$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2d246d-a182-371a-bc59-9c907d654829.roa File: ab2d246d-a182-371a-bc59-9c907d654829.roa (raw, json) Hash identifier: nzV62fMqDjctdBfOPKdShiOj/5gLKl8giyT8W2V7hzQ= Subject key identifier: 42:20:2A:B8:50:19:4A:44:F4:55:1F:CB:28:12:E4:8F:34:18:02:A1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF68690661335B69305A7AD80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2d246d-a182-371a-bc59-9c907d654829.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.153.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:90:66:13:35:b6:93:05:a7:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=43dbd442-da0e-42df-84a6-25c68a9799a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:bf:fe:b5:a6:cf:fc:2e:5c:40:9e:55:b5: 02:27:e7:93:9c:a2:0d:0e:19:f9:6b:d1:fa:c7:81: 14:18:69:9e:f5:a3:31:8e:95:07:74:f4:fb:c7:56: 10:20:8f:8b:58:1c:7d:de:76:39:ef:42:51:58:63: 6f:a9:79:26:ab:c0:4b:63:3b:a2:35:38:11:8e:06: 18:78:2a:b2:62:f2:2a:3c:56:b9:a0:15:0f:68:43: 97:d9:7e:da:4c:96:15:00:f0:7a:ca:53:6e:6f:ef: 2c:12:94:ed:db:b8:c2:50:77:ed:9b:5e:54:a2:74: 39:39:70:05:33:e0:25:f8:cc:ca:db:0b:8b:bd:91: a1:c9:17:97:f4:ea:56:a2:92:e4:62:85:f9:1a:73: f0:fb:49:8c:f2:60:61:f6:43:2a:4b:08:17:89:72: f4:64:2e:53:8d:2a:d2:e9:32:02:ff:71:ad:9d:b9: 61:93:bf:25:0b:96:4d:f5:1f:68:7d:18:7e:84:6c: 85:4d:8f:c5:b3:12:af:00:72:14:10:87:29:80:a4: 29:7e:72:2f:26:d3:85:99:36:40:5a:40:6b:78:69: e0:24:aa:cf:51:e3:08:d8:44:3d:26:6b:db:78:7a: 35:53:7c:69:6e:ba:b9:95:d7:9b:7a:dc:7d:2f:dc: 2d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:20:2A:B8:50:19:4A:44:F4:55:1F:CB:28:12:E4:8F:34:18:02:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ab2d246d-a182-371a-bc59-9c907d654829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:51:0f:b6:84:87:d2:ec:16:9a:74:67:c9:a8:9a:05:f5:d3: 78:98:5b:c6:98:68:31:77:e1:8d:c3:36:28:7b:68:3a:bd:bc: 13:8d:4d:c2:de:28:24:0b:5a:ad:fd:ac:b3:be:e6:a2:20:cb: 0e:0e:5e:53:1c:7c:15:0e:5c:de:c5:0a:a9:d6:4e:29:3b:5e: de:01:05:d2:0a:70:3d:8a:94:6d:18:d6:91:bd:bf:9e:e7:0d: c6:8f:65:fc:8e:9e:65:57:20:46:d0:ec:1b:fa:4a:ba:4c:cf: 14:83:d2:6e:b2:e1:5c:4e:ae:8a:45:94:95:69:51:82:53:84: c4:55:95:4b:79:16:cb:a2:68:14:42:05:d0:63:a3:dc:bf:f0: 7a:3a:28:72:ea:af:e3:e9:c3:0b:dc:f1:76:9b:ba:f2:cb:4a: 32:9c:74:4f:d5:7e:80:a6:9c:2c:83:07:6a:27:de:3c:66:c6: da:30:02:c3:dc:2c:95:11:a0:8b:22:a3:56:ec:46:fc:9c:01: 09:5f:af:56:22:c4:d3:d5:84:fb:c8:37:9e:4f:bb:fa:57:c6: 27:fc:8d:ee:95:a8:bb:5c:e0:c2:c9:bd:20:fb:89:65:5a:b0: 5a:72:42:99:d7:e9:a8:54:3e:cf:7d:4f:4f:79:a8:8a:30:13: 53:e3:05:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpBmEzW2kwWnrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk NDNkYmQ0NDItZGEwZS00MmRmLTg0YTYtMjVjNjhhOTc5OWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXS//rWmz/wuXECeVbUCJ+eTnKINDhn5a9H6 x4EUGGme9aMxjpUHdPT7x1YQII+LWBx93nY570JRWGNvqXkmq8BLYzuiNTgRjgYY eCqyYvIqPFa5oBUPaEOX2X7aTJYVAPB6ylNub+8sEpTt27jCUHftm15UonQ5OXAF M+Al+MzK2wuLvZGhyReX9OpWopLkYoX5GnPw+0mM8mBh9kMqSwgXiXL0ZC5TjSrS 6TIC/3Gtnblhk78lC5ZN9R9ofRh+hGyFTY/FsxKvAHIUEIcpgKQpfnIvJtOFmTZA WkBreGngJKrPUeMI2EQ9JmvbeHo1U3xpbrq5ldebetx9L9wt7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIgKrhQGUpE9FUfyygS5I80GAKhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWIyZDI0NmQtYTE4Mi0z NzFhLWJjNTktOWM5MDdkNjU0ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFRD7aEh9LsFpp0Z8momgX103iYW8aYaDF34Y3DNih7aDq9vBONTcLe KCQLWq39rLO+5qIgyw4OXlMcfBUOXN7FCqnWTik7Xt4BBdIKcD2KlG0Y1pG9v57n DcaPZfyOnmVXIEbQ7Bv6SrpMzxSD0m6y4VxOropFlJVpUYJThMRVlUt5FsuiaBRC BdBjo9y/8Ho6KHLqr+Ppwwvc8XabuvLLSjKcdE/VfoCmnCyDB2on3jxmxtowAsPc LJURoIsio1bsRvycAQlfr1YixNPVhPvIN55Pu/pXxif8je6VqLtc4MLJvSD7iWVa sFpyQpnX6ahUPs99T095qIowE1PjBe4= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:37 2025 by rpki-client