$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/634d5c06-38cc-328c-b749-6599f74d293f.roa File: 634d5c06-38cc-328c-b749-6599f74d293f.roa (raw, json) Hash identifier: hE2ht5YG5nPd+9t5jeS6+edqWFWdZmUa3d8noTq/Li0= Subject key identifier: 48:E9:F1:9E:D9:C8:C5:A0:B7:79:D3:4A:60:CF:D2:DA:CD:AC:63:5D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B153C13696AA91BB76FFC06C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/634d5c06-38cc-328c-b749-6599f74d293f.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:13:69:6a:a9:1b:b7:6f:fc:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=fcddf06a-4305-4f33-83d4-74f039c1dcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b5:52:3e:8f:83:24:64:66:e5:3a:e4:ab:cf: d6:dd:72:ec:39:43:09:69:46:5a:74:ff:98:52:ce: f0:38:42:95:4d:87:b3:b6:dd:b1:3d:5b:9d:12:bf: 9e:83:31:2b:c4:b4:dc:cd:a8:1b:5d:e1:d4:a8:cb: 25:48:3c:17:fb:d3:8a:62:48:b3:c2:31:90:31:eb: 5f:a7:72:5e:c3:1b:ff:57:38:30:62:84:9e:5c:b5: a9:4f:a7:75:9a:8b:83:2f:54:63:4e:25:33:04:f9: dd:f4:d2:c9:40:7d:1c:3f:e4:3d:47:e4:10:db:39: a5:08:b8:f1:50:d9:33:f5:fb:2c:50:18:58:13:39: bb:20:c0:84:7c:97:2c:c9:c1:87:65:8c:78:0b:ce: 10:31:a1:57:5a:ec:cc:e2:16:c8:ee:e3:6b:43:eb: 1d:75:75:d8:cc:76:d6:d3:0c:62:09:7d:f2:60:53: 12:e9:a5:06:db:99:92:38:3f:b4:c1:57:70:2f:fa: bc:f4:be:46:e9:8c:2f:30:a6:d5:e0:58:8d:d7:3b: 00:6e:b7:8d:b1:de:ed:52:55:93:69:54:99:15:da: bc:75:00:ed:e0:7a:c8:82:01:0c:3b:bd:11:0f:7f: 59:21:6a:92:59:af:cf:17:67:fd:56:51:21:b0:31: 66:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E9:F1:9E:D9:C8:C5:A0:B7:79:D3:4A:60:CF:D2:DA:CD:AC:63:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/634d5c06-38cc-328c-b749-6599f74d293f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e1:6c:d2:34:e3:c7:aa:d0:2f:f7:7a:9f:64:6c:b9:af:84: ad:28:d3:09:77:7d:86:72:bc:c0:37:e2:e2:66:34:93:c5:70: 83:0e:66:24:46:03:1f:f2:7f:57:ac:dd:cf:b1:78:48:f0:45: 84:84:20:a5:7d:83:2b:70:5b:15:c1:ab:3c:96:8f:45:ea:26: ac:d3:17:ab:84:e4:2a:88:7b:6f:05:6e:16:aa:53:c0:6d:70: 74:51:52:df:a1:86:46:a4:17:88:7d:e5:e1:2a:75:30:0e:cc: f7:34:f3:fc:07:bd:23:37:00:cd:80:11:e4:c8:61:e7:34:c5: 5b:36:d3:46:e6:a3:0f:5d:a1:30:9c:bb:ae:80:54:12:ab:a8: 6f:5b:f8:1c:ba:e7:42:a7:8e:18:d6:eb:b8:20:eb:8a:5d:b9: df:f2:30:d7:d2:c3:f3:db:92:84:b2:8a:50:b0:fc:97:8b:4c: c7:bb:14:f7:d7:2a:43:0e:61:9a:4b:a4:0f:da:bc:f0:e3:ab: db:dc:8d:c3:97:8b:7e:54:11:48:04:bf:01:bf:0a:b5:96:1c: 1f:f3:ae:d8:46:eb:4e:c2:31:a8:53:dd:ca:d7:f5:11:d8:cc: 5a:0c:5f:91:e9:29:f8:c6:b8:c9:35:35:84:18:29:c9:d8:63: af:ef:17:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBNpaqkbt2/8BsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk ZmNkZGYwNmEtNDMwNS00ZjMzLTgzZDQtNzRmMDM5YzFkY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLVSPo+DJGRm5Trkq8/W3XLsOUMJaUZadP+Y Us7wOEKVTYeztt2xPVudEr+egzErxLTczagbXeHUqMslSDwX+9OKYkizwjGQMetf p3Jewxv/VzgwYoSeXLWpT6d1mouDL1RjTiUzBPnd9NLJQH0cP+Q9R+QQ2zmlCLjx UNkz9fssUBhYEzm7IMCEfJcsycGHZYx4C84QMaFXWuzM4hbI7uNrQ+sddXXYzHbW 0wxiCX3yYFMS6aUG25mSOD+0wVdwL/q89L5G6YwvMKbV4FiN1zsAbreNsd7tUlWT aVSZFdq8dQDt4HrIggEMO70RD39ZIWqSWa/PF2f9VlEhsDFmdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjp8Z7ZyMWgt3nTSmDP0trNrGNdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjM0ZDVjMDYtMzhjYy0z MjhjLWI3NDktNjU5OWY3NGQyOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrhbNI048eq0C/3ep9kbLmvhK0o0wl3fYZyvMA34uJmNJPFcIMOZiRG Ax/yf1es3c+xeEjwRYSEIKV9gytwWxXBqzyWj0XqJqzTF6uE5CqIe28FbhaqU8Bt cHRRUt+hhkakF4h95eEqdTAOzPc08/wHvSM3AM2AEeTIYec0xVs200bmow9doTCc u66AVBKrqG9b+By650KnjhjW67gg64pdud/yMNfSw/PbkoSyilCw/JeLTMe7FPfX KkMOYZpLpA/avPDjq9vcjcOXi35UEUgEvwG/CrWWHB/zrthG607CMahT3crX9RHY zFoMX5HpKfjGuMk1NYQYKcnYY6/vF2Y= -----END CERTIFICATE-----Generated at Mon Oct 20 18:36:24 2025 by rpki-client