f9:15:64:64:50:fd:57:75:d7:c8:01:5f: 99:62:c5:ab:79:3b:b5:64:65:74:2d:bd:a7:db:a1:4b:10:9f: ec:6d:6b:49:d0:9c:25:b7:52:43:bc:3d:c3:56:d0:eb:d0:37: e2:4d:41:15:6e:04:44:22:b7:14:60:32:49:82:0e:0c:98:57: af:57:31:f4:0e:57:fd:29:e8:7e:32:24:ae:a3:2d:04:78:b1: 1b:69:44:cc:97:22:e2:19:50:8e:81:19:1c:a1:83:4a:86:1d: df:db:36:d4:74:ba:75:e7:22:d0:0b:0d:14:54:84:73:ad:85: bb:7b:b6:f7:8c:a2:a0:4f:e4:92:91:87:d4:44:73:4b:33:42: e8:27:b5:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2ho6EIQDEWs720EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ODc3NjBkZDktNGY1My00NGU0LTlkZDUtNWUxMWVmMDliNWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrs606fPN2N9elHpTH4FYAwNI4c8TPV+U0hj gicbtUggdUmxSNAB8mtPoZ59LMp+zedBT4/q06i3PNyOI8CbyS9a8pM4su7tLpdX fpKJyqEywQ1rJS0LITyzkJ5xEtN/vMGSeqG8eqTxpDM4gWiyuqOTD1JQZyn/aLz2 CniS0YPv0caZGbusCy4by0JE0FuME2shXrJNiQQhNrfVxZw18a3hvCeUNF6Ei6Ox XpvHqXFeXyK7776mULHkg5TMfnyz7/+idxsIbyF1wiSUfXyn9SCcWTsZBz2jSkW0 wNDbJjsXS+Tm5D/BCVussZ+1yYqQQMLCExOKaWzGive0rbnz/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrkGIhtuOVSoS6RhXFDWD9oASfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTJmMTYwNTUtY2U4YS0z MDNjLThlM2YtNTMwY2VkYTI0MmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKEFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPmfwLCi+6pXhjYot1KakgJG87zavfK6Ph9JILpFMutW5iAW+B3MOSI tRBeEwHrHNjG8Eq+rV4GdeIEiAovC7c+RKwQ1mYjZPKXtmIljFWBoejuKaGPJvpl idSKum51zy+/0B+gDFQPiVmLpZWjjbXWNvkVZGRQ/Vd118gBX5lixat5O7VkZXQt vafboUsQn+xta0nQnCW3UkO8PcNW0OvQN+JNQRVuBEQitxRgMkmCDgyYV69XMfQO V/0p6H4yJK6jLQR4sRtpRMyXIuIZUI6BGRyhg0qGHd/bNtR0unXnItALDRRUhHOt hbt7tveMoqBP5JKRh9REc0szQugntTs= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:22 2025 by rpki-client