$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a0d833cb-ebc1-309a-a1c5-612ae3226a6e.roa File: a0d833cb-ebc1-309a-a1c5-612ae3226a6e.roa (raw, json) Hash identifier: pjK6ru2CUoDcUt+LK9QyJgSotDcU0cmd/Fn7GUWvNzE= Subject key identifier: 13:64:C8:01:21:A9:4B:35:AC:9B:13:08:71:AD:35:4E:06:B8:C8:28 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B153C24FA2DADC911FFE8C280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a0d833cb-ebc1-309a-a1c5-612ae3226a6e.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:24:fa:2d:ad:c9:11:ff:e8:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=bfc6ffdc-607e-4376-a5fb-6c05721d8e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:47:3e:13:d7:88:ae:8e:cd:7a:33:a9:e6:25: c4:7d:d9:ff:c1:77:3f:12:cb:fc:b9:9f:9f:34:5f: 04:27:0e:83:d7:06:8d:ac:27:c8:31:9b:84:fd:f2: 36:ec:22:6b:01:55:c8:ff:37:15:26:30:65:60:3a: a6:1b:ae:12:88:e6:48:51:83:76:0d:30:67:a5:6b: ea:4b:64:9a:f7:0e:12:c6:22:9e:80:25:42:f7:eb: a8:6d:f7:ba:12:cb:96:62:70:4f:0e:28:dd:9e:66: e8:8e:19:d5:49:da:dc:07:4c:4b:76:c8:59:71:37: 05:63:6c:a0:07:7f:3e:1f:ec:69:aa:f0:77:30:e1: 70:92:33:37:0c:ba:b0:8f:19:7d:87:53:1d:5f:d5: bd:89:f2:4a:ae:2e:72:d6:7a:ab:b9:a5:8a:33:7e: 16:0a:4e:61:cb:ec:c4:fa:c6:72:22:2c:61:7a:17: 71:6d:0e:10:bb:21:23:d2:60:04:af:11:52:ff:2d: ab:19:aa:e4:48:47:7b:09:30:f1:6d:6f:36:87:56: 4c:da:2f:e0:d3:b6:77:ad:e5:73:49:09:a2:b9:bd: b1:5c:f3:8d:42:d7:79:36:5f:f9:12:72:b0:63:e6: 05:75:f3:5a:91:49:1f:3e:04:a1:32:00:ef:02:6d: 72:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:64:C8:01:21:A9:4B:35:AC:9B:13:08:71:AD:35:4E:06:B8:C8:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a0d833cb-ebc1-309a-a1c5-612ae3226a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:49:20:48:90:47:51:88:db:d2:99:ce:5a:00:02:34:98:95: be:27:be:57:02:8e:95:f7:18:54:bf:d1:0d:de:88:b8:13:81: 2e:c1:d9:0c:51:92:b3:ef:7a:86:4a:01:f2:16:45:f1:66:68: 66:24:bc:d3:a4:52:bd:f1:80:21:f1:33:45:2f:a6:af:14:0f: 65:b8:94:e7:99:e5:e5:01:64:21:9d:d1:8f:28:cb:2e:18:4c: 26:cc:be:35:22:d7:d4:7f:27:73:39:04:29:73:81:2c:8c:3e: eb:db:0b:8f:55:f1:ce:85:20:24:70:81:db:24:70:3d:c5:67: 3f:b5:72:67:36:7f:47:d6:4a:ae:62:61:cb:f4:43:48:2f:d5: 8b:ae:e1:e3:3b:7f:27:ed:89:91:9c:ca:bd:4d:58:b5:85:de: 03:b4:d6:5e:9d:e1:1e:ff:e4:74:e8:46:fb:c4:0f:6e:d9:5a: 37:0a:86:25:01:8f:e4:a0:54:db:76:27:55:f7:15:07:9f:ef: 89:e1:18:6f:47:79:da:b5:ad:dd:c3:ad:6f:49:38:10:54:85: 55:a8:3a:84:06:99:0d:a6:ea:d7:2b:cb:af:f5:32:8a:f8:b9: 13:84:7c:c0:ad:88:03:e9:2a:28:ba:7c:8b:30:48:69:8d:b4: 32:84:3c:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCT6La3JEf/owoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk YmZjNmZmZGMtNjA3ZS00Mzc2LWE1ZmItNmMwNTcyMWQ4ZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEc+E9eIro7NejOp5iXEfdn/wXc/Esv8uZ+f NF8EJw6D1waNrCfIMZuE/fI27CJrAVXI/zcVJjBlYDqmG64SiOZIUYN2DTBnpWvq S2Sa9w4SxiKegCVC9+uobfe6EsuWYnBPDijdnmbojhnVSdrcB0xLdshZcTcFY2yg B38+H+xpqvB3MOFwkjM3DLqwjxl9h1MdX9W9ifJKri5y1nqruaWKM34WCk5hy+zE +sZyIixhehdxbQ4QuyEj0mAErxFS/y2rGarkSEd7CTDxbW82h1ZM2i/g07Z3reVz SQmiub2xXPONQtd5Nl/5EnKwY+YFdfNakUkfPgShMgDvAm1yhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNkyAEhqUs1rJsTCHGtNU4GuMgoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTBkODMzY2ItZWJjMS0z MDlhLWExYzUtNjEyYWUzMjI2YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9JIEiQR1GI29KZzloAAjSYlb4nvlcCjpX3GFS/0Q3eiLgTgS7B2QxR krPveoZKAfIWRfFmaGYkvNOkUr3xgCHxM0Uvpq8UD2W4lOeZ5eUBZCGd0Y8oyy4Y TCbMvjUi19R/J3M5BClzgSyMPuvbC49V8c6FICRwgdskcD3FZz+1cmc2f0fWSq5i Ycv0Q0gv1Yuu4eM7fyftiZGcyr1NWLWF3gO01l6d4R7/5HToRvvED27ZWjcKhiUB j+SgVNt2J1X3FQef74nhGG9Hedq1rd3DrW9JOBBUhVWoOoQGmQ2m6tcry6/1Mor4 uROEfMCtiAPpKii6fIswSGmNtDKEPJk= -----END CERTIFICATE-----Generated at Mon Oct 20 18:36:21 2025 by rpki-client