$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ae21d155-9407-3def-b665-6cf578e3230e.roa File: ae21d155-9407-3def-b665-6cf578e3230e.roa (raw, json) Hash identifier: duDVdltDcmDlFIVsalpLvVg+lJLI2qVCLUHAKmi687A= Subject key identifier: EB:4F:3D:8E:9B:56:8B:C8:72:F4:B2:80:E4:73:AB:4C:D7:C5:6C:F6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B05E141A359CE933751D9D880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ae21d155-9407-3def-b665-6cf578e3230e.roa Signing time: Sat 30 Aug 2025 01:00:34 +0000 ROA not before: Sat 30 Aug 2025 01:00:34 +0000 ROA not after: Fri 28 Nov 2025 02:00:34 +0000 asID: 8069 IP address blocks: 20.153.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:e1:41:a3:59:ce:93:37:51:d9:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 30 01:00:34 2025 GMT Not After : Nov 28 02:00:34 2025 GMT Subject: CN=d7482306-4d05-4bd9-b29c-07085c460d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0c:27:23:d5:4d:75:97:bc:24:8e:c0:c1:e4: 26:b8:bb:14:a2:fa:98:7f:9f:7a:6e:04:ce:ba:a1: 73:ac:c7:76:72:3a:b9:0d:f6:a0:86:ca:0c:8d:9c: bd:56:55:73:8d:ba:49:9c:75:fa:e2:c9:3f:14:c1: 80:46:65:4c:d9:4c:79:a5:74:25:02:2f:a8:c3:d6: e6:a5:e0:77:f0:f8:eb:35:ab:63:e5:a9:b3:2e:28: 1c:d5:f6:e9:d1:13:43:ab:fb:63:46:b1:ca:76:de: 49:29:55:7a:45:64:62:c8:17:a1:c9:b0:a5:b0:e7: bf:13:39:1f:fb:09:34:7e:45:78:83:9e:4a:15:4b: 19:6b:09:80:ea:b0:43:3f:1e:f4:fc:02:30:7e:54: 8c:56:c8:23:45:8d:d8:d6:07:dc:1b:00:eb:09:ca: 24:b4:c1:93:77:99:5c:8e:62:37:c4:6b:ac:3a:75: d6:8f:97:b1:3a:83:e4:44:1d:31:af:2a:ac:b6:46: 8a:db:e7:8c:09:ee:07:d5:56:da:b7:0a:02:5f:7a: 01:60:4f:e2:1e:cd:e9:f2:88:8f:4f:6a:e4:d5:b5: 78:f4:49:56:d7:ca:82:a4:6c:b0:2c:0f:19:17:10: 45:b5:49:59:37:13:32:7f:14:ba:21:82:b9:ec:b7: 36:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4F:3D:8E:9B:56:8B:C8:72:F4:B2:80:E4:73:AB:4C:D7:C5:6C:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ae21d155-9407-3def-b665-6cf578e3230e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:66:80:f1:6a:cc:5e:92:78:ee:bc:ea:15:5a:5f:9b:a0:a8: 42:bb:16:53:0c:c3:f5:98:9e:e5:64:0e:bc:9b:04:f4:f4:5e: e8:8d:47:c6:28:53:0f:79:bf:a2:e1:2a:95:d3:73:83:7e:78: 95:a7:fb:65:ba:84:77:64:d4:42:76:c5:d3:8b:dc:f0:50:21: de:49:6e:03:4a:be:a8:34:83:52:3d:fd:11:ae:fc:3d:66:1b: e6:12:11:35:b0:f3:29:19:2b:ed:f0:be:46:e3:2d:6c:85:9c: 08:3f:66:92:cf:4e:55:36:1f:3a:48:90:7b:5d:71:47:9a:2f: 24:3d:08:9f:9d:6c:ae:29:fc:11:ac:f8:7b:76:d9:a1:23:49: 83:b2:de:30:60:55:aa:41:cd:03:7b:64:53:c3:67:dd:bd:41: e9:5d:9c:14:34:7c:f1:2f:3c:f6:f8:f7:c1:a5:ce:bc:99:e6: 08:76:74:8f:c1:e5:62:ad:30:66:a5:43:f0:83:d6:09:a1:06: 5a:26:c3:9e:b8:b7:04:0e:d7:6b:0b:a1:b6:3f:41:a1:06:85: c5:f9:c0:70:a8:2a:09:09:2e:0b:15:5d:9e:d3:85:f9:ef:4f: 10:74:11:f2:e0:ec:ed:d7:69:1e:81:45:1c:ab:03:b8:83:9e: 56:1c:39:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsF4UGjWc6TN1HZ2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgzMDAxMDAzNFoXDTI1MTEyODAyMDAzNFowLzEtMCsGA1UEAxMk ZDc0ODIzMDYtNGQwNS00YmQ5LWIyOWMtMDcwODVjNDYwZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgwnI9VNdZe8JI7AweQmuLsUovqYf596bgTO uqFzrMd2cjq5DfaghsoMjZy9VlVzjbpJnHX64sk/FMGARmVM2Ux5pXQlAi+ow9bm peB38PjrNatj5amzLigc1fbp0RNDq/tjRrHKdt5JKVV6RWRiyBehybClsOe/Ezkf +wk0fkV4g55KFUsZawmA6rBDPx70/AIwflSMVsgjRY3Y1gfcGwDrCcoktMGTd5lc jmI3xGusOnXWj5exOoPkRB0xryqstkaK2+eMCe4H1VbatwoCX3oBYE/iHs3p8oiP T2rk1bV49ElW18qCpGywLA8ZFxBFtUlZNxMyfxS6IYK57Lc23QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtPPY6bVovIcvSygORzq0zXxWz2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWUyMWQxNTUtOTQwNy0z ZGVmLWI2NjUtNmNmNTc4ZTMyMzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJnsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRmgPFqzF6SeO686hVaX5ugqEK7FlMMw/WYnuVkDrybBPT0XuiNR8Yo Uw95v6LhKpXTc4N+eJWn+2W6hHdk1EJ2xdOL3PBQId5JbgNKvqg0g1I9/RGu/D1m G+YSETWw8ykZK+3wvkbjLWyFnAg/ZpLPTlU2HzpIkHtdcUeaLyQ9CJ+dbK4p/BGs +Ht22aEjSYOy3jBgVapBzQN7ZFPDZ929QeldnBQ0fPEvPPb498GlzryZ5gh2dI/B 5WKtMGalQ/CD1gmhBlomw564twQO12sLobY/QaEGhcX5wHCoKgkJLgsVXZ7Thfnv TxB0EfLg7O3XaR6BRRyrA7iDnlYcOYc= -----END CERTIFICATE-----Generated at Wed Nov 5 13:50:27 2025 by rpki-client