$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a8abe513-c520-3d11-96b4-f85a047b037c.roa File: a8abe513-c520-3d11-96b4-f85a047b037c.roa (raw, json) Hash identifier: vGoG8u1i2izrI7Pv1G9xtgdUvpzgPMjfeeEc/+DhIzU= Subject key identifier: A7:33:57:46:2F:BD:A9:F6:C2:35:41:66:AE:96:3B:14:75:F1:AD:3C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B41E70F594708520C2F5E2880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a8abe513-c520-3d11-96b4-f85a047b037c.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:0f:59:47:08:52:0c:2f:5e:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=5eca35a1-d5e4-4548-956a-a18018157a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5e:a2:90:d1:14:4f:41:ff:fe:0a:61:c4:76: 6d:bc:97:53:2d:10:b1:65:10:8b:2a:6f:97:2a:ad: 86:fb:69:bc:2a:e5:71:df:28:c1:01:7a:6e:ca:4e: 05:df:45:82:04:64:22:29:c4:89:6c:00:b3:ab:ad: e9:fd:84:bf:ba:56:26:00:35:7f:fa:fc:4e:f2:14: b9:67:6f:00:dc:10:a1:c1:f4:5e:1e:9a:33:6c:2d: 7a:80:32:e5:5a:9b:09:7b:18:c4:c4:92:0f:96:a5: d9:96:7b:a9:a6:ab:78:78:31:37:fe:90:35:ec:e0: 89:ec:f8:37:74:fb:e2:91:53:b1:e7:a4:74:f4:67: 3a:80:a1:6f:46:d0:10:fc:22:1d:11:ee:a0:42:d7: 18:df:75:ce:21:92:f2:78:fb:ab:6e:62:5b:23:aa: 7e:46:ce:ed:86:16:1c:b9:94:c2:36:d6:a5:74:b5: 8c:73:36:c2:95:bc:18:94:b0:c1:8b:f9:5e:92:4a: ad:ac:c7:69:3e:17:cc:1f:21:6e:d9:21:2b:17:f3: 25:ce:15:61:1f:46:8d:38:99:6e:cf:b1:fa:35:79: 23:f8:95:1d:40:d0:06:7e:30:cb:90:ab:20:5f:9f: 73:7b:51:e8:13:21:3c:60:c8:8c:7c:ff:d6:b7:95: cc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:33:57:46:2F:BD:A9:F6:C2:35:41:66:AE:96:3B:14:75:F1:AD:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a8abe513-c520-3d11-96b4-f85a047b037c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:53:9a:68:f6:a2:c6:8a:a1:b1:28:f0:f9:86:5a:b6:c0:40: c0:cd:2e:e0:67:d7:06:bc:bf:77:36:19:e3:44:d0:ae:83:cb: f4:34:0b:1c:ef:f9:d7:0e:32:22:c7:07:af:73:f5:a4:22:65: 6a:26:2e:6e:e8:3a:f5:0a:d7:ee:10:cd:a6:ec:8f:cb:1d:bc: f7:90:c5:33:3c:3d:18:a4:cc:9a:91:ae:d9:d7:e6:f7:cb:28: 68:3a:08:cf:26:af:3e:4b:eb:ac:48:d8:3b:eb:9f:1d:76:4a: 53:cf:cc:70:e4:38:ef:97:d8:ae:27:4b:63:5d:7b:62:45:7e: 96:e0:92:48:17:f6:cc:4e:40:fc:da:ec:85:40:50:14:8e:a7: 7d:fe:89:91:10:73:10:a1:cb:6e:f8:f2:82:28:6d:5d:f7:85: 00:6e:67:3e:75:cd:65:38:7e:cd:53:35:66:0e:9e:a6:3b:ce: dc:46:d9:30:a0:0f:e5:fb:1d:32:59:c4:1d:93:a0:c1:23:09: 8f:41:9f:e7:b3:a4:ec:bc:16:f6:0d:8e:fa:0e:e3:ac:e9:1d: 36:28:80:05:44:61:4b:94:a0:c2:64:e1:6f:0e:99:b6:c7:14: 89:8d:71:0e:6e:69:f2:fd:a5:4e:58:6d:e7:a4:7d:98:af:cf: 16:bc:7d:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5w9ZRwhSDC9eKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NWVjYTM1YTEtZDVlNC00NTQ4LTk1NmEtYTE4MDE4MTU3YTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV6ikNEUT0H//gphxHZtvJdTLRCxZRCLKm+X Kq2G+2m8KuVx3yjBAXpuyk4F30WCBGQiKcSJbACzq63p/YS/ulYmADV/+vxO8hS5 Z28A3BChwfReHpozbC16gDLlWpsJexjExJIPlqXZlnuppqt4eDE3/pA17OCJ7Pg3 dPvikVOx56R09Gc6gKFvRtAQ/CIdEe6gQtcY33XOIZLyePurbmJbI6p+Rs7thhYc uZTCNtaldLWMczbClbwYlLDBi/lekkqtrMdpPhfMHyFu2SErF/MlzhVhH0aNOJlu z7H6NXkj+JUdQNAGfjDLkKsgX59ze1HoEyE8YMiMfP/Wt5XMfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKczV0Yvvan2wjVBZq6WOxR18a08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYThhYmU1MTMtYzUyMC0z ZDExLTk2YjQtZjg1YTA0N2IwMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFTmmj2osaKobEo8PmGWrbAQMDNLuBn1wa8v3c2GeNE0K6Dy/Q0Cxzv +dcOMiLHB69z9aQiZWomLm7oOvUK1+4Qzabsj8sdvPeQxTM8PRikzJqRrtnX5vfL KGg6CM8mrz5L66xI2Dvrnx12SlPPzHDkOO+X2K4nS2Nde2JFfpbgkkgX9sxOQPza 7IVAUBSOp33+iZEQcxChy2748oIobV33hQBuZz51zWU4fs1TNWYOnqY7ztxG2TCg D+X7HTJZxB2ToMEjCY9Bn+ezpOy8FvYNjvoO46zpHTYogAVEYUuUoMJk4W8OmbbH FImNcQ5uafL9pU5YbeekfZivzxa8fYc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:51:50 2025 by rpki-client