$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/609e63b1-2542-3de6-b833-b56dd677893b.roa File: 609e63b1-2542-3de6-b833-b56dd677893b.roa (raw, json) Hash identifier: HM+PQssZ4duK7JgtjAuMKmCsMTa6pECJ7hn30U6t464= Subject key identifier: 3E:8E:2A:22:16:CA:AF:EE:A2:D1:04:C9:07:0F:67:59:2F:BA:7E:3C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B153C271A73B707A75900A700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/609e63b1-2542-3de6-b833-b56dd677893b.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:27:1a:73:b7:07:a7:59:00:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=b7294863-57e4-429e-a49e-c99a966f6a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2a:79:a5:32:00:71:f7:a8:bb:07:34:84:9c: 55:a9:28:99:66:60:70:74:34:c6:2b:6f:4c:04:f7: 45:50:9f:ff:1a:31:fd:ab:f2:ce:39:4e:0c:42:f0: 92:5f:9c:92:8d:83:ce:59:ba:29:0c:51:7a:9e:c8: 96:38:a6:62:36:2d:85:99:b3:e2:3c:8d:22:e5:12: db:82:04:3a:47:2c:86:e4:79:02:1b:85:2c:1e:eb: 4b:2b:01:62:11:2d:2d:04:01:80:67:8a:cb:7e:f9: ea:4a:da:f6:8d:5a:33:85:7a:2a:1a:98:42:5c:56: 3f:c6:5b:8a:7b:9c:bb:e1:c6:fc:89:6e:ee:3e:47: b0:46:56:ba:68:42:55:68:03:76:fe:4a:49:a3:e8: e6:fb:9f:e9:08:4a:14:65:c2:a7:a6:0c:5b:4f:0e: a0:2a:cb:2d:9d:4e:2a:c1:b6:bb:6e:99:da:42:db: 10:08:ff:fe:1d:9d:ca:02:c0:11:30:5d:ca:69:85: 66:69:21:30:d7:eb:08:a1:35:fa:3f:78:1a:ae:1e: de:49:6c:ef:f9:93:56:43:c1:71:e3:44:9c:fb:c4: c5:8e:8b:e1:a6:e8:0e:cd:e0:81:14:9f:f8:00:5a: 95:10:30:ea:0d:d9:3a:91:af:cf:1e:5e:0c:4f:c0: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8E:2A:22:16:CA:AF:EE:A2:D1:04:C9:07:0F:67:59:2F:BA:7E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/609e63b1-2542-3de6-b833-b56dd677893b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:89:f3:0e:78:34:69:52:61:fb:41:38:34:1e:e1:9f:c7:8f: 53:8b:a3:d9:6e:3f:e1:4a:bc:f2:a5:23:fc:6d:37:c1:4f:d4: 8f:07:2c:97:77:96:ba:21:03:01:a3:4b:81:80:5d:b6:23:5c: eb:13:3e:8f:dd:cd:6e:02:16:b4:ea:d6:e3:37:4f:07:54:e8: 17:31:98:97:81:a1:93:80:4e:1d:c7:90:1e:a8:7a:14:bd:c3: 16:0e:7b:12:17:ec:b5:16:67:a6:13:ff:e6:13:62:8a:48:47: 78:34:30:e9:c9:8b:13:1a:e7:3e:05:c8:d2:d9:29:cc:46:82: 9e:22:a4:6d:53:fe:91:9c:2c:61:88:b0:fb:3c:7d:d2:da:e8: f4:e7:ac:06:d8:8c:a6:6a:5f:5e:67:56:1c:8f:b5:50:7c:ef: 9b:2d:80:7a:b1:c2:8a:75:aa:cb:0f:c5:b8:f7:bf:a3:55:6a: ce:b4:b9:f6:60:e0:fd:27:76:7c:a2:65:d8:1e:c3:72:59:a9: c0:03:98:37:36:ab:06:53:00:54:1c:a8:ab:55:d5:9d:bf:7b: 80:7e:3d:21:82:0f:2a:10:93:6d:6c:87:c3:65:dd:06:21:ca: 8f:2b:24:13:81:37:d1:f6:25:e1:ca:0f:b8:61:f3:b6:b2:9c: 75:a3:46:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCcac7cHp1kApwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk YjcyOTQ4NjMtNTdlNC00MjllLWE0OWUtYzk5YTk2NmY2YTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ip5pTIAcfeouwc0hJxVqSiZZmBwdDTGK29M BPdFUJ//GjH9q/LOOU4MQvCSX5ySjYPOWbopDFF6nsiWOKZiNi2FmbPiPI0i5RLb ggQ6RyyG5HkCG4UsHutLKwFiES0tBAGAZ4rLfvnqStr2jVozhXoqGphCXFY/xluK e5y74cb8iW7uPkewRla6aEJVaAN2/kpJo+jm+5/pCEoUZcKnpgxbTw6gKsstnU4q wba7bpnaQtsQCP/+HZ3KAsARMF3KaYVmaSEw1+sIoTX6P3garh7eSWzv+ZNWQ8Fx 40Sc+8TFjovhpugOzeCBFJ/4AFqVEDDqDdk6ka/PHl4MT8Dh9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6OKiIWyq/uotEEyQcPZ1kvun48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjA5ZTYzYjEtMjU0Mi0z ZGU2LWI4MzMtYjU2ZGQ2Nzc4OTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKJ8w54NGlSYftBODQe4Z/Hj1OLo9luP+FKvPKlI/xtN8FP1I8HLJd3 lrohAwGjS4GAXbYjXOsTPo/dzW4CFrTq1uM3TwdU6BcxmJeBoZOATh3HkB6oehS9 wxYOexIX7LUWZ6YT/+YTYopIR3g0MOnJixMa5z4FyNLZKcxGgp4ipG1T/pGcLGGI sPs8fdLa6PTnrAbYjKZqX15nVhyPtVB875stgHqxwop1qssPxbj3v6NVas60ufZg 4P0ndnyiZdgew3JZqcADmDc2qwZTAFQcqKtV1Z2/e4B+PSGCDyoQk21sh8Nl3QYh yo8rJBOBN9H2JeHKD7hh87aynHWjRoI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:59:54 2025 by rpki-client