$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e19c29c0-9b90-32c5-8f64-85fb3a59f907.roa File: e19c29c0-9b90-32c5-8f64-85fb3a59f907.roa (raw, json) Hash identifier: 2bw4wefIdJzwbqo/1WOQouWDl5ochwsVxB60I6GRvYU= Subject key identifier: 11:12:AC:E7:25:41:69:A1:E0:2D:95:58:92:27:62:F3:1E:07:BE:0C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF68692231F2ADCB61B107B00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e19c29c0-9b90-32c5-8f64-85fb3a59f907.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.153.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:92:23:1f:2a:dc:b6:1b:10:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=bf2e0ab4-3d10-49c0-af86-6ae34287a095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:92:47:aa:a6:11:a6:8c:9e:58:fe:cd:d0:76: d2:ac:50:84:d8:8a:3c:94:77:dc:ee:ff:31:8f:19: d1:f5:2b:08:c0:d7:6f:1a:78:b0:2c:db:90:96:d6: 4e:59:65:1c:da:d8:df:a7:a1:3c:a2:2c:0c:60:af: 56:0c:ac:e3:fd:48:30:93:1e:32:1d:a9:b5:a0:47: 9d:c8:17:42:69:2b:93:f1:95:33:87:2b:b8:3e:e5: 91:77:01:83:64:20:6c:61:01:fa:67:b6:77:4d:51: 1d:24:08:49:d1:5e:70:39:70:78:5b:2c:5a:17:44: 33:f5:b9:ed:63:10:70:f7:12:5a:25:06:71:a9:8d: fc:67:50:64:17:c0:75:cf:d6:23:2c:2e:4f:e0:db: 9b:6d:99:3c:f2:98:27:be:6a:db:0e:41:0a:07:da: e4:ec:a8:52:8a:e2:08:65:73:55:80:9d:c2:d3:ad: 3a:38:86:38:a3:5b:67:09:36:ee:44:19:83:7c:b0: 66:da:cb:54:71:dc:4d:0e:15:30:dc:09:ff:41:28: 99:12:b5:5e:d1:62:6f:78:97:58:72:06:b8:22:ba: 2c:ee:4b:db:3a:52:a9:cf:f2:f6:f5:99:dd:41:b0: 22:5a:35:7f:1a:b9:85:c8:5a:7e:46:40:7c:ab:1e: 9d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:12:AC:E7:25:41:69:A1:E0:2D:95:58:92:27:62:F3:1E:07:BE:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e19c29c0-9b90-32c5-8f64-85fb3a59f907.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:8b:af:26:68:af:00:84:ac:48:07:e2:78:40:1e:94:56:29: 36:25:2c:f3:a4:15:4b:b2:bc:36:d0:c1:03:96:30:30:4c:15: 9a:27:5e:5e:80:1d:7b:f1:78:6c:33:48:ec:99:79:c6:db:c0: b1:7a:34:a8:e2:a5:51:49:dc:22:ee:42:08:4b:ba:a1:b2:bc: 8f:18:c0:e8:91:f6:a1:28:05:64:64:0a:6d:4b:db:d6:a5:9a: db:ab:10:b1:82:ac:8b:ea:30:9b:06:a2:f9:ed:55:14:5a:07: 7b:57:26:e3:2d:3d:a7:65:3a:74:48:0c:4e:5e:8d:4f:43:a7: b8:d7:4c:ae:26:f4:d6:fa:6e:2a:e1:b5:e2:73:8e:75:3c:2d: 80:24:5c:1e:1d:f7:59:37:86:5d:14:3a:e8:40:ee:22:63:f6: fa:61:c9:00:fd:95:03:0d:ad:b3:e5:e0:64:51:b0:4c:1a:57: 7e:10:12:b9:c4:ed:43:6f:1f:fc:b3:53:ec:40:c8:60:40:60: b1:8e:7a:1c:db:1d:5e:7e:a4:ed:e7:95:bf:e8:1d:49:4b:3e: 05:b0:44:82:02:7a:3c:ac:1f:3a:7a:57:ec:86:af:d7:8c:84: c6:a6:e6:61:06:7f:57:2c:84:14:48:6c:e1:f0:3c:28:12:aa: 99:6a:4e:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpIjHyrcthsQewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk YmYyZTBhYjQtM2QxMC00OWMwLWFmODYtNmFlMzQyODdhMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05JHqqYRpoyeWP7N0HbSrFCE2Io8lHfc7v8x jxnR9SsIwNdvGniwLNuQltZOWWUc2tjfp6E8oiwMYK9WDKzj/Ugwkx4yHam1oEed yBdCaSuT8ZUzhyu4PuWRdwGDZCBsYQH6Z7Z3TVEdJAhJ0V5wOXB4WyxaF0Qz9bnt YxBw9xJaJQZxqY38Z1BkF8B1z9YjLC5P4NubbZk88pgnvmrbDkEKB9rk7KhSiuII ZXNVgJ3C0606OIY4o1tnCTbuRBmDfLBm2stUcdxNDhUw3An/QSiZErVe0WJveJdY cga4Iros7kvbOlKpz/L29ZndQbAiWjV/GrmFyFp+RkB8qx6dMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBESrOclQWmh4C2VWJInYvMeB74MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTE5YzI5YzAtOWI5MC0z MmM1LThmNjQtODVmYjNhNTlmOTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWLryZorwCErEgH4nhAHpRWKTYlLPOkFUuyvDbQwQOWMDBMFZonXl6A HXvxeGwzSOyZecbbwLF6NKjipVFJ3CLuQghLuqGyvI8YwOiR9qEoBWRkCm1L29al mturELGCrIvqMJsGovntVRRaB3tXJuMtPadlOnRIDE5ejU9Dp7jXTK4m9Nb6birh teJzjnU8LYAkXB4d91k3hl0UOuhA7iJj9vphyQD9lQMNrbPl4GRRsEwaV34QErnE 7UNvH/yzU+xAyGBAYLGOehzbHV5+pO3nlb/oHUlLPgWwRIICejysHzp6V+yGr9eM hMam5mEGf1cshBRIbOHwPCgSqplqTvc= -----END CERTIFICATE-----Generated at Tue Aug 26 06:39:42 2025 by rpki-client