$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1948f61c-5ec1-3c77-874c-757a1aab22b2.roa File: 1948f61c-5ec1-3c77-874c-757a1aab22b2.roa (raw, json) Hash identifier: Xk85jrLmbJcU06MYzjnuGJPe262n3i6TlI4IE21dtYo= Subject key identifier: 20:E5:FC:7F:E4:1B:00:14:11:71:0C:A9:1A:BC:B1:25:00:39:4C:01 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B153C134FF86A151CD6904500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1948f61c-5ec1-3c77-874c-757a1aab22b2.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:13:4f:f8:6a:15:1c:d6:90:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=ba1bba43-fb35-42f5-9162-c534a206853c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a4:ea:9f:74:cb:9e:13:07:f9:79:bb:99:c6: 8b:03:b0:e6:58:b8:20:fc:a8:bc:b3:42:1b:5d:e8: 91:a9:f0:b8:59:76:75:8c:96:58:06:01:54:16:ae: e4:8c:1a:a3:43:5b:03:c5:fc:94:c2:6a:4d:37:69: 8b:39:e2:85:89:34:87:fa:c3:4d:52:a1:21:3c:60: 44:f2:68:9c:79:0b:96:e5:b0:30:9f:60:fa:e1:d2: fc:bf:f7:65:2d:2c:93:18:ee:19:4d:12:d9:b2:b2: c6:24:27:35:5c:3c:3c:e7:65:b8:cf:17:be:6e:a2: bd:cc:17:78:01:d7:1f:e9:f6:20:51:c8:01:e1:72: d4:ff:86:6d:86:30:db:39:91:aa:de:ed:48:44:33: d4:3d:39:5e:0c:ea:05:59:a3:c6:45:5b:f3:de:09: d7:b0:fc:8b:bf:9a:a4:17:e9:6b:3d:8e:17:f8:69: 8d:cf:6d:c1:d3:0f:b1:6e:e1:c0:c8:31:87:9b:15: f6:f3:c6:38:28:3d:53:cf:4b:6e:73:aa:95:61:fc: 8b:58:5e:cc:71:de:3b:77:d3:c8:cf:48:e7:b0:b3: 83:90:4e:19:83:25:67:8e:b5:53:0b:4e:d9:1d:6f: 8b:e3:52:14:b8:47:57:2d:3b:07:db:0b:0c:a4:28: e6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E5:FC:7F:E4:1B:00:14:11:71:0C:A9:1A:BC:B1:25:00:39:4C:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1948f61c-5ec1-3c77-874c-757a1aab22b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:52:f8:59:db:21:ef:7a:00:38:a7:57:4a:af:77:4d:85:98: e8:2c:f0:c9:3d:f7:db:fa:4e:0f:20:bf:c6:da:b0:af:8b:bc: 86:64:71:ed:0c:25:8f:50:90:07:6b:34:4c:e9:9f:90:a3:5b: 5e:ca:7f:0b:11:70:76:05:dc:c0:03:98:a6:ed:90:22:12:25: ed:cb:57:47:1a:79:73:73:d3:b4:4f:00:82:aa:89:b9:bf:a7: 24:b8:38:14:47:4c:28:fe:6d:9b:fc:07:54:d1:86:aa:2e:39: b9:d8:1e:f5:90:73:94:d7:d4:af:d0:b0:c0:2a:ad:a0:05:29: ea:9e:cb:6f:4b:79:6d:3b:e6:bc:77:7f:15:86:b8:52:21:4d: ef:e7:39:b8:14:12:7e:c1:c3:71:92:7f:bf:ee:2f:83:24:78: f2:06:56:b4:70:13:a5:58:aa:fd:79:0b:ca:d2:32:ae:5f:29: b0:df:e0:05:94:3d:79:6f:07:aa:53:bd:d8:60:44:40:b5:e5: 3d:7d:5c:d0:29:b4:a2:41:30:6b:e9:e4:62:9e:d2:bf:33:02: c1:4c:67:c9:f8:55:66:7a:f0:59:db:26:1b:1e:e0:ea:dc:ed: fc:d4:41:41:0d:9c:07:2b:23:3c:41:64:c8:36:8d:70:1b:c8: 55:59:b7:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBNP+GoVHNaQRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk YmExYmJhNDMtZmIzNS00MmY1LTkxNjItYzUzNGEyMDY4NTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KTqn3TLnhMH+Xm7mcaLA7DmWLgg/Ki8s0Ib XeiRqfC4WXZ1jJZYBgFUFq7kjBqjQ1sDxfyUwmpNN2mLOeKFiTSH+sNNUqEhPGBE 8miceQuW5bAwn2D64dL8v/dlLSyTGO4ZTRLZsrLGJCc1XDw852W4zxe+bqK9zBd4 Adcf6fYgUcgB4XLU/4ZthjDbOZGq3u1IRDPUPTleDOoFWaPGRVvz3gnXsPyLv5qk F+lrPY4X+GmNz23B0w+xbuHAyDGHmxX288Y4KD1Tz0tuc6qVYfyLWF7Mcd47d9PI z0jnsLODkE4ZgyVnjrVTC07ZHW+L41IUuEdXLTsH2wsMpCjmAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDl/H/kGwAUEXEMqRq8sSUAOUwBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTk0OGY2MWMtNWVjMS0z Yzc3LTg3NGMtNzU3YTFhYWIyMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVS+FnbIe96ADinV0qvd02FmOgs8Mk999v6Tg8gv8basK+LvIZkce0M JY9QkAdrNEzpn5CjW17KfwsRcHYF3MADmKbtkCISJe3LV0caeXNz07RPAIKqibm/ pyS4OBRHTCj+bZv8B1TRhqouObnYHvWQc5TX1K/QsMAqraAFKeqey29LeW075rx3 fxWGuFIhTe/nObgUEn7Bw3GSf7/uL4MkePIGVrRwE6VYqv15C8rSMq5fKbDf4AWU PXlvB6pTvdhgREC15T19XNAptKJBMGvp5GKe0r8zAsFMZ8n4VWZ68FnbJhse4Orc 7fzUQUENnAcrIzxBZMg2jXAbyFVZt0o= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:27 2025 by rpki-client