$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e23c58a0-4ce7-3f33-af00-69385397dadb.roa File: e23c58a0-4ce7-3f33-af00-69385397dadb.roa (raw, json) Hash identifier: 457wzpz8LPxCVCyx067fyUZpy+1NvqaJhUoN1SuRWcY= Subject key identifier: E5:60:6A:CC:E8:4A:DD:6B:53:C6:92:BF:A7:A9:AE:92:68:62:23:E8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AFAB6879BE17CC2102E21A080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e23c58a0-4ce7-3f33-af00-69385397dadb.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.153.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:87:9b:e1:7c:c2:10:2e:21:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=fccdb32e-a4f8-4463-b173-05fce90e1079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8b:54:57:72:95:38:b0:d9:f3:f2:f2:94:b9: ac:a8:7e:12:09:06:e7:ba:f3:42:e4:4d:4b:12:4d: dd:7a:e3:90:c9:12:1f:1d:98:f2:d1:1e:ee:c8:8b: b2:6b:40:5d:e2:48:73:be:d9:35:49:03:19:eb:3f: f1:d0:5f:d0:5e:3e:44:9b:74:27:4e:3f:e9:7b:ed: e7:ff:31:91:78:b5:4a:2a:84:bb:c3:62:25:ff:3a: 62:f2:c5:8a:39:3b:ca:70:c5:24:ee:16:2f:ff:64: 79:c1:44:1e:b7:f9:d3:2c:1e:a3:92:2c:89:b1:b1: 9d:aa:c9:30:db:34:ff:c6:d0:76:fc:0e:f3:65:33: ed:c5:f7:5d:81:0b:0e:9a:96:58:ef:9b:d1:65:0b: 66:86:f1:40:81:dc:07:38:25:01:cc:26:c3:0c:dc: 37:e0:a3:88:08:a2:d9:00:e7:9e:b0:c8:d0:3a:40: ae:ce:4a:f2:fc:70:47:4c:e0:fc:b2:01:12:49:f8: 69:49:2c:5f:48:4e:96:26:44:bf:b1:ad:4c:9a:4f: dd:2c:b0:6b:a9:24:f3:41:d9:2c:98:df:49:c0:9c: 78:0d:45:9a:03:b9:95:75:1a:7b:72:58:da:d1:f6: 80:e4:a7:5e:6e:a1:c7:98:59:78:6d:87:97:52:6b: 2b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:60:6A:CC:E8:4A:DD:6B:53:C6:92:BF:A7:A9:AE:92:68:62:23:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e23c58a0-4ce7-3f33-af00-69385397dadb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:c0:19:d8:c6:c7:de:bf:17:0a:39:43:22:23:2a:5b:3f:ef: 31:b4:d3:c8:fd:84:9c:9b:76:c1:49:a7:da:c4:db:04:81:27: 72:63:aa:90:ee:74:7a:6f:54:ca:f3:f4:8f:c2:98:c0:9c:dd: c6:21:5e:c4:bc:4f:36:77:30:3c:fb:2e:6b:94:3d:13:c0:e3: 1c:35:b5:c0:d8:1d:f2:66:ff:19:73:88:36:1b:5a:55:4a:c6: 50:bc:4b:eb:f3:d3:bc:2e:f4:65:af:0f:d9:9a:ac:01:3f:ca: d9:20:12:f3:12:fc:24:8d:c1:e1:df:29:59:84:53:a3:81:23: 6c:de:71:cb:51:6b:94:87:87:dc:6c:75:5f:9d:60:8b:ca:cd: 85:b0:42:06:8c:3e:f3:fa:0f:43:70:18:aa:2c:5e:41:7f:f0: 96:3d:26:f9:b4:cb:c4:44:f8:2f:e7:c6:15:c1:2b:f2:35:e8: f7:cb:f0:b1:17:0d:0b:c1:ef:2a:7a:13:04:92:f5:0b:50:d0: 9c:80:85:9d:95:9b:d9:27:02:58:5c:2c:ba:68:44:33:97:b4: c4:1f:c9:10:0e:09:3a:c0:b7:11:1a:b5:cc:fb:7c:8f:1d:59: 9a:6a:f9:f5:96:1a:5d:2d:db:81:93:11:68:b5:bb:a4:3a:75: 9a:cb:96:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6toeb4XzCEC4hoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk ZmNjZGIzMmUtYTRmOC00NDYzLWIxNzMtMDVmY2U5MGUxMDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24tUV3KVOLDZ8/LylLmsqH4SCQbnuvNC5E1L Ek3deuOQyRIfHZjy0R7uyIuya0Bd4khzvtk1SQMZ6z/x0F/QXj5Em3QnTj/pe+3n /zGReLVKKoS7w2Il/zpi8sWKOTvKcMUk7hYv/2R5wUQet/nTLB6jkiyJsbGdqskw 2zT/xtB2/A7zZTPtxfddgQsOmpZY75vRZQtmhvFAgdwHOCUBzCbDDNw34KOICKLZ AOeesMjQOkCuzkry/HBHTOD8sgESSfhpSSxfSE6WJkS/sa1Mmk/dLLBrqSTzQdks mN9JwJx4DUWaA7mVdRp7clja0faA5KdebqHHmFl4bYeXUmsrcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVgaszoSt1rU8aSv6eprpJoYiPoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTIzYzU4YTAtNGNlNy0z ZjMzLWFmMDAtNjkzODUzOTdkYWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTAGdjGx96/Fwo5QyIjKls/7zG008j9hJybdsFJp9rE2wSBJ3JjqpDu dHpvVMrz9I/CmMCc3cYhXsS8TzZ3MDz7LmuUPRPA4xw1tcDYHfJm/xlziDYbWlVK xlC8S+vz07wu9GWvD9marAE/ytkgEvMS/CSNweHfKVmEU6OBI2zecctRa5SHh9xs dV+dYIvKzYWwQgaMPvP6D0NwGKosXkF/8JY9Jvm0y8RE+C/nxhXBK/I16PfL8LEX DQvB7yp6EwSS9QtQ0JyAhZ2Vm9knAlhcLLpoRDOXtMQfyRAOCTrAtxEatcz7fI8d WZpq+fWWGl0t24GTEWi1u6Q6dZrLlg0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:38 2025 by rpki-client