$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa File: 49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa (raw, json) Hash identifier: xPas0gHAbCTVhoj+P3Hxn5W9W+aduXg9MM/vNyBbGCk= Subject key identifier: EA:12:5A:C6:D3:08:CD:1B:2B:8A:28:A4:82:07:5B:B8:08:BA:07:C1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B153C275956F68DD96D804400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:27:59:56:f6:8d:d9:6d:80:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=aee7b7f3-80df-4252-a2c8-4ee55d6830c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e1:9a:ee:0e:77:a2:07:a4:5c:4f:93:ba:65: 9a:03:9b:0c:79:ef:0c:27:3d:c4:96:36:ef:8d:55: 7f:35:94:05:69:1b:3c:f5:fb:49:49:9f:b1:21:57: 2b:b8:e4:4b:01:df:9c:f7:58:8f:98:20:32:65:47: bb:8d:78:83:78:83:cb:06:61:b6:a8:43:ad:19:1b: b7:6e:a5:2a:5f:a4:9e:c8:52:71:92:67:f4:46:24: 9a:62:67:32:9f:57:34:8c:db:56:d6:cd:5a:f7:56: 2f:e9:cb:00:3e:48:c7:3a:ab:43:7d:37:38:3c:86: 38:b2:dc:db:4f:f1:cb:2e:9d:0d:85:78:ee:2b:88: 70:15:8a:bd:23:fc:cc:3a:e9:57:fd:3d:fe:2c:23: e4:9c:a8:f0:d2:f2:cf:93:27:22:ad:97:de:70:25: 3e:82:79:20:f7:55:2e:ea:ca:5a:2e:df:37:1f:69: 8c:40:93:87:bb:dc:09:ff:00:55:c6:62:24:3e:32: e2:d7:9f:62:e1:26:8f:05:73:10:1c:84:68:cd:18: 2e:7d:1e:7f:66:9b:f7:24:8d:a3:72:b4:20:22:7e: 31:86:f2:a8:1d:1a:0c:67:db:26:f5:bc:1f:3b:8f: 6d:26:2a:e7:21:e4:35:af:ef:a9:50:11:01:25:01: 8d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:12:5A:C6:D3:08:CD:1B:2B:8A:28:A4:82:07:5B:B8:08:BA:07:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:9c:8e:4b:d8:7d:bf:49:11:a2:11:db:7b:c5:a1:6b:cb:32: 32:64:7c:95:ab:ce:df:96:96:b5:a5:e1:38:10:f4:65:a4:8a: 9e:5b:60:c9:e5:e9:42:32:21:60:b7:f9:ce:37:52:4f:43:cd: ce:8d:c9:23:9d:ae:78:d0:88:74:67:4c:48:84:b6:d5:67:bf: 9c:af:d6:b9:e6:15:57:55:45:5f:66:13:99:92:cd:24:ad:40: 3d:79:62:4b:14:b1:26:88:ab:fb:f7:d7:9d:a7:28:9d:02:c9: e4:c1:60:44:f7:24:8b:c4:f2:12:49:3f:12:d3:2d:36:49:0c: 39:7d:e7:89:2e:70:ee:30:e7:4c:0e:11:64:37:e3:bc:34:c7: 8e:46:11:ee:9d:10:b3:9a:be:4a:ba:cd:9a:51:e7:3f:cf:83: fc:3c:3c:6c:e9:b0:68:84:04:49:37:0a:99:48:66:82:cb:47: ad:68:cf:1e:96:98:20:c2:94:f5:46:7a:77:d5:57:86:c2:c7: 95:62:55:09:66:be:02:b7:7f:67:89:c5:77:c7:ca:fe:e1:15: bc:30:bd:ce:5e:c3:b6:91:8f:f1:2b:31:91:a2:f7:31:3a:5c: 7f:cd:e3:d4:aa:bc:a1:6d:3f:d1:2c:c0:a4:46:78:35:d1:42: 79:87:80:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCdZVvaN2W2ARAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk YWVlN2I3ZjMtODBkZi00MjUyLWEyYzgtNGVlNTVkNjgzMGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeGa7g53ogekXE+TumWaA5sMee8MJz3Eljbv jVV/NZQFaRs89ftJSZ+xIVcruORLAd+c91iPmCAyZUe7jXiDeIPLBmG2qEOtGRu3 bqUqX6SeyFJxkmf0RiSaYmcyn1c0jNtW1s1a91Yv6csAPkjHOqtDfTc4PIY4stzb T/HLLp0NhXjuK4hwFYq9I/zMOulX/T3+LCPknKjw0vLPkycirZfecCU+gnkg91Uu 6spaLt83H2mMQJOHu9wJ/wBVxmIkPjLi159i4SaPBXMQHIRozRgufR5/Zpv3JI2j crQgIn4xhvKoHRoMZ9sm9bwfO49tJirnIeQ1r++pUBEBJQGNAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoSWsbTCM0bK4oopIIHW7gIugfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDllZjJlMmMtNzdlZi0z N2M5LWIzMjctMjRlOGVlMjBlZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOcjkvYfb9JEaIR23vFoWvLMjJkfJWrzt+WlrWl4TgQ9GWkip5bYMnl 6UIyIWC3+c43Uk9Dzc6NySOdrnjQiHRnTEiEttVnv5yv1rnmFVdVRV9mE5mSzSSt QD15YksUsSaIq/v3152nKJ0CyeTBYET3JIvE8hJJPxLTLTZJDDl954kucO4w50wO EWQ347w0x45GEe6dELOavkq6zZpR5z/Pg/w8PGzpsGiEBEk3CplIZoLLR61ozx6W mCDClPVGenfVV4bCx5ViVQlmvgK3f2eJxXfHyv7hFbwwvc5ew7aRj/ErMZGi9zE6 XH/N49SqvKFtP9EswKRGeDXRQnmHgGs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:01:07 2025 by rpki-client