$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8aee1e40-ec6c-3090-bdd3-8739db457212.roa File: 8aee1e40-ec6c-3090-bdd3-8739db457212.roa (raw, json) Hash identifier: D8P4nOmFBz5k8NL8LzKXM7okN2/vcIJrxOBC75Dr7PI= Subject key identifier: 04:06:5B:51:86:9F:44:E5:A5:66:D7:46:FA:87:1D:7D:70:45:EA:B9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B03169948F135C917D0179EC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8aee1e40-ec6c-3090-bdd3-8739db457212.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 8069 IP address blocks: 20.153.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:99:48:f1:35:c9:17:d0:17:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=57c2209d-0c91-4adc-8e0a-e22b96b6b9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:05:9a:39:c9:f0:4d:6c:cb:94:94:0f:35:22: 24:6e:43:c6:c0:39:e3:cc:98:75:af:18:55:d4:2e: 21:4d:e7:c8:8f:02:e4:46:6d:20:4e:66:04:a6:d4: 56:7c:b5:44:80:f1:6d:b1:4c:05:0f:0d:0b:b4:72: cb:00:43:56:83:f4:f6:c0:a5:17:9a:57:3f:39:6a: 79:45:92:9e:bc:24:97:b6:9b:6d:30:8c:4e:f9:8b: 24:c3:e6:15:92:b6:b4:2e:ff:00:9e:d8:34:ff:01: 35:48:e3:49:3f:7b:47:ff:19:fe:6b:8e:c8:99:93: 36:fb:e6:95:f0:cf:1d:0c:4f:95:93:9a:a1:5c:21: 91:53:5e:fd:e0:2e:cd:92:62:da:47:6f:d3:bb:e9: 3d:7c:7c:07:4c:5e:31:ab:15:e1:54:84:36:a0:1e: 26:a1:75:4c:ad:93:7f:3a:a0:b8:ff:a2:9a:d1:7f: e8:49:6f:23:fd:f7:41:91:6a:80:6d:41:fa:2f:f2: 1f:5e:36:c3:df:b4:d7:38:b3:96:86:fd:fe:f0:60: 74:6f:c7:69:51:78:14:8f:23:89:b7:4b:6e:02:17: 8b:ef:fb:94:ac:65:ee:77:b6:55:2c:7f:a8:96:51: 1d:52:43:a8:d1:e2:51:13:14:5a:df:03:d3:cd:43: 06:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:06:5B:51:86:9F:44:E5:A5:66:D7:46:FA:87:1D:7D:70:45:EA:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8aee1e40-ec6c-3090-bdd3-8739db457212.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:5b:a7:07:3e:fb:0a:e9:3d:67:13:e1:6c:00:e3:ae:90:68: 17:f9:72:5c:77:87:b8:a7:af:f3:38:37:eb:14:c6:2d:1c:1e: d7:46:64:71:0e:f6:3b:4a:de:39:5d:b9:68:5a:63:60:00:c9: dd:27:6d:7c:b9:47:f0:ac:87:36:29:5b:87:bf:23:66:25:c5: 6e:61:e0:a1:f1:1b:fb:ac:26:20:91:9e:ca:30:96:89:d3:34: 7a:bb:b9:29:18:b4:a6:c6:27:be:41:8a:64:6f:8a:5a:62:1d: b3:3f:77:3b:a4:03:ed:d3:b5:02:db:bb:bf:18:bf:cf:5d:43: e8:1e:d2:ad:b1:8c:94:1a:99:9e:d7:86:cc:96:37:91:70:a8: 3c:fb:d2:f8:2f:f5:fa:8a:29:fc:3b:d4:26:cd:5d:99:53:6e: 08:a6:71:2b:43:2f:fe:70:34:e7:45:e7:5f:88:6d:d6:e0:9d: 2a:d5:1f:70:36:83:38:cc:03:03:ec:62:4e:f4:89:58:63:aa: 5d:88:00:21:98:17:ba:3f:88:c9:f2:63:fc:74:74:ff:3c:68: 58:a7:f4:a3:84:e6:b2:96:23:e7:9d:2f:70:e7:2c:62:70:fe: d8:82:96:ef:92:a9:de:54:d4:3a:06:49:71:f7:cc:04:8b:32: bc:0f:a2:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDFplI8TXJF9AXnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk NTdjMjIwOWQtMGM5MS00YWRjLThlMGEtZTIyYjk2YjZiOWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAWaOcnwTWzLlJQPNSIkbkPGwDnjzJh1rxhV 1C4hTefIjwLkRm0gTmYEptRWfLVEgPFtsUwFDw0LtHLLAENWg/T2wKUXmlc/OWp5 RZKevCSXtpttMIxO+Yskw+YVkra0Lv8Antg0/wE1SONJP3tH/xn+a47ImZM2++aV 8M8dDE+Vk5qhXCGRU1794C7NkmLaR2/Tu+k9fHwHTF4xqxXhVIQ2oB4moXVMrZN/ OqC4/6Ka0X/oSW8j/fdBkWqAbUH6L/IfXjbD37TXOLOWhv3+8GB0b8dpUXgUjyOJ t0tuAheL7/uUrGXud7ZVLH+ollEdUkOo0eJRExRa3wPTzUMGdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQGW1GGn0TlpWbXRvqHHX1wReq5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGFlZTFlNDAtZWM2Yy0z MDkwLWJkZDMtODczOWRiNDU3MjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJklMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJbpwc++wrpPWcT4WwA466QaBf5clx3h7inr/M4N+sUxi0cHtdGZHEO 9jtK3jlduWhaY2AAyd0nbXy5R/CshzYpW4e/I2YlxW5h4KHxG/usJiCRnsowlonT NHq7uSkYtKbGJ75BimRvilpiHbM/dzukA+3TtQLbu78Yv89dQ+ge0q2xjJQamZ7X hsyWN5FwqDz70vgv9fqKKfw71CbNXZlTbgimcStDL/5wNOdF51+IbdbgnSrVH3A2 gzjMAwPsYk70iVhjql2IACGYF7o/iMnyY/x0dP88aFin9KOE5rKWI+edL3DnLGJw /tiClu+Sqd5U1DoGSXH3zASLMrwPor4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:35:18 2025 by rpki-client