$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8c384cf8-f47e-36b8-ad6e-dad7669a56ad.roa File: 8c384cf8-f47e-36b8-ad6e-dad7669a56ad.roa (raw, json) Hash identifier: SOVnBHmRVJx1Tq1sodhyJY3475KCg5b/HufWrgz7JEk= Subject key identifier: 5B:A0:96:D6:C2:8C:EA:F1:8D:4B:CB:D2:AA:2D:D9:A2:53:0D:74:83 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B41E72009947E8775225F10C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8c384cf8-f47e-36b8-ad6e-dad7669a56ad.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:20:09:94:7e:87:75:22:5f:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=8405000f-7069-4b4f-9899-87035a46a390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:e1:e2:90:6c:dd:e3:41:a3:36:8f:b3:44:74: 58:b8:c6:d8:a7:27:6d:a9:98:ff:4c:95:86:6f:53: 1e:96:2e:08:36:a3:2e:b3:2a:42:a6:40:aa:b1:33: c1:4a:19:dd:3e:e6:9c:57:06:ff:7c:28:ca:dc:bb: 68:63:6d:5d:ff:6a:c3:3b:9e:09:50:e4:bb:93:a4: a9:0b:82:eb:e5:ce:7a:db:5f:4c:4d:9a:2a:ac:c1: 14:a9:db:79:7e:61:c1:c8:19:ad:0c:db:0d:75:40: 98:29:7f:94:87:50:a4:ac:77:fb:33:73:1a:4b:b7: f2:d6:7f:ee:53:5f:74:0e:72:f4:1d:bd:86:1f:7d: 24:99:b7:f8:f9:be:92:b8:a8:1c:b3:33:45:5d:42: 21:ed:1f:c5:a3:8f:9d:39:f7:04:60:dd:db:8d:57: 1b:72:6b:f4:4d:a2:d4:2c:74:46:1c:23:08:c5:0a: 09:31:dc:e0:78:26:34:fe:64:97:c0:da:a0:80:02: 0e:bb:84:62:db:3d:47:48:a0:af:0c:50:85:a9:65: 6a:19:de:77:7a:bd:fd:5c:ab:4a:e6:d8:ac:93:cb: 36:c7:df:a0:42:be:82:00:15:9d:f4:80:e0:50:55: 71:16:05:1f:5e:c7:5e:14:19:22:34:f6:88:a6:2d: a6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A0:96:D6:C2:8C:EA:F1:8D:4B:CB:D2:AA:2D:D9:A2:53:0D:74:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8c384cf8-f47e-36b8-ad6e-dad7669a56ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:5c:f2:c2:60:ef:1a:bc:06:8d:85:f9:94:44:46:a6:b1:a1: bf:20:76:c0:09:44:7e:03:4d:1b:a8:ca:c9:f7:9f:a7:b2:a1: ea:3f:af:e3:15:08:c8:5f:5a:94:5e:13:f9:d4:37:94:91:f4: f5:c3:3b:ab:9c:38:8c:25:2f:97:1c:f4:cf:74:d9:f1:d9:04: f1:bd:21:15:ee:f3:70:c6:c9:b3:fa:ae:f5:82:a5:6a:b7:b1: 6e:75:ff:ac:13:bc:8f:10:7c:44:74:f4:60:53:7d:6a:c1:f3: b9:11:99:31:f0:a9:c5:1b:a4:4f:af:33:92:72:2f:fc:8a:0c: cd:df:c6:74:ac:f5:e0:70:5c:76:80:92:5c:48:38:42:52:81: 08:0e:9d:97:64:90:b7:34:95:d4:1f:3a:65:b1:55:e3:9e:df: ef:0a:1b:d2:ae:d4:86:2b:0d:5b:31:fb:21:0f:de:d6:9a:c2: 93:cd:41:df:e6:22:19:d6:a9:70:11:f8:c1:77:0d:19:74:fd: 5c:7a:d9:c5:d1:59:ec:e4:d8:df:79:22:80:ac:8e:2f:a3:52: 30:71:98:73:77:ec:05:09:4d:eb:af:34:a6:90:d2:73:00:97: 9b:1e:f0:dd:df:c2:31:d8:69:fa:a6:45:9c:a7:be:10:fa:c8: cb:7a:af:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5yAJlH6HdSJfEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ODQwNTAwMGYtNzA2OS00YjRmLTk4OTktODcwMzVhNDZhMzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/eHikGzd40GjNo+zRHRYuMbYpydtqZj/TJWG b1Meli4INqMusypCpkCqsTPBShndPuacVwb/fCjK3LtoY21d/2rDO54JUOS7k6Sp C4Lr5c56219MTZoqrMEUqdt5fmHByBmtDNsNdUCYKX+Uh1CkrHf7M3MaS7fy1n/u U190DnL0Hb2GH30kmbf4+b6SuKgcszNFXUIh7R/Fo4+dOfcEYN3bjVcbcmv0TaLU LHRGHCMIxQoJMdzgeCY0/mSXwNqggAIOu4Ri2z1HSKCvDFCFqWVqGd53er39XKtK 5tisk8s2x9+gQr6CABWd9IDgUFVxFgUfXsdeFBkiNPaIpi2mkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFugltbCjOrxjUvL0qot2aJTDXSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGMzODRjZjgtZjQ3ZS0z NmI4LWFkNmUtZGFkNzY2OWE1NmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlc8sJg7xq8Bo2F+ZRERqaxob8gdsAJRH4DTRuoysn3n6eyoeo/r+MV CMhfWpReE/nUN5SR9PXDO6ucOIwlL5cc9M902fHZBPG9IRXu83DGybP6rvWCpWq3 sW51/6wTvI8QfER09GBTfWrB87kRmTHwqcUbpE+vM5JyL/yKDM3fxnSs9eBwXHaA klxIOEJSgQgOnZdkkLc0ldQfOmWxVeOe3+8KG9Ku1IYrDVsx+yEP3taawpPNQd/m IhnWqXAR+MF3DRl0/Vx62cXRWezk2N95IoCsji+jUjBxmHN37AUJTeuvNKaQ0nMA l5se8N3fwjHYafqmRZynvhD6yMt6r94= -----END CERTIFICATE-----Generated at Mon Oct 20 09:57:16 2025 by rpki-client