$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa File: 25af00ca-4f76-3e40-b823-c83ad676aaa2.roa (raw, json) Hash identifier: xCswvcljbBk5IKS/OIH1M0Z00sTIGi5/e37tgFzczgg= Subject key identifier: 06:14:C5:9F:99:AC:70:AA:95:65:0F:59:61:0F:AA:C9:E7:CA:E2:C2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF6868EE0D3D41FE04FA85DE0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.153.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:8e:e0:d3:d4:1f:e0:4f:a8:5d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=74693779-8201-48e2-b1f0-b6105f7faba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:fd:7f:81:99:8b:bc:1f:a3:31:08:de:86: 62:18:68:0d:d1:5b:f7:99:14:07:3f:85:d9:61:d5: f5:a9:ef:5d:44:af:d3:18:4e:6f:26:cc:a8:d5:61: 93:f2:f0:3b:33:7f:a2:13:40:91:12:6d:2d:27:a0: 08:b4:da:79:e3:07:a3:e9:37:97:cf:d8:65:1b:a4: 8c:da:2f:cf:8a:87:33:c8:f7:85:3a:ba:05:b6:8c: 7e:01:9d:08:60:3f:c1:ed:1f:3b:85:58:d2:27:ef: 16:a7:02:3d:cd:b3:4f:c3:e3:24:5b:6f:78:c3:74: 75:54:87:e3:28:a1:f0:67:4a:7f:52:41:1a:c4:3e: 3c:49:39:8f:97:dd:8d:71:fc:f4:7f:cf:3b:82:f3: fb:39:47:f2:42:f6:78:23:25:b3:99:22:8b:a7:c9: 9e:9f:18:7b:54:09:d9:91:9f:70:3a:4a:89:37:b1: 25:ce:23:9e:8b:d6:aa:e5:d6:ba:db:50:af:78:fe: 8d:43:ec:31:70:f4:2f:0c:0a:a3:46:db:03:b2:a5: 6a:67:23:78:11:df:67:0e:0a:e2:1b:af:6d:7e:7d: e8:ff:2b:49:ad:e3:03:a9:2e:8b:e9:02:cf:bd:93: 0b:61:17:13:ec:28:f4:8b:d3:b1:cc:94:3d:f9:52: af:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:14:C5:9F:99:AC:70:AA:95:65:0F:59:61:0F:AA:C9:E7:CA:E2:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/25af00ca-4f76-3e40-b823-c83ad676aaa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:23:f4:fb:f0:e8:ba:73:9f:ca:12:42:d1:54:9f:0d:bf:12: 2b:a6:78:ec:36:18:cd:18:0f:a7:f9:63:cb:53:50:ef:b1:1b: e4:09:af:f0:c2:23:6c:07:e5:37:0f:06:45:63:8a:62:4d:a9: 5b:17:75:11:70:34:67:0a:3e:da:9d:dd:a1:86:10:b3:69:00: 1e:75:94:9b:3c:62:43:f9:bc:62:de:a1:c6:4e:d9:87:75:77: 8f:c0:d8:8c:58:53:3e:79:ca:0b:ac:dd:d6:5b:61:38:1a:4a: 97:6b:55:5e:59:8b:25:24:f8:cf:c6:96:2a:e0:20:ea:f9:63: 56:57:2f:1a:90:51:fb:47:5e:06:27:ae:ab:c6:58:48:c1:47: de:f1:41:07:30:f5:62:b3:c8:a6:ce:d0:a5:48:02:e9:ac:73: 59:98:0b:ea:71:ac:5e:5e:be:be:9d:47:96:a5:18:49:08:47: c9:1d:a4:e5:11:30:d7:77:b6:ea:17:06:dc:eb:b0:95:02:8c: 1d:10:29:56:5f:13:45:95:47:b4:4c:9e:c0:c6:ed:8f:4e:33: 72:9e:6d:87:2b:c3:ec:ff:84:e8:aa:7f:a9:27:4b:20:17:82: de:d8:49:0b:92:03:70:f5:7e:19:98:1b:10:36:8b:3f:f5:f6: a0:3f:b4:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2ho7g09Qf4E+oXeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk NzQ2OTM3NzktODIwMS00OGUyLWIxZjAtYjYxMDVmN2ZhYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwX9f4GZi7wfozEI3oZiGGgN0Vv3mRQHP4XZ YdX1qe9dRK/TGE5vJsyo1WGT8vA7M3+iE0CREm0tJ6AItNp54wej6TeXz9hlG6SM 2i/PioczyPeFOroFtox+AZ0IYD/B7R87hVjSJ+8WpwI9zbNPw+MkW294w3R1VIfj KKHwZ0p/UkEaxD48STmPl92Ncfz0f887gvP7OUfyQvZ4IyWzmSKLp8menxh7VAnZ kZ9wOkqJN7ElziOei9aq5da621CveP6NQ+wxcPQvDAqjRtsDsqVqZyN4Ed9nDgri G69tfn3o/ytJreMDqS6L6QLPvZMLYRcT7Cj0i9OxzJQ9+VKviwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYUxZ+ZrHCqlWUPWWEPqsnnyuLCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjVhZjAwY2EtNGY3Ni0z ZTQwLWI4MjMtYzgzYWQ2NzZhYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYj9Pvw6Lpzn8oSQtFUnw2/EiumeOw2GM0YD6f5Y8tTUO+xG+QJr/DC I2wH5TcPBkVjimJNqVsXdRFwNGcKPtqd3aGGELNpAB51lJs8YkP5vGLeocZO2Yd1 d4/A2IxYUz55ygus3dZbYTgaSpdrVV5ZiyUk+M/GlirgIOr5Y1ZXLxqQUftHXgYn rqvGWEjBR97xQQcw9WKzyKbO0KVIAumsc1mYC+pxrF5evr6dR5alGEkIR8kdpOUR MNd3tuoXBtzrsJUCjB0QKVZfE0WVR7RMnsDG7Y9OM3KebYcrw+z/hOiqf6knSyAX gt7YSQuSA3D1fhmYGxA2iz/19qA/tHw= -----END CERTIFICATE-----Generated at Tue Aug 26 06:46:19 2025 by rpki-client