$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a39f0291-81e8-3e81-952c-8f6dd51e8925.roa File: a39f0291-81e8-3e81-952c-8f6dd51e8925.roa (raw, json) Hash identifier: HFKfeNufNyQAWE0nNmmXG8AuWtGMz/2UemBXQi+1FtU= Subject key identifier: CE:60:53:84:51:F7:B1:CD:FF:90:0F:9C:6B:12:E9:3A:9F:B6:19:59 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52E9ABF50247B208C8317A00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a39f0291-81e8-3e81-952c-8f6dd51e8925.roa Signing time: Fri 26 Sep 2025 15:14:48 +0000 ROA not before: Fri 26 Sep 2025 15:14:48 +0000 ROA not after: Thu 25 Dec 2025 16:14:48 +0000 asID: 8069 IP address blocks: 20.153.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:e9:ab:f5:02:47:b2:08:c8:31:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 15:14:48 2025 GMT Not After : Dec 25 16:14:48 2025 GMT Subject: CN=517afbb6-52db-45b7-84ca-cc769bd8fd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4c:10:24:b3:be:47:29:d4:fd:79:58:b6:8f: 69:23:19:83:0e:2b:92:67:68:72:3c:bf:77:3b:9b: a8:e6:68:2a:25:48:1e:ae:44:e7:cd:b5:fa:13:15: e7:2d:cf:ea:43:97:84:e8:57:89:1c:e6:ba:c7:38: ca:ce:f3:29:6f:59:09:8d:d3:2e:a7:1c:c9:d4:77: 48:01:11:f2:8a:a5:68:33:57:2b:01:6e:2a:3e:32: e3:a3:3b:9c:11:7c:05:6f:c2:c9:5b:5f:af:bb:0f: 67:d0:5d:23:d9:c6:29:6a:73:dc:55:3f:2f:d9:81: 2a:51:db:f0:9e:69:c6:7e:ad:1d:f2:27:2e:8a:f8: de:08:28:a3:ee:2e:ef:d1:39:56:42:46:0e:19:02: 6b:ba:5d:6e:2e:64:44:3e:ad:a0:58:49:67:dc:70: 4a:f2:d7:b7:af:40:6b:c6:aa:e7:c7:2a:15:ff:f0: e9:af:eb:d5:00:3b:e3:93:5e:da:be:40:19:23:08: 3f:af:c3:94:93:61:17:34:59:37:18:ec:d2:c4:29: b6:9f:cc:5b:fe:c0:49:ea:83:d0:e9:1b:19:a0:30: c1:50:ed:96:84:b4:48:0e:95:ce:1e:3a:4b:31:ac: 6b:d5:7e:20:d3:9c:31:66:03:98:15:c1:df:40:5c: d4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:60:53:84:51:F7:B1:CD:FF:90:0F:9C:6B:12:E9:3A:9F:B6:19:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a39f0291-81e8-3e81-952c-8f6dd51e8925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:da:35:6e:4f:8f:1a:ce:86:72:6d:27:6a:0a:ac:94:7a:50: 95:cd:29:95:7b:55:f6:5e:d8:8d:4c:78:60:4b:ce:ce:54:41: 36:2e:09:d4:58:b2:1c:20:ce:94:27:ae:e6:c3:5b:7e:7c:89: a6:d8:34:40:c2:7a:8b:cf:bb:b5:4a:45:24:d3:d2:60:bc:e7: 0c:66:32:11:ac:05:77:14:9a:18:4f:49:69:16:63:b3:87:b0: 6d:3d:cc:1d:0a:ac:f5:9c:e5:9b:7e:02:51:55:56:59:20:18: 0a:63:de:6b:70:32:f1:d6:cb:2b:4a:83:ca:30:3c:51:8c:b5: 7c:a5:5c:b4:1b:0e:dd:72:f7:5d:e2:5b:30:6a:07:5a:dd:41: 9d:52:6f:e8:73:2b:d0:bc:f1:1d:af:9c:7e:3c:01:69:ac:46: 50:02:24:a2:7f:13:72:b9:37:17:03:84:74:27:20:1f:5a:13: 51:7a:92:2d:a9:ee:30:31:1e:50:27:ea:a4:f5:bb:78:fe:cd: c5:61:62:11:a0:ff:9a:e4:38:de:01:37:b2:be:d2:95:3f:d2: 09:1b:df:f7:d4:27:58:a4:f6:f6:f6:65:96:63:8b:f3:79:21: b0:56:f3:fc:e6:c4:db:36:0e:b3:09:12:40:ae:1d:ff:79:b2: dc:a1:e5:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtS6av1AkeyCMgxegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjE1MTQ0OFoXDTI1MTIyNTE2MTQ0OFowLzEtMCsGA1UEAxMk NTE3YWZiYjYtNTJkYi00NWI3LTg0Y2EtY2M3NjliZDhmZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0wQJLO+RynU/XlYto9pIxmDDiuSZ2hyPL93 O5uo5mgqJUgerkTnzbX6ExXnLc/qQ5eE6FeJHOa6xzjKzvMpb1kJjdMupxzJ1HdI ARHyiqVoM1crAW4qPjLjozucEXwFb8LJW1+vuw9n0F0j2cYpanPcVT8v2YEqUdvw nmnGfq0d8icuivjeCCij7i7v0TlWQkYOGQJrul1uLmREPq2gWEln3HBK8te3r0Br xqrnxyoV//Dpr+vVADvjk17avkAZIwg/r8OUk2EXNFk3GOzSxCm2n8xb/sBJ6oPQ 6RsZoDDBUO2WhLRIDpXOHjpLMaxr1X4g05wxZgOYFcHfQFzUUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5gU4RR97HN/5APnGsS6TqfthlZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTM5ZjAyOTEtODFlOC0z ZTgxLTk1MmMtOGY2ZGQ1MWU4OTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvaNW5PjxrOhnJtJ2oKrJR6UJXNKZV7VfZe2I1MeGBLzs5UQTYuCdRY shwgzpQnrubDW358iabYNEDCeovPu7VKRSTT0mC85wxmMhGsBXcUmhhPSWkWY7OH sG09zB0KrPWc5Zt+AlFVVlkgGApj3mtwMvHWyytKg8owPFGMtXylXLQbDt1y913i WzBqB1rdQZ1Sb+hzK9C88R2vnH48AWmsRlACJKJ/E3K5NxcDhHQnIB9aE1F6ki2p 7jAxHlAn6qT1u3j+zcVhYhGg/5rkON4BN7K+0pU/0gkb3/fUJ1ik9vb2ZZZji/N5 IbBW8/zmxNs2DrMJEkCuHf95styh5bI= -----END CERTIFICATE-----Generated at Tue Oct 21 06:44:12 2025 by rpki-client