$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/aa4b6c02-c24b-3a78-99a8-626fddbe8610.roa File: aa4b6c02-c24b-3a78-99a8-626fddbe8610.roa (raw, json) Hash identifier: NsT+Ua13kNO16boUy/X2jbMU6vYbPTOKlBg7WTqeC5o= Subject key identifier: 6B:55:3A:F8:5E:31:65:BC:00:9D:48:14:A9:F9:03:52:F6:82:53:16 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AFAB687849536E789A71F1700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/aa4b6c02-c24b-3a78-99a8-626fddbe8610.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.153.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:87:84:95:36:e7:89:a7:1f:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=acb1edbb-900a-41be-bc5f-c4623802864e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:a8:04:86:aa:56:70:d1:b5:41:0c:ef:b4: ae:a5:92:03:96:92:87:bd:52:b9:43:bc:9e:a0:84: c6:3c:15:b1:21:43:f2:09:05:6f:18:ae:f6:09:3d: bf:ce:c1:fd:d6:59:ba:0c:8c:55:8f:54:56:c6:bf: 1b:95:12:25:9e:90:10:11:76:ea:0c:a5:9c:b6:aa: 3f:da:56:aa:92:70:5a:07:83:aa:96:9a:de:f5:1f: ce:f3:f5:dc:26:93:e2:4c:5d:8a:f7:77:58:f8:7c: df:ce:b6:c5:02:10:1b:6f:21:a1:3f:18:4f:b4:6f: ed:83:6e:ab:c4:74:4d:ef:1d:e4:9c:b4:43:16:76: fa:ec:46:62:23:e7:db:fc:31:cf:12:1f:d2:67:96: 1f:43:5f:1b:5c:02:41:34:a4:45:20:17:35:fc:6b: 1a:08:48:5c:a2:f3:c3:9b:64:a9:58:89:58:2f:d5: d3:bf:fa:5a:f2:fd:d5:de:76:7e:35:60:20:66:30: da:ba:f8:84:9d:8f:b2:7e:29:b8:9a:59:5d:dc:ce: c2:dc:14:72:7f:87:47:97:4e:f1:ee:63:96:2a:df: e6:c9:98:59:37:81:c7:e2:33:40:1b:8c:09:c9:29: a8:f5:24:22:65:9d:c1:e6:45:84:31:e3:b5:e8:62: ab:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:55:3A:F8:5E:31:65:BC:00:9D:48:14:A9:F9:03:52:F6:82:53:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/aa4b6c02-c24b-3a78-99a8-626fddbe8610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:22:9b:9e:16:e4:8e:fd:1d:2a:e3:91:ba:eb:3b:2f:8c:ef: 6a:ee:4c:3a:8e:0c:24:68:8b:e7:a7:b5:0b:78:3e:5f:c9:0f: 14:22:ec:75:cf:8d:30:7e:49:e2:e5:78:e6:c3:5a:7e:ba:b0: ac:a8:d9:16:f6:73:d2:93:ec:48:29:0f:6a:44:da:0b:75:16: 76:2e:aa:da:8f:d9:eb:98:44:32:c8:df:c6:4c:d3:8a:28:cc: 38:fb:88:f1:51:54:02:c8:2f:1d:c6:d0:c3:f6:19:13:d3:1d: 36:35:15:67:6f:91:a7:c7:69:3b:de:ca:d1:e7:04:82:63:a8: 22:7e:0a:6f:19:25:ec:a0:3c:cd:38:73:bd:a4:b7:46:06:f0: cc:84:79:87:b2:18:6c:09:06:ff:dc:c3:1c:63:fe:b0:56:61: 89:cb:bd:39:26:a8:0c:64:02:ee:39:78:32:49:6a:32:e7:19: 59:0c:4b:36:8f:a7:db:ab:82:69:1b:53:17:8b:d1:45:7c:83: b6:b2:3f:15:18:30:15:ec:c1:a5:6c:21:68:d9:5f:47:f3:7a: bf:17:e1:ff:7f:d0:84:9b:86:ad:0b:ca:57:7d:96:af:58:28: e2:c8:ac:cf:a3:9b:fe:f7:3e:8c:da:1c:bd:43:57:be:a6:4b: 47:5f:be:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6toeElTbniacfFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk YWNiMWVkYmItOTAwYS00MWJlLWJjNWYtYzQ2MjM4MDI4NjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/eoBIaqVnDRtUEM77SupZIDlpKHvVK5Q7ye oITGPBWxIUPyCQVvGK72CT2/zsH91lm6DIxVj1RWxr8blRIlnpAQEXbqDKWctqo/ 2laqknBaB4Oqlpre9R/O8/XcJpPiTF2K93dY+HzfzrbFAhAbbyGhPxhPtG/tg26r xHRN7x3knLRDFnb67EZiI+fb/DHPEh/SZ5YfQ18bXAJBNKRFIBc1/GsaCEhcovPD m2SpWIlYL9XTv/pa8v3V3nZ+NWAgZjDauviEnY+yfim4mlld3M7C3BRyf4dHl07x 7mOWKt/myZhZN4HH4jNAG4wJySmo9SQiZZ3B5kWEMeO16GKrWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtVOvheMWW8AJ1IFKn5A1L2glMWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWE0YjZjMDItYzI0Yi0z YTc4LTk5YTgtNjI2ZmRkYmU4NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoim54W5I79HSrjkbrrOy+M72ruTDqODCRoi+entQt4Pl/JDxQi7HXP jTB+SeLleObDWn66sKyo2Rb2c9KT7EgpD2pE2gt1FnYuqtqP2euYRDLI38ZM04oo zDj7iPFRVALILx3G0MP2GRPTHTY1FWdvkafHaTveytHnBIJjqCJ+Cm8ZJeygPM04 c72kt0YG8MyEeYeyGGwJBv/cwxxj/rBWYYnLvTkmqAxkAu45eDJJajLnGVkMSzaP p9urgmkbUxeL0UV8g7ayPxUYMBXswaVsIWjZX0fzer8X4f9/0ISbhq0Lyld9lq9Y KOLIrM+jm/73PozaHL1DV76mS0dfvm8= -----END CERTIFICATE-----Generated at Tue Aug 26 06:35:27 2025 by rpki-client