$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/08795fcf-e040-301e-b174-61231872c055.roa File: 08795fcf-e040-301e-b174-61231872c055.roa (raw, json) Hash identifier: tKjJBl9+j15aVtUEZ5uKxZ2DIFUcuGdhslBzMgHAfOQ= Subject key identifier: AE:09:98:85:95:E0:28:75:EC:EF:C3:04:2E:9D:A3:95:65:2D:AB:42 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51AF11E62A62F1C4C1DEE0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/08795fcf-e040-301e-b174-61231872c055.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:af:11:e6:2a:62:f1:c4:c1:de:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=c9ebfd2b-44d9-4639-9072-4c0bbd2d56d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5f:15:c2:cc:2a:e6:9e:bd:de:33:3a:78:d0: 00:e3:f9:6b:a1:05:31:e4:05:06:0e:ee:ff:78:dc: 2a:54:14:a4:57:74:6e:3b:6a:8f:40:fc:c3:f4:83: 2d:a0:c6:83:d7:d4:0f:f8:b7:bb:14:fc:54:4f:22: 33:ad:2e:aa:fa:ac:9c:2c:9f:68:37:cb:49:32:84: 97:2b:98:f4:49:43:32:f6:07:6a:ec:a4:e4:28:cc: 2c:30:e0:64:aa:d9:c3:9e:a7:f3:d5:44:ab:8b:5d: 3e:bf:74:65:16:a2:48:7b:ab:46:3f:bf:e9:db:d1: 4e:33:a2:7e:32:e8:36:60:6c:86:7c:f5:bc:01:ad: a3:fa:01:b3:7c:70:76:d2:60:64:45:de:56:aa:31: 49:72:fc:d8:e3:51:ad:ff:18:db:28:77:00:43:4e: 5b:64:79:c0:30:f3:23:40:4a:88:9b:cb:0a:9b:d6: ef:00:3f:68:50:c3:f5:4a:6f:d7:cd:b7:6d:6b:99: 86:c0:a5:4b:51:18:37:76:58:ca:8c:f1:1f:53:87: b4:78:46:9c:e3:69:cb:72:fc:49:c7:bc:f1:b6:45: 84:9f:47:e4:b9:00:c5:ac:eb:86:14:64:ce:e7:c2: 0a:60:ec:2b:4e:f9:06:ed:bc:4d:ae:ba:b0:44:f0: 43:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:09:98:85:95:E0:28:75:EC:EF:C3:04:2E:9D:A3:95:65:2D:AB:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/08795fcf-e040-301e-b174-61231872c055.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:f2:f2:a1:fc:7a:ae:a3:d4:2b:d4:96:ee:96:8b:5c:01:f3: 16:ce:74:76:52:d1:e7:ac:cc:e2:06:c3:ea:0c:e7:c7:03:b3: 4f:a1:7e:f2:cc:e8:24:33:51:a0:fb:95:ba:ab:4f:63:7e:da: ba:e0:03:e8:bc:70:23:07:22:57:64:16:8c:4c:8f:1b:ce:2f: e4:94:9f:c1:31:d1:84:1e:bb:93:7a:58:15:d0:32:97:48:43: e7:8f:b2:77:62:c4:50:95:d9:fa:97:45:07:a5:e8:bb:0b:67: 36:8e:ab:38:72:4c:46:27:34:fb:45:3b:2b:8e:2e:1b:f7:59: 6d:67:43:bd:e6:56:39:61:f6:02:48:14:60:39:ae:36:62:62: ed:df:43:01:6f:9c:0b:f4:2e:99:47:3e:6a:5c:9b:22:de:e5: 8a:98:00:75:43:f6:ff:59:c6:0f:53:0f:54:5b:77:f6:30:53: 21:f7:0d:0f:1d:49:ec:bc:c9:9c:de:66:28:91:2a:25:0d:d1: 27:ed:df:d2:d8:42:0f:ce:17:f8:f4:10:37:18:02:8a:db:96: c8:c3:a8:0e:cf:ce:93:75:9a:c2:69:77:f3:1b:ca:b2:c8:34: 8e:28:36:90:b4:a2:8b:10:bf:64:bd:99:c8:8a:70:b5:f9:79: 6d:9b:85:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8Ua8R5ipi8cTB3uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk YzllYmZkMmItNDRkOS00NjM5LTkwNzItNGMwYmJkMmQ1NmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF8Vwswq5p693jM6eNAA4/lroQUx5AUGDu7/ eNwqVBSkV3RuO2qPQPzD9IMtoMaD19QP+Le7FPxUTyIzrS6q+qycLJ9oN8tJMoSX K5j0SUMy9gdq7KTkKMwsMOBkqtnDnqfz1USri10+v3RlFqJIe6tGP7/p29FOM6J+ Mug2YGyGfPW8Aa2j+gGzfHB20mBkRd5WqjFJcvzY41Gt/xjbKHcAQ05bZHnAMPMj QEqIm8sKm9bvAD9oUMP1Sm/Xzbdta5mGwKVLURg3dljKjPEfU4e0eEac42nLcvxJ x7zxtkWEn0fkuQDFrOuGFGTO58IKYOwrTvkG7bxNrrqwRPBDzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4JmIWV4Ch17O/DBC6do5VlLatCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDg3OTVmY2YtZTA0MC0z MDFlLWIxNzQtNjEyMzE4NzJjMDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjy8qH8eq6j1CvUlu6Wi1wB8xbOdHZS0eeszOIGw+oM58cDs0+hfvLM 6CQzUaD7lbqrT2N+2rrgA+i8cCMHIldkFoxMjxvOL+SUn8Ex0YQeu5N6WBXQMpdI Q+ePsndixFCV2fqXRQel6LsLZzaOqzhyTEYnNPtFOyuOLhv3WW1nQ73mVjlh9gJI FGA5rjZiYu3fQwFvnAv0LplHPmpcmyLe5YqYAHVD9v9Zxg9TD1Rbd/YwUyH3DQ8d Sey8yZzeZiiRKiUN0Sft39LYQg/OF/j0EDcYAorblsjDqA7PzpN1msJpd/MbyrLI NI4oNpC0oosQv2S9mciKcLX5eW2bhS4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:34:56 2025 by rpki-client