$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c7680dd-8697-3c50-8181-945c51777f91.roa File: 6c7680dd-8697-3c50-8181-945c51777f91.roa (raw, json) Hash identifier: DzUZp4iBBuIwWMHeWo82gNW5RWwizcjqjGLIT7Lme/E= Subject key identifier: 37:99:BC:40:8F:EA:5C:30:24:BA:5A:67:65:BF:EC:9D:77:13:05:5C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51AEEF3CF9103D48139580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c7680dd-8697-3c50-8181-945c51777f91.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:ae:ef:3c:f9:10:3d:48:13:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=eafb229e-cfa0-4fbb-8de9-6da4eeaed781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bc:82:2e:ca:dd:2e:e9:e1:be:6f:a2:01:d7: b0:21:92:a8:a0:9d:d4:48:31:b9:89:28:9d:6a:62: c5:3e:ea:15:f3:19:78:fd:f7:da:b9:82:6c:1e:47: 5b:e9:86:6f:23:cd:f1:64:40:75:8f:71:4f:98:01: fb:71:ca:1e:8e:07:b7:92:cd:73:38:48:f8:40:22: fe:74:49:7c:19:f7:79:0e:2e:7c:51:89:d8:6e:72: 2e:16:6a:a5:2d:ec:37:42:a7:97:cf:89:44:e5:5b: 4e:77:9b:5a:fb:e2:89:39:ff:2b:e2:e7:d7:43:5c: fc:85:9c:a2:10:b0:c9:9a:18:d2:70:54:b0:dd:c8: 3f:bf:78:60:c8:42:90:3d:ca:ab:af:62:f4:b8:4f: 59:bd:2a:42:69:d0:fc:7a:cd:8a:d4:2c:4a:11:c5: 3b:f5:30:af:41:ce:37:fc:5a:d3:c8:1b:c6:45:0d: 31:2d:19:ee:8b:39:7a:8f:60:0e:1e:96:da:d9:7a: ee:bb:da:f4:04:c6:2c:62:65:f6:db:fa:42:8d:1d: 4c:3f:57:cb:f7:e5:01:40:96:59:2c:0f:ac:ad:e3: 16:af:ae:48:e7:ee:b2:a5:cc:18:59:bf:68:94:7c: 0c:ee:31:08:ef:c1:b1:4a:fd:f9:e0:09:c1:84:d2: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:99:BC:40:8F:EA:5C:30:24:BA:5A:67:65:BF:EC:9D:77:13:05:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c7680dd-8697-3c50-8181-945c51777f91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ce:81:2f:c2:c7:63:8e:6b:3c:72:34:00:da:22:38:85:b6: a2:70:3c:77:35:2f:ae:5d:56:02:81:4a:c7:39:ae:0b:62:db: 66:4f:8f:9f:7d:dd:24:22:a3:01:71:29:57:5f:fb:64:08:ee: 93:4f:23:e4:3c:3a:6f:9c:f3:55:23:75:9c:78:ec:f0:77:20: ba:85:b5:d0:35:bf:c1:65:2a:66:e7:f7:40:db:cd:bc:ca:8d: 81:5f:76:14:9a:16:b5:14:ae:0e:05:d5:37:8b:9a:4f:d4:d1: a6:bd:7b:b0:35:41:23:67:5c:d5:6e:7c:65:4c:c2:4d:06:9e: 37:9e:0f:1f:74:9e:00:dc:d7:20:41:e9:4e:ac:61:1f:ac:ad: b3:43:bc:96:dd:e7:f4:ba:95:1c:f0:91:97:e2:02:9c:a7:3c: e5:c0:60:2a:6d:49:23:42:eb:d3:b9:80:a4:9f:9a:11:ad:16: ec:57:a9:02:97:fb:f4:0d:0b:58:9b:e6:8d:b1:a3:78:f4:08: c9:92:97:96:77:66:59:ca:76:98:48:eb:56:f9:eb:c1:f5:77: 76:9d:57:5c:1a:d3:11:23:76:79:94:c1:f2:d0:37:a5:e3:ec: 72:45:33:98:55:0c:e4:db:ca:e5:89:7c:68:f3:07:22:a2:df: 8c:29:5b:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8Ua7vPPkQPUgTlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk ZWFmYjIyOWUtY2ZhMC00ZmJiLThkZTktNmRhNGVlYWVkNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbyCLsrdLunhvm+iAdewIZKooJ3USDG5iSid amLFPuoV8xl4/ffauYJsHkdb6YZvI83xZEB1j3FPmAH7ccoejge3ks1zOEj4QCL+ dEl8Gfd5Di58UYnYbnIuFmqlLew3QqeXz4lE5VtOd5ta++KJOf8r4ufXQ1z8hZyi ELDJmhjScFSw3cg/v3hgyEKQPcqrr2L0uE9ZvSpCadD8es2K1CxKEcU79TCvQc43 /FrTyBvGRQ0xLRnuizl6j2AOHpba2Xruu9r0BMYsYmX22/pCjR1MP1fL9+UBQJZZ LA+sreMWr65I5+6ypcwYWb9olHwM7jEI78GxSv354AnBhNJATQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeZvECP6lwwJLpaZ2W/7J13EwVcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmM3NjgwZGQtODY5Ny0z YzUwLTgxODEtOTQ1YzUxNzc3ZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTOgS/Cx2OOazxyNADaIjiFtqJwPHc1L65dVgKBSsc5rgti22ZPj599 3SQiowFxKVdf+2QI7pNPI+Q8Om+c81UjdZx47PB3ILqFtdA1v8FlKmbn90DbzbzK jYFfdhSaFrUUrg4F1TeLmk/U0aa9e7A1QSNnXNVufGVMwk0GnjeeDx90ngDc1yBB 6U6sYR+srbNDvJbd5/S6lRzwkZfiApynPOXAYCptSSNC69O5gKSfmhGtFuxXqQKX +/QNC1ib5o2xo3j0CMmSl5Z3ZlnKdphI61b568H1d3adV1wa0xEjdnmUwfLQN6Xj 7HJFM5hVDOTbyuWJfGjzByKi34wpW9M= -----END CERTIFICATE-----Generated at Mon Oct 20 02:07:15 2025 by rpki-client