$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d22634a0-7a16-30fa-9aad-6db16427a897.roa File: d22634a0-7a16-30fa-9aad-6db16427a897.roa (raw, json) Hash identifier: uuf2twNJQo7lDaQtJJx/h+ejgeA04LZcHJhK+lpgjrU= Subject key identifier: BF:AD:84:FC:99:DE:CB:57:00:90:4F:63:6F:0C:30:8B:55:2F:00:FE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B153C26385E82E25ECFC07DC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d22634a0-7a16-30fa-9aad-6db16427a897.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:26:38:5e:82:e2:5e:cf:c0:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=0a50c0cf-bc63-45c3-80b7-e9f15fb39bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2d:09:9e:bd:d5:df:3b:04:c6:f8:20:7e:65: 89:8d:82:1b:25:21:13:66:6e:84:ac:d9:f4:80:d8: 6e:6c:d9:af:4f:15:1d:01:b0:02:27:e0:a5:00:0e: 40:27:76:44:77:5c:47:69:9e:39:c9:7b:fb:8a:c1: f2:8f:20:82:96:3f:8e:8f:5a:6e:40:3f:29:a0:9b: ef:45:30:d4:24:08:25:0a:5e:a6:37:0a:85:ed:21: 41:f8:ef:06:e2:fe:96:cf:fa:93:6e:41:17:40:26: 54:50:93:d0:eb:b4:d0:cd:30:dc:58:e6:ea:f8:e9: b2:db:a3:34:bf:7b:8c:ed:1a:64:f0:59:d9:7b:68: 18:63:99:56:d6:34:db:1b:f9:9c:b4:aa:5e:09:9f: 32:fb:df:26:d9:ea:70:94:d5:2f:3e:e9:c1:55:3d: 5d:11:44:a7:c5:2d:b4:84:ea:e3:14:ff:ae:a7:2c: a2:59:34:29:06:ae:d9:91:4e:c1:9d:b1:90:74:fa: 8f:ce:a2:c5:68:cf:28:36:e4:f9:2c:2d:fc:4e:a3: 83:f6:e5:c3:64:da:a6:4d:60:57:1a:cf:32:f2:f3: 64:fa:14:bd:99:9a:76:55:d0:69:12:c2:3c:7e:b4: f7:12:4d:24:b0:53:04:f9:35:ee:49:ed:b1:88:36: 47:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AD:84:FC:99:DE:CB:57:00:90:4F:63:6F:0C:30:8B:55:2F:00:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d22634a0-7a16-30fa-9aad-6db16427a897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ac:0e:30:59:ac:cb:c2:7b:dc:d1:4a:53:1c:6c:81:6c:75: 42:11:51:1b:51:87:db:ee:0d:25:a1:09:b2:2b:e0:b6:f4:24: 45:1e:a9:4d:ee:bf:98:0c:17:bc:8f:62:89:d9:7f:4a:ec:60: 9d:bc:2c:9d:90:a5:03:ae:da:fc:3d:08:03:0d:ed:8d:b6:7a: ac:d0:0b:07:04:0a:db:ec:22:3a:fc:2e:2d:d3:d3:ce:1e:4a: 5d:18:dd:e2:a6:77:32:25:c5:32:f4:9f:35:45:ab:62:c3:80: a8:d0:9b:b6:fe:8d:ca:14:54:3a:01:9b:e7:21:5a:57:1e:2a: 9c:86:9a:12:36:2a:fb:52:f6:e3:0f:fa:40:04:40:e9:25:a2: 47:f0:6a:d1:d3:8a:31:cc:1e:88:d0:3a:ea:01:53:2d:7f:a8: 38:66:fd:de:08:76:1f:78:2c:83:17:20:8c:42:44:b2:94:0d: 13:ab:3b:36:ff:ab:7a:fe:e3:9f:e7:39:f9:fe:73:c5:39:e1: d0:38:d2:0e:9b:78:1b:0a:db:c5:67:cf:64:4d:e5:35:f0:c2: 60:c6:28:18:bc:ea:14:4c:a3:77:32:e6:94:ee:1b:19:d2:a9: f9:99:74:63:32:53:9a:62:15:e2:7a:6e:15:3a:f2:82:ce:a6: a1:04:0e:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCY4XoLiXs/AfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk MGE1MGMwY2YtYmM2My00NWMzLTgwYjctZTlmMTVmYjM5YmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS0Jnr3V3zsExvggfmWJjYIbJSETZm6ErNn0 gNhubNmvTxUdAbACJ+ClAA5AJ3ZEd1xHaZ45yXv7isHyjyCClj+Oj1puQD8poJvv RTDUJAglCl6mNwqF7SFB+O8G4v6Wz/qTbkEXQCZUUJPQ67TQzTDcWObq+Omy26M0 v3uM7Rpk8FnZe2gYY5lW1jTbG/mctKpeCZ8y+98m2epwlNUvPunBVT1dEUSnxS20 hOrjFP+upyyiWTQpBq7ZkU7BnbGQdPqPzqLFaM8oNuT5LC38TqOD9uXDZNqmTWBX Gs8y8vNk+hS9mZp2VdBpEsI8frT3Ek0ksFME+TXuSe2xiDZHGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+thPyZ3stXAJBPY28MMItVLwD+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDIyNjM0YTAtN2ExNi0z MGZhLTlhYWQtNmRiMTY0MjdhODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6sDjBZrMvCe9zRSlMcbIFsdUIRURtRh9vuDSWhCbIr4Lb0JEUeqU3u v5gMF7yPYonZf0rsYJ28LJ2QpQOu2vw9CAMN7Y22eqzQCwcECtvsIjr8Li3T084e Sl0Y3eKmdzIlxTL0nzVFq2LDgKjQm7b+jcoUVDoBm+chWlceKpyGmhI2KvtS9uMP +kAEQOklokfwatHTijHMHojQOuoBUy1/qDhm/d4Idh94LIMXIIxCRLKUDROrOzb/ q3r+45/nOfn+c8U54dA40g6beBsK28Vnz2RN5TXwwmDGKBi86hRMo3cy5pTuGxnS qfmZdGMyU5piFeJ6bhU68oLOpqEEDp0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:36:21 2025 by rpki-client