$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0de336de-11a9-3a69-b501-10b69cf8f881.roa File: 0de336de-11a9-3a69-b501-10b69cf8f881.roa (raw, json) Hash identifier: jmnW1aQOffSINPH6HqRBKRm1zBSUgQ5Pwc1vnh5L8gc= Subject key identifier: A3:66:40:85:7C:76:E7:A2:07:5B:EE:1C:62:05:B5:C2:3D:29:6E:FA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B05E141787BC2649AE6DE78B0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0de336de-11a9-3a69-b501-10b69cf8f881.roa Signing time: Sat 30 Aug 2025 01:00:34 +0000 ROA not before: Sat 30 Aug 2025 01:00:34 +0000 ROA not after: Fri 28 Nov 2025 02:00:34 +0000 asID: 8069 IP address blocks: 20.153.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:e1:41:78:7b:c2:64:9a:e6:de:78:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 30 01:00:34 2025 GMT Not After : Nov 28 02:00:34 2025 GMT Subject: CN=bc9e2da1-4137-437d-88cc-0bf3a0131452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b1:64:a8:28:6f:32:a0:f3:8a:ba:04:7d:45: d8:bc:20:48:55:c3:32:6a:0d:2d:c8:81:f9:ec:57: 15:fa:6c:77:ac:2f:f0:94:73:68:57:c2:31:22:27: 0a:d6:46:28:02:c4:21:44:48:03:8d:be:64:79:75: 80:e9:6f:d7:67:78:a4:aa:d2:09:8f:b0:47:53:a4: 72:02:68:e4:aa:05:53:67:46:7b:7c:77:31:c3:ae: 86:ff:8b:dd:77:12:8b:83:8f:39:d3:8a:00:7d:26: d0:e8:1e:3f:e1:fe:a8:93:01:02:21:39:b0:db:81: 23:98:57:11:ea:d6:1f:1c:31:1d:86:b1:d6:ff:c6: 66:84:e5:6b:6d:55:0d:11:62:95:4d:28:a7:0b:b1: 25:cb:3b:86:e0:91:9d:10:d2:23:0b:a0:af:b2:af: 8a:b9:54:61:87:2c:d2:f0:7a:9d:eb:cd:f4:0d:d1: 14:d0:82:83:b6:b6:55:df:de:13:c9:96:0e:f0:f5: 8b:2a:fb:d6:6b:59:94:78:a2:12:4e:51:15:80:50: ec:64:63:99:61:ad:51:b1:d4:b0:69:42:2e:2f:e3: 0b:c6:e4:04:84:68:82:1c:21:e9:5a:2f:b2:c4:dc: b4:1e:e9:2a:52:b8:3d:c9:a3:de:15:ce:91:82:04: 9d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:66:40:85:7C:76:E7:A2:07:5B:EE:1C:62:05:B5:C2:3D:29:6E:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0de336de-11a9-3a69-b501-10b69cf8f881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f2:29:4e:7b:17:17:fe:08:c8:fd:95:8f:0a:eb:ad:26:23: 46:37:72:bd:be:6c:38:04:14:9f:4f:50:3e:3c:7a:9a:d4:57: fc:df:7a:ea:0b:bd:83:61:6b:a8:3b:76:9c:9a:25:2a:2b:30: 94:cd:cb:dc:31:b2:e5:67:07:81:6f:9c:4e:b0:12:06:d0:90: cd:2f:fe:2e:4d:e7:2c:46:19:ed:29:f8:23:44:eb:ca:73:50: a3:8d:1c:56:09:9e:8b:90:2d:2f:ab:fa:ed:ce:16:dc:95:fb: ba:12:aa:da:2f:1b:0f:0c:81:62:42:a9:24:3d:76:41:b8:16: 39:6a:0e:98:a4:aa:c4:b6:ac:d1:47:39:89:51:9e:2f:60:80: 47:1c:11:ff:28:6e:52:45:9b:a3:8a:1a:c7:d5:b4:b4:00:c1: 38:06:2c:6d:be:3e:f6:be:62:a6:e6:8b:d1:93:d5:c2:15:07: 91:d1:44:b4:83:66:67:97:f9:a0:68:0a:ac:ca:84:bd:c0:3c: 32:31:a3:29:32:a8:68:02:ff:8a:04:a0:29:77:d1:39:89:d9: c2:c5:48:ef:9f:3f:a8:3c:e8:04:a4:59:36:67:58:7d:99:43: 64:62:53:d0:53:a0:2b:c1:e6:8a:b6:8a:b3:5a:2a:82:d0:5b: 53:fa:ba:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsF4UF4e8JkmubeeLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgzMDAxMDAzNFoXDTI1MTEyODAyMDAzNFowLzEtMCsGA1UEAxMk YmM5ZTJkYTEtNDEzNy00MzdkLTg4Y2MtMGJmM2EwMTMxNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rFkqChvMqDziroEfUXYvCBIVcMyag0tyIH5 7FcV+mx3rC/wlHNoV8IxIicK1kYoAsQhREgDjb5keXWA6W/XZ3ikqtIJj7BHU6Ry AmjkqgVTZ0Z7fHcxw66G/4vddxKLg48504oAfSbQ6B4/4f6okwECITmw24EjmFcR 6tYfHDEdhrHW/8ZmhOVrbVUNEWKVTSinC7ElyzuG4JGdENIjC6Cvsq+KuVRhhyzS 8Hqd6830DdEU0IKDtrZV394TyZYO8PWLKvvWa1mUeKISTlEVgFDsZGOZYa1RsdSw aUIuL+MLxuQEhGiCHCHpWi+yxNy0HukqUrg9yaPeFc6RggSdSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNmQIV8dueiB1vuHGIFtcI9KW76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMGRlMzM2ZGUtMTFhOS0z YTY5LWI1MDEtMTBiNjljZjhmODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJnpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7yKU57Fxf+CMj9lY8K660mI0Y3cr2+bDgEFJ9PUD48eprUV/zfeuoL vYNha6g7dpyaJSorMJTNy9wxsuVnB4FvnE6wEgbQkM0v/i5N5yxGGe0p+CNE68pz UKONHFYJnouQLS+r+u3OFtyV+7oSqtovGw8MgWJCqSQ9dkG4FjlqDpikqsS2rNFH OYlRni9ggEccEf8oblJFm6OKGsfVtLQAwTgGLG2+Pva+Yqbmi9GT1cIVB5HRRLSD ZmeX+aBoCqzKhL3APDIxoykyqGgC/4oEoCl30TmJ2cLFSO+fP6g86ASkWTZnWH2Z Q2RiU9BToCvB5oq2irNaKoLQW1P6urw= -----END CERTIFICATE-----Generated at Mon Oct 20 20:16:43 2025 by rpki-client