$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28828403-ac9c-38f9-8aa3-540107e65b98.roa File: 28828403-ac9c-38f9-8aa3-540107e65b98.roa (raw, json) Hash identifier: di21d9t10obH09GLuhZydTnttafAdKhshS5d7X2T/9E= Subject key identifier: 60:48:81:A7:4E:16:8A:84:26:DE:BC:82:CF:73:2B:26:96:15:38:B4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF686910F368803A4C00A1D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28828403-ac9c-38f9-8aa3-540107e65b98.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.153.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:91:0f:36:88:03:a4:c0:0a:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=5388aa81-7886-42d6-a48e-876d83aad7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:81:4d:28:fc:a3:32:16:53:c6:dc:88:aa:eb: 5a:72:06:bc:8a:bc:6c:2f:41:1f:09:4f:7b:82:95: af:c9:28:23:cc:1f:48:fe:61:70:4c:8c:b0:8d:eb: 81:f1:89:2b:24:32:a9:9a:8c:be:ea:aa:8b:1f:46: 63:b8:95:10:8f:21:27:ff:ca:00:13:98:35:46:a2: 06:48:35:92:f0:51:b6:c9:86:a1:d6:c2:96:73:1e: bc:bc:66:64:cc:d6:a6:9f:ed:10:a9:b0:9d:a7:08: 6b:e5:3c:d1:d9:26:c6:5b:f6:f3:31:bf:5c:fb:8c: 73:f9:47:d7:10:72:76:7b:7d:ec:1a:50:af:86:76: 97:42:1f:29:bb:14:67:f9:f5:54:4f:c3:8d:67:bd: c6:49:6d:db:ce:e5:57:46:cc:0a:b9:b7:52:2b:0d: 3d:61:f5:03:57:36:1b:36:d7:90:8b:41:57:fc:a9: 9a:3c:cf:02:b3:60:35:78:99:f2:af:5c:1b:d4:e1: 2d:62:b3:8e:93:ae:34:ba:11:1e:56:ae:6b:e9:0e: 6d:1e:ef:12:93:15:00:63:6b:31:88:f4:b8:f4:4f: a2:fc:d2:09:16:b7:93:cb:8d:58:0d:69:d9:ed:1b: dd:dd:08:9a:69:14:e2:3f:8c:1f:35:5d:b2:07:3d: a9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:48:81:A7:4E:16:8A:84:26:DE:BC:82:CF:73:2B:26:96:15:38:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28828403-ac9c-38f9-8aa3-540107e65b98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:ff:e6:59:65:f6:82:b9:96:67:22:d8:a5:29:38:b1:d4:d5: 39:b8:99:09:f7:23:a2:a7:14:cb:97:62:27:05:69:ac:af:13: c9:5a:c4:82:a4:a2:2e:f8:5d:c2:6b:c5:91:e6:47:ac:b5:50: 40:18:c5:b6:ed:d7:94:ac:0c:7f:6f:ce:20:55:81:0f:70:d2: 44:82:8f:1a:1b:0c:fa:3a:d3:b9:34:5a:75:7f:17:ee:b8:a7: 16:37:bc:06:3f:e1:74:3d:d8:1a:47:14:92:d6:33:a5:0c:76: 0f:4b:8b:98:bc:5a:f2:bb:12:ed:8e:ae:d4:73:e2:d9:ae:42: 54:53:d6:cc:c3:f9:ce:9d:37:4a:e7:2c:07:46:5c:f8:87:a9: 48:08:3d:25:ff:0d:02:b4:62:bb:64:1a:10:a4:e9:f2:3e:d2: 02:a1:3a:40:aa:bd:6f:52:ab:d3:76:14:f2:c2:90:8b:d1:01: a4:5c:29:dd:33:e2:be:0a:2d:55:0c:db:18:af:4c:bf:01:24: 06:56:c0:b7:65:93:da:3d:3b:df:1f:8b:8f:56:12:ef:59:25: 20:2f:49:df:4b:1e:f4:7b:91:27:f3:d2:d1:07:a7:63:f9:b3: 6f:ae:a8:79:92:30:21:cb:22:0f:9a:40:41:32:b0:7f:bf:e4: 1a:90:26:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpEPNogDpMAKHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk NTM4OGFhODEtNzg4Ni00MmQ2LWE0OGUtODc2ZDgzYWFkN2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4FNKPyjMhZTxtyIqutacga8irxsL0EfCU97 gpWvySgjzB9I/mFwTIywjeuB8YkrJDKpmoy+6qqLH0ZjuJUQjyEn/8oAE5g1RqIG SDWS8FG2yYah1sKWcx68vGZkzNamn+0QqbCdpwhr5TzR2SbGW/bzMb9c+4xz+UfX EHJ2e33sGlCvhnaXQh8puxRn+fVUT8ONZ73GSW3bzuVXRswKubdSKw09YfUDVzYb NteQi0FX/KmaPM8Cs2A1eJnyr1wb1OEtYrOOk640uhEeVq5r6Q5tHu8SkxUAY2sx iPS49E+i/NIJFreTy41YDWnZ7Rvd3QiaaRTiP4wfNV2yBz2pkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBIgadOFoqEJt68gs9zKyaWFTi0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjg4Mjg0MDMtYWM5Yy0z OGY5LThhYTMtNTQwMTA3ZTY1Yjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT/5lll9oK5lmci2KUpOLHU1Tm4mQn3I6KnFMuXYicFaayvE8laxIKk oi74XcJrxZHmR6y1UEAYxbbt15SsDH9vziBVgQ9w0kSCjxobDPo607k0WnV/F+64 pxY3vAY/4XQ92BpHFJLWM6UMdg9Li5i8WvK7Eu2OrtRz4tmuQlRT1szD+c6dN0rn LAdGXPiHqUgIPSX/DQK0YrtkGhCk6fI+0gKhOkCqvW9Sq9N2FPLCkIvRAaRcKd0z 4r4KLVUM2xivTL8BJAZWwLdlk9o9O98fi49WEu9ZJSAvSd9LHvR7kSfz0tEHp2P5 s2+uqHmSMCHLIg+aQEEysH+/5BqQJg4= -----END CERTIFICATE-----Generated at Tue Aug 26 06:43:41 2025 by rpki-client