$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa File: 5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa (raw, json) Hash identifier: /6Aczl2PRumhXIVkj8l37AEbWXKzj6bXLcpK66DAHjM= Subject key identifier: 5C:C8:78:44:7F:E4:51:48:2F:B6:DB:62:3E:DE:77:1C:1E:F3:41:99 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF6868FEF575EBA1EA4321140 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.153.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:8f:ef:57:5e:ba:1e:a4:32:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=a0efef53-6d45-4a2b-9ce7-1674963ae34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9a:9d:95:75:a2:5a:16:b7:ad:a5:bb:63:87: 85:cf:85:d1:6c:af:07:ae:6c:40:6a:5b:cc:f7:02: 2f:f7:b7:a1:d8:10:94:51:8b:ac:75:f3:bc:62:de: 7e:4c:90:68:d8:d6:47:0e:73:fe:b0:7b:96:f9:8d: a5:fa:88:e1:4f:53:f5:5a:92:69:ed:02:a7:09:64: 79:5b:0c:bb:0c:56:df:f4:dd:dc:ea:a5:32:1a:08: 9e:c6:36:d4:90:3c:18:a4:6f:83:cd:32:c1:e0:f9: 00:7a:83:39:0a:a8:e0:a1:b9:3c:bd:68:b7:4a:c1: 99:d2:ab:dc:d9:b0:f5:6f:d5:ad:76:31:32:e7:53: 66:bc:b0:e7:b8:fd:d9:b9:b0:64:c3:eb:b4:49:dd: d3:75:17:6c:cd:55:00:1d:1a:47:4b:b0:47:4a:c2: 7b:d8:09:66:ea:be:70:23:d5:73:59:98:b1:06:f6: cb:f4:67:9b:f2:2a:05:68:c8:69:ef:ad:76:a7:c3: d8:26:39:9b:04:5a:19:7c:2a:66:96:7a:39:47:3c: d7:50:b6:2d:b4:d6:b8:17:3f:b1:72:f7:61:91:d3: d6:02:0f:d5:3e:7f:bd:e1:7b:78:72:eb:b2:70:f0: de:a4:44:d7:1f:41:1d:dd:af:6b:f3:f7:58:c5:78: 31:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C8:78:44:7F:E4:51:48:2F:B6:DB:62:3E:DE:77:1C:1E:F3:41:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:20:42:6d:fd:6e:58:2b:d0:71:8f:bd:5f:9f:24:6f:5b:2c: b4:a7:5d:82:87:ac:7b:73:10:c5:cd:4c:8d:45:2d:4f:57:e9: 12:5e:4f:b2:80:b2:85:70:5c:b9:d1:7b:58:85:98:8c:84:d1: a3:c5:cc:d4:fe:ae:63:0f:b8:08:57:13:71:98:4d:65:e5:e7: d1:a0:cf:4d:02:e1:d6:c9:57:d2:b4:b7:6b:71:ee:4a:cf:a4: a5:9c:6c:b9:45:ea:18:8d:69:24:c9:1f:f0:52:48:25:82:de: 01:11:e5:f2:5b:88:be:f5:59:ec:4f:c8:1b:f0:ec:59:7e:0b: e3:ea:f8:46:46:84:46:ee:47:73:66:24:79:c2:8e:fc:44:a7: a1:e4:1a:cc:0d:43:5a:20:c7:d2:45:3e:41:09:62:1e:ac:dc: 30:76:9f:a6:30:34:1f:d0:04:2d:4e:48:9c:71:bd:0b:1a:5d: 9c:84:4b:ac:b0:cc:e7:2f:61:c2:97:03:82:ab:c0:7c:2f:16: d6:b6:01:fe:15:3a:63:22:41:4f:e9:50:90:ee:de:72:68:74: 6f:e0:3f:f5:06:4a:fa:16:45:94:2e:e9:12:db:1d:56:24:13: f8:90:9b:a3:f4:c2:6c:3b:2e:17:c7:a5:59:06:eb:2d:2e:ba: 20:49:d0:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2ho/vV166HqQyEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk YTBlZmVmNTMtNmQ0NS00YTJiLTljZTctMTY3NDk2M2FlMzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5qdlXWiWha3raW7Y4eFz4XRbK8HrmxAalvM 9wIv97eh2BCUUYusdfO8Yt5+TJBo2NZHDnP+sHuW+Y2l+ojhT1P1WpJp7QKnCWR5 Wwy7DFbf9N3c6qUyGgiexjbUkDwYpG+DzTLB4PkAeoM5Cqjgobk8vWi3SsGZ0qvc 2bD1b9WtdjEy51NmvLDnuP3ZubBkw+u0Sd3TdRdszVUAHRpHS7BHSsJ72Alm6r5w I9VzWZixBvbL9Geb8ioFaMhp7612p8PYJjmbBFoZfCpmlno5RzzXULYttNa4Fz+x cvdhkdPWAg/VPn+94Xt4cuuycPDepETXH0Ed3a9r8/dYxXgx5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzIeER/5FFIL7bbYj7edxwe80GZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWZiNTJkN2MtNzVkOC0z ZjhiLWIwMzMtNjVhNTM3NmM0MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkgQm39blgr0HGPvV+fJG9bLLSnXYKHrHtzEMXNTI1FLU9X6RJeT7KA soVwXLnRe1iFmIyE0aPFzNT+rmMPuAhXE3GYTWXl59Ggz00C4dbJV9K0t2tx7krP pKWcbLlF6hiNaSTJH/BSSCWC3gER5fJbiL71WexPyBvw7Fl+C+Pq+EZGhEbuR3Nm JHnCjvxEp6HkGswNQ1ogx9JFPkEJYh6s3DB2n6YwNB/QBC1OSJxxvQsaXZyES6yw zOcvYcKXA4KrwHwvFta2Af4VOmMiQU/pUJDu3nJodG/gP/UGSvoWRZQu6RLbHVYk E/iQm6P0wmw7LhfHpVkG6y0uuiBJ0DI= -----END CERTIFICATE-----Generated at Tue Aug 26 06:39:43 2025 by rpki-client