$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54e90b43-8f5f-3692-a164-491370e9f425.roa File: 54e90b43-8f5f-3692-a164-491370e9f425.roa (raw, json) Hash identifier: r2smt91rkTengAJknvhTYLMyh8flQ0YN+ZybH4kleoM= Subject key identifier: 5D:64:0E:B0:3F:E9:6B:E0:B9:DE:D0:3E:EE:D4:C7:2B:5C:7F:84:C6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52E9B33A0D141257E9EFB380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54e90b43-8f5f-3692-a164-491370e9f425.roa Signing time: Fri 26 Sep 2025 15:14:52 +0000 ROA not before: Fri 26 Sep 2025 15:14:52 +0000 ROA not after: Thu 25 Dec 2025 16:14:52 +0000 asID: 8069 IP address blocks: 20.153.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:e9:b3:3a:0d:14:12:57:e9:ef:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 15:14:52 2025 GMT Not After : Dec 25 16:14:52 2025 GMT Subject: CN=3af4a20f-e74a-4c29-ab80-a5239b8f7a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ed:ae:c7:99:f3:b4:55:eb:40:7d:7a:3a:3e: ce:f0:57:7f:23:6a:03:82:24:dd:81:54:d4:47:6f: ba:93:e3:8a:38:4d:b3:b8:5c:ec:16:ee:e8:13:00: 6a:98:af:ce:a0:ce:1b:51:20:1b:3c:b0:2e:9b:82: ce:0e:e8:2a:e9:b9:ef:47:e1:cd:77:eb:6a:d8:fb: ea:d3:ec:e7:0d:fb:f8:b0:40:be:26:94:6a:f1:10: bc:87:d8:ed:e3:1c:d6:dc:2f:3b:ea:9c:69:d8:37: a6:ee:6f:42:81:22:eb:34:96:f8:59:31:43:25:54: 88:4b:1c:9d:23:21:80:85:d2:49:c1:b8:6c:6a:b6: 82:f2:48:39:ec:1c:22:55:17:1e:3a:06:37:35:dd: e3:85:f6:5f:42:7e:a4:19:6c:2f:85:98:c0:ad:0c: 27:03:e9:d3:c0:b9:35:89:5e:55:84:81:19:21:64: de:c5:08:4f:2a:56:98:84:58:79:1a:6e:96:8e:6e: a2:e0:ef:de:c4:bc:0f:2c:57:38:f5:c4:16:10:56: be:5e:d4:2b:25:c6:bb:8d:8b:c0:f9:6d:f7:cb:6c: b7:2c:f3:2b:4e:8d:07:1a:ee:39:f5:7d:1e:5d:69: ed:8a:09:4e:cf:3c:28:6f:fb:87:40:1e:b7:8a:a7: e9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:64:0E:B0:3F:E9:6B:E0:B9:DE:D0:3E:EE:D4:C7:2B:5C:7F:84:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/54e90b43-8f5f-3692-a164-491370e9f425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:05:37:b6:ae:67:9f:53:f8:5c:10:89:9f:da:ee:1d:69:fe: 91:66:a6:fc:cc:cb:bc:17:4a:44:14:e7:e1:2b:72:9f:bc:a7: 03:5b:64:2b:83:64:8b:71:b5:94:ad:86:32:65:b6:e5:68:12: 30:b8:9b:3a:28:0c:db:b4:5c:1c:ca:72:92:5e:39:86:b7:24: 64:3e:17:5e:4b:5d:c1:9d:9a:d6:82:9a:6b:9e:85:87:43:b6: 72:6b:0a:35:f0:37:46:27:f8:40:9b:0e:2e:80:74:0e:d2:18: f2:39:cb:a1:61:ad:df:7b:57:c4:8f:7c:2b:bb:23:fe:15:95: 7b:85:ec:1b:52:68:87:22:6d:f2:1c:8b:7c:73:4a:f4:b2:f3: c9:d0:d8:94:0b:37:16:12:38:59:2b:03:71:5e:9d:b0:a0:bf: d3:4d:9d:ed:28:3a:5b:0c:11:b4:f7:bf:fa:26:41:d1:03:1e: e5:bc:b1:2f:73:50:c2:9c:cb:ba:3d:96:31:08:ec:d4:26:fc: 46:08:0e:5d:f0:53:ee:25:09:7b:34:48:e5:b6:7e:f8:cf:fc: 54:77:2d:1b:3f:3c:88:d6:f1:0f:a9:49:13:88:b3:25:b6:dd: b6:66:f1:a7:61:ec:36:36:04:3d:6f:fd:ea:e4:d2:68:63:bd: 65:34:33:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtS6bM6DRQSV+nvs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjE1MTQ1MloXDTI1MTIyNTE2MTQ1MlowLzEtMCsGA1UEAxMk M2FmNGEyMGYtZTc0YS00YzI5LWFiODAtYTUyMzliOGY3YTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu2ux5nztFXrQH16Oj7O8Fd/I2oDgiTdgVTU R2+6k+OKOE2zuFzsFu7oEwBqmK/OoM4bUSAbPLAum4LODugq6bnvR+HNd+tq2Pvq 0+znDfv4sEC+JpRq8RC8h9jt4xzW3C876pxp2Dem7m9CgSLrNJb4WTFDJVSISxyd IyGAhdJJwbhsaraC8kg57BwiVRceOgY3Nd3jhfZfQn6kGWwvhZjArQwnA+nTwLk1 iV5VhIEZIWTexQhPKlaYhFh5Gm6Wjm6i4O/exLwPLFc49cQWEFa+XtQrJca7jYvA +W33y2y3LPMrTo0HGu459X0eXWntiglOzzwob/uHQB63iqfpGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1kDrA/6Wvgud7QPu7Uxytcf4TGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTRlOTBiNDMtOGY1Zi0z NjkyLWExNjQtNDkxMzcwZTlmNDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQFN7auZ59T+FwQiZ/a7h1p/pFmpvzMy7wXSkQU5+Ercp+8pwNbZCuD ZItxtZSthjJltuVoEjC4mzooDNu0XBzKcpJeOYa3JGQ+F15LXcGdmtaCmmuehYdD tnJrCjXwN0Yn+ECbDi6AdA7SGPI5y6Fhrd97V8SPfCu7I/4VlXuF7BtSaIcibfIc i3xzSvSy88nQ2JQLNxYSOFkrA3FenbCgv9NNne0oOlsMEbT3v/omQdEDHuW8sS9z UMKcy7o9ljEI7NQm/EYIDl3wU+4lCXs0SOW2fvjP/FR3LRs/PIjW8Q+pSROIsyW2 3bZm8adh7DY2BD1v/erk0mhjvWU0MzM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:27:03 2025 by rpki-client