$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e379e7f1-fdfe-3099-a497-32c9a49df02a.roa File: e379e7f1-fdfe-3099-a497-32c9a49df02a.roa (raw, json) Hash identifier: 5PUlM1qzFNiMtENbEJtLKDqHFis+6xEhH5QI2aNIHPc= Subject key identifier: 5D:E9:9F:D5:76:E5:A6:18:A7:59:DE:7B:D7:E8:7B:9F:97:63:CE:CF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B153C14224CE47EEECF12E400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e379e7f1-fdfe-3099-a497-32c9a49df02a.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:14:22:4c:e4:7e:ee:cf:12:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=1f25cfb0-729f-49bf-b4e5-66f58cc8ccc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d9:41:6d:a4:52:be:1b:d5:96:17:57:de:a5: f5:04:94:83:4b:82:e0:4a:49:59:ce:85:23:b2:ca: 9e:1c:99:7a:58:ee:b4:42:03:7a:c6:bf:f7:e7:24: ef:e7:ef:04:ef:8a:9f:59:d4:3b:2b:2b:8d:4f:27: f5:e0:71:26:5d:3b:2c:e0:68:be:16:58:47:b5:02: 3a:a4:a9:6d:e8:48:eb:6b:a5:c9:0c:59:c9:ad:e4: 59:8d:1c:ac:bb:d6:9d:42:2a:91:a5:fa:fd:9b:29: 70:a3:e8:6e:c1:b2:4f:ad:49:a6:69:4e:52:6a:1d: 01:8a:4c:ea:0b:24:f3:a5:c6:de:35:e9:24:7b:ae: 9b:0b:f7:a5:5a:e5:ad:5b:7f:64:ee:f2:2f:5f:89: 8b:a3:65:72:af:00:fe:22:cb:b8:e8:00:9a:d5:db: e4:4e:d9:43:4d:c1:4c:12:50:5c:32:21:75:57:3a: 79:af:1a:3b:ec:3c:71:60:c9:50:6d:cd:6d:1b:5b: 0b:d4:ed:b5:06:16:05:7d:51:1d:90:76:b2:84:7e: 4b:9b:d8:d2:b3:c8:25:ec:de:70:70:a6:71:45:96: 20:68:cb:0d:9e:97:c0:e9:5d:32:84:ce:eb:50:f0: 6f:55:4d:3b:0a:d3:1c:f5:3d:58:00:19:84:dc:d6: 58:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E9:9F:D5:76:E5:A6:18:A7:59:DE:7B:D7:E8:7B:9F:97:63:CE:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e379e7f1-fdfe-3099-a497-32c9a49df02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:cc:74:98:2d:73:86:52:2a:5d:d3:45:ea:4a:3e:cc:d3:72: 23:cd:9b:6c:e9:c6:41:98:bb:69:11:61:41:cd:e8:6d:e8:1b: f4:bf:dd:65:47:07:44:9a:a9:c4:69:13:9e:77:d8:4c:9c:d9: e0:2f:9f:88:b0:18:b7:12:ff:42:0b:7c:32:74:d3:6c:61:f4: f1:34:23:5c:2b:9f:75:fa:e1:fe:e5:70:36:ae:b9:96:26:c2: 1c:76:60:18:b9:90:42:8b:b2:ad:96:bf:04:00:13:87:ea:12: 96:15:b9:0c:8e:85:47:64:c7:98:da:4f:32:3e:6d:91:25:16: a9:dd:ba:88:12:db:84:00:8b:3e:92:0c:1a:26:d3:cb:b4:c4: 0d:74:86:e8:1e:39:cc:a2:29:7e:b2:eb:a3:00:1a:24:28:33: fc:b7:bd:27:98:3e:07:0d:4e:42:3e:e8:a5:d4:97:1a:be:4e: c4:05:48:a5:77:7d:5c:67:36:f4:b1:52:ee:ad:d2:ee:cb:f8: f2:93:03:be:eb:d1:bd:cd:9a:0c:c7:00:80:a7:40:58:0a:5f: 3d:51:f1:10:3a:d5:6f:5f:18:23:41:b0:24:88:50:ad:72:8f: 66:ac:22:ab:33:c1:e6:ef:11:ae:82:7b:fe:e8:7c:f1:a4:70: 16:6c:85:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBQiTOR+7s8S5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk MWYyNWNmYjAtNzI5Zi00OWJmLWI0ZTUtNjZmNThjYzhjY2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNlBbaRSvhvVlhdX3qX1BJSDS4LgSklZzoUj ssqeHJl6WO60QgN6xr/35yTv5+8E74qfWdQ7KyuNTyf14HEmXTss4Gi+FlhHtQI6 pKlt6Ejra6XJDFnJreRZjRysu9adQiqRpfr9mylwo+huwbJPrUmmaU5Sah0Bikzq CyTzpcbeNekke66bC/elWuWtW39k7vIvX4mLo2VyrwD+Isu46ACa1dvkTtlDTcFM ElBcMiF1Vzp5rxo77DxxYMlQbc1tG1sL1O21BhYFfVEdkHayhH5Lm9jSs8gl7N5w cKZxRZYgaMsNnpfA6V0yhM7rUPBvVU07CtMc9T1YABmE3NZYkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3pn9V25aYYp1nee9foe5+XY87PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTM3OWU3ZjEtZmRmZS0z MDk5LWE0OTctMzJjOWE0OWRmMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfMdJgtc4ZSKl3TRepKPszTciPNm2zpxkGYu2kRYUHN6G3oG/S/3WVH B0SaqcRpE5532Eyc2eAvn4iwGLcS/0ILfDJ002xh9PE0I1wrn3X64f7lcDauuZYm whx2YBi5kEKLsq2WvwQAE4fqEpYVuQyOhUdkx5jaTzI+bZElFqnduogS24QAiz6S DBom08u0xA10hugeOcyiKX6y66MAGiQoM/y3vSeYPgcNTkI+6KXUlxq+TsQFSKV3 fVxnNvSxUu6t0u7L+PKTA77r0b3NmgzHAICnQFgKXz1R8RA61W9fGCNBsCSIUK1y j2asIqszwebvEa6Ce/7ofPGkcBZshWs= -----END CERTIFICATE-----Generated at Mon Oct 20 07:26:41 2025 by rpki-client