$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/03035c0d-43ad-3251-9eae-f21c2270e539.roa File: 03035c0d-43ad-3251-9eae-f21c2270e539.roa (raw, json) Hash identifier: /nryWM3+p/Dd1WJq12Yj6xCocu+6/b3O98XF0f4rhwI= Subject key identifier: 8F:42:39:CD:35:0E:A8:DD:0F:30:B4:56:60:E0:FD:4D:69:4B:CB:5B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AC2E12148FFB2181301D14940 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/03035c0d-43ad-3251-9eae-f21c2270e539.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.153.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:21:48:ff:b2:18:13:01:d1:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=9d23c42a-ce4a-4219-a33e-91768b556069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d8:3a:0f:e2:d6:8e:df:2c:ca:b7:d6:4f:4f: fa:f9:e5:18:fa:07:3e:71:64:4e:63:e9:b2:0b:cd: 7e:35:79:c8:f5:e0:1c:46:8f:b8:f7:ec:12:ab:29: 24:2a:55:3e:b0:cd:76:d0:c1:d0:5b:22:90:82:5b: f0:d7:ad:b3:8c:03:b4:be:e6:c7:d4:04:ff:4f:d0: 3b:f4:fd:60:fd:b9:f8:70:a0:55:5b:05:e4:1c:37: aa:ed:15:4a:b9:51:54:dd:59:09:64:86:c3:19:aa: 08:b8:2c:f3:3d:f9:b9:e0:a9:0b:af:3f:a8:10:8d: e1:35:c5:6e:a6:be:0c:32:b0:2e:42:ef:e4:24:66: cd:ca:dd:72:78:5e:b7:7f:bd:06:28:f6:df:a0:8a: 2a:b1:da:0c:e7:4b:07:aa:55:5a:dc:30:a0:c6:6b: e0:84:a2:3c:7b:f2:9d:9c:b8:18:53:bc:b2:62:e4: 9a:70:61:46:70:d2:ac:01:8c:a6:a4:05:20:91:39: 4b:18:b8:16:70:1e:f8:34:05:01:35:5d:0c:36:9e: 79:ca:d4:41:3e:43:55:a2:c7:57:a6:c0:5a:03:7b: 82:ec:d5:9c:fc:87:13:88:ff:18:69:33:16:9c:00: 89:a2:37:8e:bd:2a:c7:9d:4d:c8:38:3b:d6:94:e6: a6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:42:39:CD:35:0E:A8:DD:0F:30:B4:56:60:E0:FD:4D:69:4B:CB:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/03035c0d-43ad-3251-9eae-f21c2270e539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:59:bf:41:99:d0:fc:b4:7e:26:9d:d0:0b:48:a2:8f:a2:db: 65:62:ef:62:3c:68:e9:8b:4b:f8:82:a1:67:10:4c:ee:61:9e: 61:de:b6:14:cc:3d:f6:7c:e2:e8:23:4c:f1:6f:3d:36:04:6a: 5f:b1:7a:84:2c:d6:37:84:38:3b:46:11:18:f6:dc:20:65:36: 91:08:5e:f0:5e:1d:b5:ac:a8:b5:a4:3c:39:50:00:c9:1c:d8: 54:ef:0a:3d:ff:cd:81:0f:7d:1b:05:69:7b:8f:75:9e:fe:54: 4f:49:1f:cb:c9:af:a2:54:c4:09:c2:77:c7:d9:4a:45:1f:e1: bf:6e:28:8c:87:72:e0:99:ff:77:c4:85:10:b0:00:80:a5:c7: 6e:e4:62:fe:8c:0c:a0:e2:9f:6d:87:57:61:b9:ee:8f:f8:b7: ac:d5:c3:d8:c5:ed:79:52:ae:75:7b:79:e7:75:52:40:83:09: 38:03:e9:cc:e6:75:dd:19:11:a1:d2:20:b3:d0:26:36:61:da: 9b:da:f4:92:61:d2:8b:86:88:17:8f:17:47:4e:99:3b:56:58: fe:00:69:d0:17:2c:23:77:9c:52:ca:a4:b7:ab:74:86:39:44: b8:1b:1f:4c:a8:af:79:78:ff:a7:b1:07:85:e2:b0:9a:ea:c8: 3f:e1:0b:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4SFI/7IYEwHRSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OWQyM2M0MmEtY2U0YS00MjE5LWEzM2UtOTE3NjhiNTU2MDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9g6D+LWjt8syrfWT0/6+eUY+gc+cWROY+my C81+NXnI9eAcRo+49+wSqykkKlU+sM120MHQWyKQglvw162zjAO0vubH1AT/T9A7 9P1g/bn4cKBVWwXkHDeq7RVKuVFU3VkJZIbDGaoIuCzzPfm54KkLrz+oEI3hNcVu pr4MMrAuQu/kJGbNyt1yeF63f70GKPbfoIoqsdoM50sHqlVa3DCgxmvghKI8e/Kd nLgYU7yyYuSacGFGcNKsAYympAUgkTlLGLgWcB74NAUBNV0MNp55ytRBPkNVosdX psBaA3uC7NWc/IcTiP8YaTMWnACJojeOvSrHnU3IODvWlOamzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9COc01DqjdDzC0VmDg/U1pS8tbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDMwMzVjMGQtNDNhZC0z MjUxLTllYWUtZjIxYzIyNzBlNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJm/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5Zv0GZ0Py0fiad0AtIoo+i22Vi72I8aOmLS/iCoWcQTO5hnmHethTM PfZ84ugjTPFvPTYEal+xeoQs1jeEODtGERj23CBlNpEIXvBeHbWsqLWkPDlQAMkc 2FTvCj3/zYEPfRsFaXuPdZ7+VE9JH8vJr6JUxAnCd8fZSkUf4b9uKIyHcuCZ/3fE hRCwAIClx27kYv6MDKDin22HV2G57o/4t6zVw9jF7XlSrnV7eed1UkCDCTgD6czm dd0ZEaHSILPQJjZh2pva9JJh0ouGiBePF0dOmTtWWP4AadAXLCN3nFLKpLerdIY5 RLgbH0yor3l4/6exB4XisJrqyD/hC0g= -----END CERTIFICATE-----Generated at Sun Aug 24 06:58:17 2025 by rpki-client