$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2e8b32a7-5227-3075-a46f-6e68287464bb.roa File: 2e8b32a7-5227-3075-a46f-6e68287464bb.roa (raw, json) Hash identifier: peqEi7Ey5Dj23vIMp86ae1y6sEwkQHAAAIHgo7Wzcb8= Subject key identifier: CF:B7:48:D7:04:96:7F:71:D1:51:76:BE:CB:1F:04:A1:9D:4F:2A:37 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A9E9663678E34532251D14620 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2e8b32a7-5227-3075-a46f-6e68287464bb.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.153.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:63:67:8e:34:53:22:51:d1:46:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=2024e389-18e9-412a-bd99-4417403a83f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:5b:28:16:05:fb:e1:6a:ff:6d:dd:df:48: 55:a4:be:b4:c8:c5:d8:67:f5:f6:73:77:d1:cc:fa: 77:e1:f2:f6:fc:11:2f:b1:b7:12:5d:3c:8d:e9:d7: 37:ac:f1:65:e9:12:9f:7d:92:a8:30:56:90:9c:b1: a9:1e:5a:fc:52:50:e4:42:cb:53:d7:d2:44:b8:bb: bd:a8:07:5f:80:93:6d:1a:26:7e:ef:e6:be:c2:d5: 86:7e:09:6f:e4:68:12:e1:a6:96:dd:b5:f2:38:ca: bd:ea:1b:94:0d:e2:da:5d:6a:67:b7:ba:21:44:69: aa:10:45:e3:68:93:69:af:98:e7:81:21:bc:ce:1a: 9e:43:ae:68:9d:db:76:b8:e5:b5:c6:db:d9:d1:12: 87:70:d7:04:bd:6e:f2:99:d2:2e:2a:90:7f:d0:06: 29:69:8a:11:c0:57:b4:61:61:12:59:a7:0b:79:9c: fa:bf:a2:5d:df:00:f4:48:da:d0:7d:94:b8:af:1f: 0e:8b:97:4a:ac:b3:f1:e5:da:4e:b0:c9:2d:2e:43: f3:16:46:27:9a:c1:58:fe:47:04:70:0d:f8:d4:96: 8e:26:cd:67:31:06:6d:a5:e7:15:f7:26:cc:25:a7: 3d:45:9a:f5:b6:6c:38:47:8f:0d:88:fe:61:1c:b9: 2c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B7:48:D7:04:96:7F:71:D1:51:76:BE:CB:1F:04:A1:9D:4F:2A:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2e8b32a7-5227-3075-a46f-6e68287464bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:22:13:c2:6c:8e:8a:e4:c8:59:e4:cd:89:de:d1:8a:96:e7: 61:ab:5d:ef:59:e6:91:d0:40:97:32:b4:d3:c6:cf:14:e0:2e: 2a:5a:cb:46:16:0a:64:57:87:3a:dc:f6:27:9c:75:cd:67:59: c1:f8:c9:a0:bf:43:c9:b8:df:fe:76:87:bb:33:b6:cc:51:08: fd:22:b0:ef:d8:7b:3d:1e:4b:de:d6:c8:9c:44:c5:91:44:92: 18:b2:40:91:8b:93:64:ac:2a:12:2e:a6:e1:92:f7:cd:82:ec: 13:9e:b0:14:cb:36:8e:8e:7b:bc:26:21:69:51:a7:21:77:56: 1f:31:44:e8:62:df:ef:ab:51:17:44:45:6d:c0:97:9e:cd:ae: 59:c0:0e:9f:49:83:84:15:5b:97:cc:34:50:10:c0:66:9a:ee: c0:a1:82:94:36:af:74:1c:ae:d0:07:96:49:08:2e:98:82:47: ba:d3:3b:90:30:8d:d7:34:6e:20:66:5c:bf:e4:b6:c9:eb:eb: 01:b8:d4:8c:21:be:42:e9:ac:24:ed:d3:de:dc:ea:12:2d:ed: 63:3b:22:c8:8e:b5:ed:b0:01:57:e5:86:83:e5:b9:b8:e1:8b: e2:de:ca:3c:56:fa:34:90:20:f0:ca:fe:81:0b:02:85:e3:01: ff:19:a7:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelmNnjjRTIlHRRiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MjAyNGUzODktMThlOS00MTJhLWJkOTktNDQxNzQwM2E4M2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQNbKBYF++Fq/23d30hVpL60yMXYZ/X2c3fR zPp34fL2/BEvsbcSXTyN6dc3rPFl6RKffZKoMFaQnLGpHlr8UlDkQstT19JEuLu9 qAdfgJNtGiZ+7+a+wtWGfglv5GgS4aaW3bXyOMq96huUDeLaXWpnt7ohRGmqEEXj aJNpr5jngSG8zhqeQ65ondt2uOW1xtvZ0RKHcNcEvW7ymdIuKpB/0AYpaYoRwFe0 YWESWacLeZz6v6Jd3wD0SNrQfZS4rx8Oi5dKrLPx5dpOsMktLkPzFkYnmsFY/kcE cA341JaOJs1nMQZtpecV9ybMJac9RZr1tmw4R48NiP5hHLksxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+3SNcEln9x0VF2vssfBKGdTyo3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmU4YjMyYTctNTIyNy0z MDc1LWE0NmYtNmU2ODI4NzQ2NGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwiE8JsjorkyFnkzYne0YqW52GrXe9Z5pHQQJcytNPGzxTgLipay0YW CmRXhzrc9iecdc1nWcH4yaC/Q8m43/52h7sztsxRCP0isO/Yez0eS97WyJxExZFE khiyQJGLk2SsKhIupuGS982C7BOesBTLNo6Oe7wmIWlRpyF3Vh8xROhi3++rURdE RW3Al57NrlnADp9Jg4QVW5fMNFAQwGaa7sChgpQ2r3QcrtAHlkkILpiCR7rTO5Aw jdc0biBmXL/ktsnr6wG41IwhvkLprCTt097c6hIt7WM7IsiOte2wAVflhoPlubjh i+LeyjxW+jSQIPDK/oELAoXjAf8Zpy4= -----END CERTIFICATE-----Generated at Mon Aug 4 18:54:11 2025 by rpki-client