$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/74b8f18a-03af-3efd-855d-08cd5d5beccf.roa File: 74b8f18a-03af-3efd-855d-08cd5d5beccf.roa (raw, json) Hash identifier: 93V1I/tKpJa6onfS/0IiCGnczBvoO4cH1JO+Q8wswZc= Subject key identifier: AA:64:0A:DC:A9:80:39:2F:C9:37:EE:FD:42:7A:44:15:95:4A:77:A6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B153C1150BB7F42D9D3085990 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/74b8f18a-03af-3efd-855d-08cd5d5beccf.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:11:50:bb:7f:42:d9:d3:08:59:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=40532634-aa11-4069-aa75-6e0d95045c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a8:0b:a4:a2:be:19:af:b5:ec:57:d3:0f:61: 79:d7:64:8b:b2:82:15:b9:ff:a9:a3:8b:5c:9e:02: fa:fc:a6:64:86:08:10:a7:d3:4a:14:d1:6c:39:b4: c3:99:a8:b9:8c:bd:ef:b7:3f:88:19:ad:aa:b4:2e: e3:d6:5f:97:c1:1d:46:61:04:61:3a:86:57:11:80: 4b:c3:88:94:3f:57:e5:a9:5a:4b:29:ae:24:9a:3b: fd:af:ff:9c:f2:e0:4c:3c:b5:37:67:3a:1e:dc:e4: de:3b:6d:70:54:48:18:0a:a0:22:04:e9:bd:f9:3a: da:50:8d:c9:d3:82:76:70:d1:72:0c:99:e7:a9:9b: ae:0d:4a:84:44:ca:55:b1:51:2a:7d:ab:0e:b8:88: b2:49:89:58:a6:37:54:e7:de:92:06:bf:55:7a:fa: 60:ce:34:0a:9f:b6:03:40:d1:74:08:dc:e0:48:8b: 09:e2:f0:5c:a2:4f:42:c2:42:fc:98:99:2a:77:74: 15:70:cc:e5:8a:77:98:e6:ee:32:cb:42:10:91:2c: e4:29:4c:2b:1d:72:74:2d:a3:18:e5:04:65:18:4a: 72:dd:4e:f2:1c:87:c7:c4:a0:fe:93:13:93:74:78: 72:3b:b5:92:82:5a:8b:62:4f:f4:2e:a4:a9:8e:8f: 6d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:64:0A:DC:A9:80:39:2F:C9:37:EE:FD:42:7A:44:15:95:4A:77:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/74b8f18a-03af-3efd-855d-08cd5d5beccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:0e:9d:6e:63:5c:9d:68:5c:17:72:6f:5f:33:9e:cf:a2:e3: fc:30:32:09:50:a2:51:fb:7e:fa:9c:15:f2:eb:e4:49:68:21: c5:3b:83:99:12:df:e5:aa:3c:4e:3d:d0:12:6b:22:36:8d:77: 6b:9d:06:49:39:d7:8b:6d:b6:db:56:89:6f:bf:dc:ae:0e:ed: 77:1c:00:4a:28:8f:fa:b3:fa:9b:64:33:14:df:12:39:be:c0: 9f:1d:67:a5:de:66:01:63:bb:f6:95:3f:f9:22:05:e4:75:7a: 91:6d:8a:ef:4e:89:94:32:d7:22:e5:81:6d:69:81:22:ba:6a: dd:63:19:16:37:48:08:a4:cd:5f:b3:70:07:a9:72:60:37:b2: f0:fb:7b:e0:fc:8f:ed:57:5e:f0:91:d7:1c:80:2a:6f:30:a6: 0c:0e:01:81:f7:6e:8e:c5:88:1a:f9:06:be:f6:0f:e7:b7:7c: 3d:96:ab:82:62:f4:0a:2b:3f:d1:fc:1b:a8:ba:ca:60:bc:e4: 62:af:b8:71:eb:9a:0f:3c:00:7f:23:37:dc:1a:8e:b9:08:9d: 72:a2:fb:1d:ab:ab:b3:24:cd:c8:75:b6:1e:af:f3:7c:17:61: 04:4e:2e:f7:3a:0f:2d:e7:ec:6d:f9:e9:99:cb:33:a1:a3:8a: 06:f4:2c:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBFQu39C2dMIWZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk NDA1MzI2MzQtYWExMS00MDY5LWFhNzUtNmUwZDk1MDQ1YzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqgLpKK+Ga+17FfTD2F512SLsoIVuf+po4tc ngL6/KZkhggQp9NKFNFsObTDmai5jL3vtz+IGa2qtC7j1l+XwR1GYQRhOoZXEYBL w4iUP1flqVpLKa4kmjv9r/+c8uBMPLU3Zzoe3OTeO21wVEgYCqAiBOm9+TraUI3J 04J2cNFyDJnnqZuuDUqERMpVsVEqfasOuIiySYlYpjdU596SBr9VevpgzjQKn7YD QNF0CNzgSIsJ4vBcok9CwkL8mJkqd3QVcMzlineY5u4yy0IQkSzkKUwrHXJ0LaMY 5QRlGEpy3U7yHIfHxKD+kxOTdHhyO7WSglqLYk/0LqSpjo9tvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpkCtypgDkvyTfu/UJ6RBWVSnemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzRiOGYxOGEtMDNhZi0z ZWZkLTg1NWQtMDhjZDVkNWJlY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4OnW5jXJ1oXBdyb18zns+i4/wwMglQolH7fvqcFfLr5EloIcU7g5kS 3+WqPE490BJrIjaNd2udBkk514tttttWiW+/3K4O7XccAEooj/qz+ptkMxTfEjm+ wJ8dZ6XeZgFju/aVP/kiBeR1epFtiu9OiZQy1yLlgW1pgSK6at1jGRY3SAikzV+z cAepcmA3svD7e+D8j+1XXvCR1xyAKm8wpgwOAYH3bo7FiBr5Br72D+e3fD2Wq4Ji 9AorP9H8G6i6ymC85GKvuHHrmg88AH8jN9wajrkInXKi+x2rq7Mkzch1th6v83wX YQROLvc6Dy3n7G356ZnLM6Gjigb0LKE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:31:06 2025 by rpki-client