$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa File: deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa (raw, json) Hash identifier: qdY5RSUmTzQMYQkAZLrbmLRCj+TETSqkRdmI6jkO2Ps= Subject key identifier: DE:7A:FD:1B:A9:EE:B6:76:4B:9A:A4:D5:08:00:9C:BF:87:29:7F:65 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF68691DF5BF462A289BBAB40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.153.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:91:df:5b:f4:62:a2:89:bb:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=1bda9e9e-8519-4bce-a842-c66f17e32e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6f:81:53:e7:91:0d:6c:3e:ae:69:31:ac:e2: 4c:79:14:94:cc:f4:d2:7d:ce:33:dd:7b:88:44:2b: f5:27:f8:83:41:b5:38:db:00:24:6e:bd:61:ed:bc: 93:54:a5:11:b4:88:c6:5b:1c:20:e5:70:1c:fe:e4: 0c:2c:68:8c:13:8d:75:b8:2b:c2:1e:10:7d:1d:d9: 28:03:6f:96:53:1a:87:de:b7:dd:7e:27:f1:78:17: ad:55:de:44:41:e4:18:b1:86:2c:ee:16:b4:f3:03: 17:00:ae:a1:3f:c2:78:fe:41:9c:81:c8:86:3b:11: a1:2a:7a:5b:c3:66:b1:f2:fe:b0:2e:74:7a:bf:9c: 65:cd:e9:35:5b:12:88:2a:38:5d:62:5c:78:91:c4: 3c:ec:81:bb:f3:f4:e1:fc:ac:d8:b8:fa:06:63:a3: aa:31:87:ad:ca:02:34:de:9a:23:5c:b3:23:64:f1: 49:6a:ac:08:2a:4a:74:76:cd:9a:da:7d:9e:41:1a: 6a:7b:be:2a:29:07:5e:e6:2d:ad:08:8a:ac:21:7c: 69:90:54:2b:5c:0c:05:35:79:ca:4c:73:f1:62:53: 1c:7f:2c:25:9e:17:0c:fe:b1:0b:64:9b:29:fa:5f: d8:f9:3d:36:cb:51:f9:57:b5:6b:34:a9:97:fc:38: 96:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7A:FD:1B:A9:EE:B6:76:4B:9A:A4:D5:08:00:9C:BF:87:29:7F:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f8:e3:84:8a:93:91:74:ea:5f:da:70:f0:f6:db:05:e6:04: c3:f9:b8:bb:b4:57:6b:64:d9:64:be:78:97:de:79:97:66:79: 7e:dc:3b:9c:d4:e5:da:b2:53:ae:66:59:bc:58:2c:13:72:1b: f9:fe:f7:57:f9:05:69:25:61:db:d6:52:f2:92:15:0c:8e:45: ce:31:69:08:8f:55:f9:9e:7c:e9:0c:33:45:07:c5:60:e1:97: ea:98:93:83:84:5c:d5:81:33:4a:36:a8:f5:0b:1a:75:58:84: c9:7a:32:22:17:47:b2:c2:3b:9c:76:7d:d3:26:94:56:ce:50: 5e:38:47:e3:4d:72:ed:12:e2:47:bf:48:6c:53:72:77:15:72: 67:28:7a:9f:7d:55:80:09:d5:6f:62:9a:22:a3:41:06:1b:9f: 29:7e:82:32:1c:b0:00:88:a1:3d:23:f7:7a:19:21:c3:fc:c0: 1a:aa:27:87:54:06:43:6c:8f:f6:1c:9a:ac:b5:0e:6f:4d:da: 30:98:71:dc:24:fd:a7:eb:21:71:4a:f1:de:fc:cd:65:4c:66: 33:2e:dd:04:ce:c2:d0:aa:5c:04:9a:64:04:1f:bd:2b:f9:e2: 9b:3b:c5:38:f5:d6:fb:a3:89:9c:26:e8:05:fd:8c:c1:b0:59: 54:b4:7c:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpHfW/Rioom7q0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk MWJkYTllOWUtODUxOS00YmNlLWE4NDItYzY2ZjE3ZTMyZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW+BU+eRDWw+rmkxrOJMeRSUzPTSfc4z3XuI RCv1J/iDQbU42wAkbr1h7byTVKURtIjGWxwg5XAc/uQMLGiME411uCvCHhB9Hdko A2+WUxqH3rfdfifxeBetVd5EQeQYsYYs7ha08wMXAK6hP8J4/kGcgciGOxGhKnpb w2ax8v6wLnR6v5xlzek1WxKIKjhdYlx4kcQ87IG78/Th/KzYuPoGY6OqMYetygI0 3pojXLMjZPFJaqwIKkp0ds2a2n2eQRpqe74qKQde5i2tCIqsIXxpkFQrXAwFNXnK THPxYlMcfywlnhcM/rELZJsp+l/Y+T02y1H5V7VrNKmX/DiWpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN56/Rup7rZ2S5qk1QgAnL+HKX9lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGVlYWViNDYtMWVlMi0z M2ExLWIyZDUtNzNjOTMyN2ZkMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr444SKk5F06l/acPD22wXmBMP5uLu0V2tk2WS+eJfeeZdmeX7cO5zU 5dqyU65mWbxYLBNyG/n+91f5BWklYdvWUvKSFQyORc4xaQiPVfmefOkMM0UHxWDh l+qYk4OEXNWBM0o2qPULGnVYhMl6MiIXR7LCO5x2fdMmlFbOUF44R+NNcu0S4ke/ SGxTcncVcmcoep99VYAJ1W9imiKjQQYbnyl+gjIcsACIoT0j93oZIcP8wBqqJ4dU BkNsj/Ycmqy1Dm9N2jCYcdwk/afrIXFK8d78zWVMZjMu3QTOwtCqXASaZAQfvSv5 4ps7xTj11vujiZwm6AX9jMGwWVS0fGI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:43 2025 by rpki-client