$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44e165bb-a59b-3f83-a408-caf7462b0f54.roa File: 44e165bb-a59b-3f83-a408-caf7462b0f54.roa (raw, json) Hash identifier: ICXc02AuESU9Oxy0DADK5P8ON5i4VfDolCwAMzBMYus= Subject key identifier: 02:D7:FC:22:9D:5C:DD:CF:E0:43:8C:FB:CC:EF:7E:C5:05:71:3B:D8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF951659181162B0075001780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44e165bb-a59b-3f83-a408-caf7462b0f54.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:65:91:81:16:2b:00:75:00:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=637932a0-3338-4305-a89b-48ca6d981231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d5:f3:cf:2d:f8:33:06:dd:2b:ae:42:d5:9e: 1d:89:13:db:97:18:77:a3:b9:36:3b:2c:3b:7b:c1: 12:2e:d6:21:c6:e4:8f:b3:77:dd:24:21:91:21:99: 1a:84:21:f7:ad:86:74:36:b6:3c:f8:b5:3e:ec:b7: 82:22:29:98:f2:1c:2a:86:2e:bd:6c:62:88:7b:5c: aa:4b:f4:da:80:d9:f7:de:8b:99:15:fc:65:8c:d0: 65:2e:83:a7:11:95:93:e4:f2:d1:86:17:6b:25:3f: cc:59:7b:88:55:fd:ef:9e:ac:9d:ee:20:da:5e:58: d2:e2:49:8e:bb:c5:c2:a2:68:31:78:7f:c6:a4:da: b4:a7:c7:70:3c:18:b8:58:dc:a7:46:d2:4a:d2:fb: 37:e4:67:14:95:75:d3:95:99:fd:8d:8f:3b:73:79: 64:f9:59:ff:19:77:42:0a:bd:e7:56:e6:6b:e1:68: 11:f5:13:a8:44:7a:c7:a3:d6:e1:d5:6a:9c:59:5b: 1c:d1:79:94:0f:e9:6f:1e:69:02:cf:8c:ad:7c:71: d7:b8:ac:21:c3:94:3f:65:52:1a:d8:ce:33:fc:b1: ea:63:09:bb:0d:f0:4e:a7:0f:0a:ca:ad:95:e9:04: eb:a4:94:01:82:99:79:69:ce:bf:a5:7f:66:1e:70: 60:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D7:FC:22:9D:5C:DD:CF:E0:43:8C:FB:CC:EF:7E:C5:05:71:3B:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44e165bb-a59b-3f83-a408-caf7462b0f54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b9:83:f6:2b:d1:83:71:4d:06:42:cc:e2:12:ab:55:1f:31: 87:5c:e7:d5:f2:66:47:70:0b:a1:5f:c3:63:1b:e6:2a:d2:00: 2a:a7:51:03:e4:a4:e2:2f:a8:b1:89:1c:86:f0:83:f1:47:c8: 16:b8:f2:38:f4:83:56:09:e3:71:13:ea:e9:47:ee:87:db:0c: 79:a3:66:a1:79:6f:7d:8a:d3:00:1f:57:da:e4:d9:9f:ee:6e: 90:ac:a4:db:61:e2:9d:87:1a:cf:fa:d3:2b:4c:83:e0:7c:1f: c4:1d:25:22:05:61:37:2b:f0:93:c3:9d:45:5e:e2:81:8d:05: c1:af:a8:6a:33:e3:d4:39:d2:9a:36:e7:59:6d:b3:7c:a5:9e: 4f:e7:9c:52:6e:b0:b6:fe:c0:11:89:a4:8d:3a:6e:01:3e:18: a8:75:6d:e3:65:6c:19:48:cc:41:3f:cf:4e:82:7b:ed:00:26: 38:3f:d4:46:7a:9e:8f:11:0d:b8:15:b0:a8:25:34:ab:62:24: f0:80:53:f4:27:6d:d6:55:2f:3f:93:49:ab:be:07:6e:dd:b6: 06:31:34:6a:60:39:8d:9c:81:1d:3d:e2:31:38:bb:af:69:3e: ec:3e:6c:ba:96:4a:ce:56:78:e2:69:19:7c:b0:52:8b:cb:32: 52:b1:03:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UWWRgRYrAHUAF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NjM3OTMyYTAtMzMzOC00MzA1LWE4OWItNDhjYTZkOTgxMjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9Xzzy34MwbdK65C1Z4diRPblxh3o7k2Oyw7 e8ESLtYhxuSPs3fdJCGRIZkahCH3rYZ0NrY8+LU+7LeCIimY8hwqhi69bGKIe1yq S/TagNn33ouZFfxljNBlLoOnEZWT5PLRhhdrJT/MWXuIVf3vnqyd7iDaXljS4kmO u8XComgxeH/GpNq0p8dwPBi4WNynRtJK0vs35GcUlXXTlZn9jY87c3lk+Vn/GXdC Cr3nVuZr4WgR9ROoRHrHo9bh1WqcWVsc0XmUD+lvHmkCz4ytfHHXuKwhw5Q/ZVIa 2M4z/LHqYwm7DfBOpw8Kyq2V6QTrpJQBgpl5ac6/pX9mHnBglwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALX/CKdXN3P4EOM+8zvfsUFcTvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDRlMTY1YmItYTU5Yi0z ZjgzLWE0MDgtY2FmNzQ2MmIwZjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS5g/Yr0YNxTQZCzOISq1UfMYdc59XyZkdwC6Ffw2Mb5irSACqnUQPk pOIvqLGJHIbwg/FHyBa48jj0g1YJ43ET6ulH7ofbDHmjZqF5b32K0wAfV9rk2Z/u bpCspNth4p2HGs/60ytMg+B8H8QdJSIFYTcr8JPDnUVe4oGNBcGvqGoz49Q50po2 51lts3ylnk/nnFJusLb+wBGJpI06bgE+GKh1beNlbBlIzEE/z06Ce+0AJjg/1EZ6 no8RDbgVsKglNKtiJPCAU/QnbdZVLz+TSau+B27dtgYxNGpgOY2cgR094jE4u69p Puw+bLqWSs5WeOJpGXywUovLMlKxAyw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:36 2025 by rpki-client