$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eec01589-1699-3212-9825-23f8f772ea6e.roa File: eec01589-1699-3212-9825-23f8f772ea6e.roa (raw, json) Hash identifier: O6tkAAfph+TorxHoi3Ag7yekJSYgDDU+v46+JFL0C+k= Subject key identifier: 69:99:49:98:DC:36:82:BD:A1:72:5C:99:F0:D8:9E:AE:F1:51:F8:16 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF686914F2E4C910840C06A80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eec01589-1699-3212-9825-23f8f772ea6e.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.153.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:91:4f:2e:4c:91:08:40:c0:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=c784c503-89a8-4e08-8c90-ed24e8712c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a7:24:e4:ca:c8:5d:5d:44:92:cf:2d:3d:ed: 20:3e:eb:33:a9:98:c4:b9:23:71:56:4f:49:8c:ce: 83:fa:c5:f3:1d:57:d5:9e:c7:06:0b:44:50:df:14: 18:de:de:99:c9:ef:95:f1:9b:33:31:0d:3b:e4:24: 5d:f3:ec:95:fb:b9:ae:4a:6a:d1:22:7a:0e:d4:63: dd:b2:57:8e:69:20:7f:8e:99:08:7c:d6:8a:04:7a: b2:2b:6c:79:14:e8:ab:9f:b2:cd:cd:5c:bf:2c:3e: f4:7f:ce:07:fa:92:ba:2b:85:4b:9c:16:ac:7f:5f: 65:6e:ca:29:52:e2:c1:5a:2f:51:82:45:9b:f8:27: d1:a5:57:ef:1b:68:af:12:d7:9f:3d:2b:86:36:63: 03:f5:c0:60:56:81:ee:ae:84:5f:f1:6d:9a:28:8e: 94:7d:ed:12:39:50:78:b6:77:c2:ab:d9:ed:77:78: d7:71:cf:1e:77:d5:30:97:6b:a2:d6:6f:91:fd:d8: 3f:ef:03:84:5d:bb:ff:1d:05:f4:af:c6:0a:12:2f: 62:82:6e:9e:11:a2:82:15:77:8a:b7:99:2f:a0:78: f5:4c:fc:79:0e:54:48:5a:02:91:45:be:e4:10:8a: 41:83:22:a2:f6:8b:cc:f4:be:ef:2d:c8:3b:af:ee: ef:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:99:49:98:DC:36:82:BD:A1:72:5C:99:F0:D8:9E:AE:F1:51:F8:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/eec01589-1699-3212-9825-23f8f772ea6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:d4:8b:ac:ec:19:a2:dd:ff:9f:b2:49:a1:d4:dc:0a:bd:0e: 04:17:40:a5:4f:41:80:c1:4d:1e:c5:76:15:c0:0f:11:dd:73: d9:aa:63:3c:1d:a3:a3:5c:bc:a3:37:c9:65:c3:77:90:72:69: 3c:56:69:22:09:26:bf:90:e8:fe:89:a1:26:b1:85:f4:9b:34: 1f:68:2b:8d:c0:2f:5d:c0:4a:59:05:af:b2:e0:3c:28:ae:a1: 89:f5:6c:54:91:d8:84:a6:b0:a9:9c:a9:06:ef:74:0e:dc:79: b4:24:07:93:5a:26:82:2e:d6:2b:15:63:2f:88:88:b9:2c:c8: d2:85:a2:6c:b4:7d:0e:83:9c:a8:62:19:3d:42:8a:b6:ab:b4: b5:53:60:c0:3a:b4:d8:8d:6d:a4:8a:cf:45:e5:89:af:3f:4f: 6e:14:6b:31:59:ba:fd:fc:d8:54:37:86:a6:66:9b:77:1d:80: 7e:1c:24:33:3f:9b:d2:9e:92:70:92:78:43:0f:2d:8e:f7:e1: 55:9c:f3:24:7c:03:e6:01:09:7c:4a:bc:23:b7:d9:77:a1:51: 4e:76:28:6f:cd:26:4a:0c:73:27:17:d4:73:f4:c2:11:e6:5a: 0d:c5:91:b8:dc:86:8c:bb:07:49:e5:21:68:a8:1d:dc:38:47: 52:dc:1f:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpFPLkyRCEDAaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk Yzc4NGM1MDMtODlhOC00ZTA4LThjOTAtZWQyNGU4NzEyYzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6ck5MrIXV1Eks8tPe0gPuszqZjEuSNxVk9J jM6D+sXzHVfVnscGC0RQ3xQY3t6Zye+V8ZszMQ075CRd8+yV+7muSmrRInoO1GPd sleOaSB/jpkIfNaKBHqyK2x5FOirn7LNzVy/LD70f84H+pK6K4VLnBasf19lbsop UuLBWi9RgkWb+CfRpVfvG2ivEtefPSuGNmMD9cBgVoHuroRf8W2aKI6Ufe0SOVB4 tnfCq9ntd3jXcc8ed9Uwl2ui1m+R/dg/7wOEXbv/HQX0r8YKEi9igm6eEaKCFXeK t5kvoHj1TPx5DlRIWgKRRb7kEIpBgyKi9ovM9L7vLcg7r+7vlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmZSZjcNoK9oXJcmfDYnq7xUfgWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWVjMDE1ODktMTY5OS0z MjEyLTk4MjUtMjNmOGY3NzJlYTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfUi6zsGaLd/5+ySaHU3Aq9DgQXQKVPQYDBTR7FdhXADxHdc9mqYzwd o6NcvKM3yWXDd5ByaTxWaSIJJr+Q6P6JoSaxhfSbNB9oK43AL13ASlkFr7LgPCiu oYn1bFSR2ISmsKmcqQbvdA7cebQkB5NaJoIu1isVYy+IiLksyNKFomy0fQ6DnKhi GT1CirartLVTYMA6tNiNbaSKz0Xlia8/T24UazFZuv382FQ3hqZmm3cdgH4cJDM/ m9KeknCSeEMPLY734VWc8yR8A+YBCXxKvCO32XehUU52KG/NJkoMcycX1HP0whHm Wg3Fkbjchoy7B0nlIWioHdw4R1LcH68= -----END CERTIFICATE-----Generated at Wed Nov 5 07:04:26 2025 by rpki-client