$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3457f2c-3a55-3e62-87a9-8e24926a0545.roa File: b3457f2c-3a55-3e62-87a9-8e24926a0545.roa (raw, json) Hash identifier: wEm5hjdeVtRQgiPGSEg7hSxEnoFfs7BBtAoTRvrDC0Y= Subject key identifier: 0D:D7:40:DD:86:4B:17:3C:57:16:65:93:34:35:E1:5C:95:1B:6D:8F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B05E141E4641070660EB38D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3457f2c-3a55-3e62-87a9-8e24926a0545.roa Signing time: Sat 30 Aug 2025 01:00:34 +0000 ROA not before: Sat 30 Aug 2025 01:00:34 +0000 ROA not after: Fri 28 Nov 2025 02:00:34 +0000 asID: 8069 IP address blocks: 20.153.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:e1:41:e4:64:10:70:66:0e:b3:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 30 01:00:34 2025 GMT Not After : Nov 28 02:00:34 2025 GMT Subject: CN=892eb805-ae95-4344-a871-6d05b449f827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c1:ac:68:0f:92:43:c8:16:5f:d6:0d:a1:b2: f5:09:28:17:66:c3:91:84:81:bd:28:5a:77:57:81: 6f:53:d0:ed:03:f4:27:d3:19:fd:75:10:9f:fe:fb: 09:54:92:b4:22:1a:ab:e8:5d:bc:48:26:97:f4:c2: 4f:ab:63:39:0c:af:85:18:96:ad:ff:35:5f:df:51: 01:fc:1b:35:37:5c:9f:c1:ef:78:3a:f7:1c:15:81: 71:60:92:54:0d:fc:4b:21:d1:d1:5c:33:23:26:19: 80:69:c3:82:4e:e9:91:ad:60:2b:70:73:ec:9b:08: f9:3d:69:45:bb:22:15:4f:fd:d0:72:0b:7d:de:76: 83:6b:90:2f:0d:28:78:2c:17:b5:90:0f:cd:1a:ed: 6c:c3:17:5f:e5:3a:70:f2:1e:db:f8:ef:a1:1b:db: 2a:c7:c8:fa:85:3e:d1:cb:19:21:46:1e:7e:46:33: 36:71:05:bd:26:35:71:c4:15:da:c3:05:da:62:66: 20:ef:f6:08:f6:e9:73:6c:af:0c:e2:28:cb:39:5a: 63:98:f0:7c:29:cb:31:ab:3f:35:1d:2d:e9:a6:29: 70:22:4c:4a:24:ed:1b:2e:18:63:7b:07:fa:fc:ca: c6:11:ef:6a:19:9f:73:11:fa:52:0e:4a:26:81:ac: 1e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D7:40:DD:86:4B:17:3C:57:16:65:93:34:35:E1:5C:95:1B:6D:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3457f2c-3a55-3e62-87a9-8e24926a0545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:9f:c3:04:35:cc:bb:56:6a:fc:50:d3:28:ed:18:ff:34:c5: b2:75:3f:f9:41:af:9a:c4:a0:7c:6c:dc:95:2a:a8:5c:0d:51: 9c:af:35:3e:27:11:74:6c:45:06:a6:d7:80:f4:a7:9a:e2:fa: 82:44:f4:82:89:ff:18:f4:da:e2:06:99:ea:3d:fb:ab:b4:18: 69:28:ab:34:a9:9c:14:c7:36:b7:4b:5a:76:b2:c2:e6:33:55: 94:f5:b1:51:75:6c:1c:9d:7a:ea:37:03:13:0b:be:24:6e:cf: a5:a1:28:49:c0:7e:f2:d2:d7:a2:25:b4:6b:93:a4:5e:28:0c: ad:84:1b:9d:3f:cc:ce:07:95:21:c1:51:5c:7f:88:60:a0:ee: a7:09:1a:50:36:63:18:60:78:20:3e:16:17:5e:53:1d:8b:8c: e2:76:ea:d4:46:8a:2b:bf:47:9a:01:ba:8a:a7:72:98:1d:68: 37:a0:78:4c:22:e9:dd:08:b1:2a:61:da:d4:d6:4b:47:c5:b7: 76:97:66:f8:1f:0a:70:53:47:b2:9d:8d:d9:76:55:20:ae:35: 35:76:df:e4:91:49:b4:4a:35:9b:17:9d:bd:5a:46:38:7b:1f: d0:35:a7:64:07:bc:29:af:f6:89:5f:25:59:f8:a0:79:c0:68: 7e:38:91:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsF4UHkZBBwZg6zjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgzMDAxMDAzNFoXDTI1MTEyODAyMDAzNFowLzEtMCsGA1UEAxMk ODkyZWI4MDUtYWU5NS00MzQ0LWE4NzEtNmQwNWI0NDlmODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08GsaA+SQ8gWX9YNobL1CSgXZsORhIG9KFp3 V4FvU9DtA/Qn0xn9dRCf/vsJVJK0Ihqr6F28SCaX9MJPq2M5DK+FGJat/zVf31EB /Bs1N1yfwe94OvccFYFxYJJUDfxLIdHRXDMjJhmAacOCTumRrWArcHPsmwj5PWlF uyIVT/3Qcgt93naDa5AvDSh4LBe1kA/NGu1swxdf5Tpw8h7b+O+hG9sqx8j6hT7R yxkhRh5+RjM2cQW9JjVxxBXawwXaYmYg7/YI9ulzbK8M4ijLOVpjmPB8Kcsxqz81 HS3ppilwIkxKJO0bLhhjewf6/MrGEe9qGZ9zEfpSDkomgaweYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3XQN2GSxc8VxZlkzQ14VyVG22PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjM0NTdmMmMtM2E1NS0z ZTYyLTg3YTktOGUyNDkyNmEwNTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGfwwQ1zLtWavxQ0yjtGP80xbJ1P/lBr5rEoHxs3JUqqFwNUZyvNT4n EXRsRQam14D0p5ri+oJE9IKJ/xj02uIGmeo9+6u0GGkoqzSpnBTHNrdLWnaywuYz VZT1sVF1bBydeuo3AxMLviRuz6WhKEnAfvLS16IltGuTpF4oDK2EG50/zM4HlSHB UVx/iGCg7qcJGlA2YxhgeCA+FhdeUx2LjOJ26tRGiiu/R5oBuoqncpgdaDegeEwi 6d0IsSph2tTWS0fFt3aXZvgfCnBTR7Kdjdl2VSCuNTV23+SRSbRKNZsXnb1aRjh7 H9A1p2QHvCmv9olfJVn4oHnAaH44keY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:27 2025 by rpki-client