$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e008e9e-063b-3c05-919d-1af2b82b48cd.roa File: 6e008e9e-063b-3c05-919d-1af2b82b48cd.roa (raw, json) Hash identifier: +lYszZzl3xwFyImjgk4MJL3/hzyuiQ1sIryX3Vg+kPk= Subject key identifier: 69:E2:90:2A:8B:50:7B:33:04:B1:5A:C9:6C:0B:93:E1:F4:ED:BE:2D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B2A2C535E58B72D8C4E6EE900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e008e9e-063b-3c05-919d-1af2b82b48cd.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.153.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:53:5e:58:b7:2d:8c:4e:6e:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=d89a0420-1cf1-4b13-83f3-9b2ae803c84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:11:d5:c5:bc:58:2c:86:87:5c:cd:b4:ac:b1: 83:bf:02:96:66:0b:a9:4f:42:a7:e2:d2:55:e5:99: d7:10:5e:fc:43:92:11:6a:97:34:8a:f0:16:8b:03: 99:d9:cf:97:d5:b4:72:82:e0:21:56:ba:6c:fa:eb: 62:56:ae:9c:be:2f:29:92:3a:08:4a:82:fe:16:55: 9f:7c:87:88:13:6f:99:d1:db:c5:f1:a4:8a:2c:c2: c0:0e:17:ee:c0:6c:96:57:0c:49:8e:35:1f:53:7a: 40:28:11:4c:02:d4:0a:7e:18:1b:11:59:6a:52:d1: d0:0c:3e:6c:84:42:19:01:db:65:d3:b1:e2:23:ec: 5b:93:b5:4a:c7:b9:df:77:91:1e:1c:0d:b2:b6:db: da:2f:d6:54:66:34:73:f3:0c:1e:4f:ac:59:36:43: 5e:f5:27:e8:6b:70:ef:40:07:25:da:b2:14:6a:76: e5:51:e4:6e:1b:2f:00:e4:66:d0:60:c0:93:04:30: c6:39:f3:bf:28:ba:7f:63:8d:ad:3e:d9:3d:36:ee: 5b:85:64:d4:95:d1:12:88:67:04:b0:7b:36:c0:c2: 43:3a:04:a6:18:f1:0c:c4:aa:69:9e:09:87:eb:b8: fa:6a:15:b5:c3:c8:17:35:2f:b8:09:a4:62:ab:3b: c3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E2:90:2A:8B:50:7B:33:04:B1:5A:C9:6C:0B:93:E1:F4:ED:BE:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e008e9e-063b-3c05-919d-1af2b82b48cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:5d:ba:81:17:2a:38:0f:ab:4b:25:45:cc:ad:ad:a3:19:06: 85:c8:38:36:4e:c0:fc:a8:d5:0b:a3:d9:0d:6e:96:49:46:f5: 59:85:24:fc:bd:6c:9a:22:75:c5:7a:e7:c8:41:d9:75:61:ea: 63:f4:95:22:54:90:4c:ab:f2:cc:8d:a6:3c:ea:d9:39:9e:60: f2:ba:70:0f:bd:24:46:ef:c2:e5:11:74:63:be:22:de:8f:3b: 1e:92:6a:1b:32:14:c7:7c:cc:2d:ac:40:ca:34:63:b2:ba:e2: c3:6e:ac:54:2a:3d:ef:67:6a:8a:8b:5b:87:b3:b0:02:42:82: d2:42:65:3c:3a:cf:d5:de:19:e6:1a:a2:5a:27:db:e1:21:61: 32:53:15:b7:d3:83:9c:c5:fa:6f:0f:dd:cf:95:1d:56:0b:dc: 28:1f:ad:f4:27:2b:db:a5:af:d4:86:9d:cf:74:3d:c1:b8:b5: 48:db:0d:48:09:ea:95:e9:db:9c:d8:17:f7:38:a7:83:7b:ef: 29:e9:7d:e6:fc:6e:84:1c:e7:0a:0b:66:29:3d:fc:16:80:d7: 48:99:68:60:a2:81:b9:04:ee:cf:64:3f:9e:fc:6b:86:9a:46: 58:65:c8:60:89:4a:a1:3e:e0:5a:dc:78:eb:b1:fa:d6:31:5c: 7f:36:94:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLFNeWLctjE5u6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDg5YTA0MjAtMWNmMS00YjEzLTgzZjMtOWIyYWU4MDNjODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBHVxbxYLIaHXM20rLGDvwKWZgupT0Kn4tJV 5ZnXEF78Q5IRapc0ivAWiwOZ2c+X1bRyguAhVrps+utiVq6cvi8pkjoISoL+FlWf fIeIE2+Z0dvF8aSKLMLADhfuwGyWVwxJjjUfU3pAKBFMAtQKfhgbEVlqUtHQDD5s hEIZAdtl07HiI+xbk7VKx7nfd5EeHA2yttvaL9ZUZjRz8wweT6xZNkNe9Sfoa3Dv QAcl2rIUanblUeRuGy8A5GbQYMCTBDDGOfO/KLp/Y42tPtk9Nu5bhWTUldESiGcE sHs2wMJDOgSmGPEMxKppngmH67j6ahW1w8gXNS+4CaRiqzvDAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnikCqLUHszBLFayWwLk+H07b4tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmUwMDhlOWUtMDYzYi0z YzA1LTkxOWQtMWFmMmI4MmI0OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJldMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClduoEXKjgPq0slRcytraMZBoXIODZOwPyo1Quj2Q1ulklG9VmFJPy9 bJoidcV658hB2XVh6mP0lSJUkEyr8syNpjzq2TmeYPK6cA+9JEbvwuURdGO+It6P Ox6SahsyFMd8zC2sQMo0Y7K64sNurFQqPe9naoqLW4ezsAJCgtJCZTw6z9XeGeYa olon2+EhYTJTFbfTg5zF+m8P3c+VHVYL3CgfrfQnK9ulr9SGnc90PcG4tUjbDUgJ 6pXp25zYF/c4p4N77ynpfeb8boQc5woLZik9/BaA10iZaGCigbkE7s9kP578a4aa RlhlyGCJSqE+4FrceOux+tYxXH82lJk= -----END CERTIFICATE-----Generated at Mon Oct 20 04:30:05 2025 by rpki-client