$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ac33e084-14c8-3912-b024-0e8df49402d3.roa File: ac33e084-14c8-3912-b024-0e8df49402d3.roa (raw, json) Hash identifier: vWGk4XVWfHT762WNVQEKKQzcHYAx1Zr3O9cQz0kyu6s= Subject key identifier: 85:9A:41:81:BE:33:D0:CB:9C:1D:6E:DB:1E:6A:71:E3:2A:D5:FC:E2 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B41E706D4F68C95849407FA80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ac33e084-14c8-3912-b024-0e8df49402d3.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:06:d4:f6:8c:95:84:94:07:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=06721e53-0b9c-4507-8f1b-5abb38f235e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:92:b1:31:4f:1a:c0:f7:77:c7:96:33:7f:42: 48:b1:f5:cf:c8:63:7c:ab:3d:67:05:5a:2d:22:91: de:dd:d7:ae:96:40:b4:18:40:ba:42:a3:4e:33:c6: cc:04:b2:c1:a4:e9:e4:d8:57:07:0a:47:bb:ce:60: b1:4b:b1:c1:f2:09:71:49:62:a0:44:de:48:5f:ba: bd:4f:63:7d:dd:86:80:fe:60:8a:d7:22:84:78:8f: 89:22:bf:ef:3f:cb:bf:88:78:02:f2:2b:f2:53:93: 10:99:5a:6a:90:45:57:4a:82:3a:3d:b0:b8:3f:fc: 0e:f7:0c:6f:de:a2:17:1b:16:0a:e1:30:e4:28:65: de:c7:4c:ec:18:a6:85:b2:cd:7a:06:c2:35:fd:2d: 67:3e:7f:70:de:32:d1:c4:8f:be:c0:94:14:0c:6c: 88:02:6c:58:84:c2:d8:d4:81:a3:fb:6e:a0:9d:d9: 6c:cc:c8:90:fd:65:cc:99:b0:25:2e:ba:b2:7d:8c: 1d:6b:23:d9:cc:80:b9:3a:1c:55:73:94:fc:f0:18: 1c:23:54:45:62:63:fa:54:b7:ef:40:63:2f:35:bd: 90:e6:81:53:7b:db:a4:e3:10:cc:49:de:52:0d:f6: 83:00:ff:aa:ee:16:8c:28:e7:10:74:df:9e:f8:44: 46:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9A:41:81:BE:33:D0:CB:9C:1D:6E:DB:1E:6A:71:E3:2A:D5:FC:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ac33e084-14c8-3912-b024-0e8df49402d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f9:2f:5b:21:14:38:cd:a8:9e:81:63:f5:8f:ea:1d:23:7f: ca:d8:88:7c:a6:f6:2b:19:67:5b:27:4d:44:1d:35:62:b2:0d: d1:01:b8:0c:8d:0f:76:a9:a8:7b:70:85:0d:6f:28:b3:ca:e3: c0:c7:41:8a:83:41:56:48:ff:91:22:e5:a5:f5:7e:19:43:32: 99:ef:06:cb:1d:f3:10:b8:59:ed:8e:a6:af:7a:2c:95:af:5f: b4:3b:19:ad:1b:e1:52:03:9e:20:64:ea:51:53:a1:73:2f:ee: ef:fc:b6:0e:ab:92:a0:4f:59:5c:03:81:1c:b7:a3:c9:89:94: a3:67:51:b7:fe:25:66:0d:64:5b:a5:34:b7:68:a2:11:04:8f: a5:7a:4b:00:d3:8c:84:00:19:ff:6e:c8:42:3c:55:61:22:e1: db:87:9c:83:b5:75:b6:67:fe:ee:78:4b:02:07:bd:f8:1f:b3: 58:b6:b9:21:c6:75:35:33:f1:86:da:56:e8:29:2b:89:f5:82: c9:74:dd:cd:ae:c5:5b:07:a8:d4:b1:d4:5a:a3:bf:53:4e:eb: 99:12:a6:10:7a:53:4e:7b:1b:4c:b1:7a:ee:d2:4f:85:5d:fc: 80:a2:70:64:d9:cc:4d:69:5c:e6:78:1b:d2:83:f1:37:97:70: 45:a1:8c:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5wbU9oyVhJQH+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MDY3MjFlNTMtMGI5Yy00NTA3LThmMWItNWFiYjM4ZjIzNWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5KxMU8awPd3x5Yzf0JIsfXPyGN8qz1nBVot IpHe3deulkC0GEC6QqNOM8bMBLLBpOnk2FcHCke7zmCxS7HB8glxSWKgRN5IX7q9 T2N93YaA/mCK1yKEeI+JIr/vP8u/iHgC8ivyU5MQmVpqkEVXSoI6PbC4P/wO9wxv 3qIXGxYK4TDkKGXex0zsGKaFss16BsI1/S1nPn9w3jLRxI++wJQUDGyIAmxYhMLY 1IGj+26gndlszMiQ/WXMmbAlLrqyfYwdayPZzIC5OhxVc5T88BgcI1RFYmP6VLfv QGMvNb2Q5oFTe9uk4xDMSd5SDfaDAP+q7haMKOcQdN+e+ERGoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWaQYG+M9DLnB1u2x5qceMq1fziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWMzM2UwODQtMTRjOC0z OTEyLWIwMjQtMGU4ZGY0OTQwMmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv5L1shFDjNqJ6BY/WP6h0jf8rYiHym9isZZ1snTUQdNWKyDdEBuAyN D3apqHtwhQ1vKLPK48DHQYqDQVZI/5Ei5aX1fhlDMpnvBssd8xC4We2Opq96LJWv X7Q7Ga0b4VIDniBk6lFToXMv7u/8tg6rkqBPWVwDgRy3o8mJlKNnUbf+JWYNZFul NLdoohEEj6V6SwDTjIQAGf9uyEI8VWEi4duHnIO1dbZn/u54SwIHvfgfs1i2uSHG dTUz8YbaVugpK4n1gsl03c2uxVsHqNSx1Fqjv1NO65kSphB6U057G0yxeu7ST4Vd /ICicGTZzE1pXOZ4G9KD8TeXcEWhjHY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:09 2025 by rpki-client