$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04800cc4-d33c-33e3-9c3c-e1efab77c60b.roa File: 04800cc4-d33c-33e3-9c3c-e1efab77c60b.roa (raw, json) Hash identifier: gHSYeyzOOkAY6v7lbDI7WuF6UefPyQeNVC+fqmwCDUM= Subject key identifier: 7B:9C:CC:E5:F9:CA:37:FD:78:F6:0D:6E:AF:32:C6:DE:FB:27:3E:3C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B41E710A7BDA609C709A1E1B0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04800cc4-d33c-33e3-9c3c-e1efab77c60b.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:10:a7:bd:a6:09:c7:09:a1:e1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=0d1fd9dd-fbd9-4e27-8ff3-d3876da2dde2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:8a:77:3f:7d:b3:3a:8f:72:2b:bd:14:48: 4b:f4:22:13:c8:31:b0:93:59:69:9c:a1:75:79:81: bf:2a:66:cd:a5:20:5e:d4:8e:4f:71:ec:73:90:04: 79:78:29:ec:6b:11:01:a4:ed:82:6e:ee:a6:fc:07: d2:52:57:5b:4d:5a:cc:64:90:30:df:11:d8:a8:16: 76:cb:42:7d:b1:5a:54:20:a2:ae:75:d3:a9:31:cc: a0:a3:ab:3e:1c:68:94:f2:2c:65:9e:96:64:30:4c: e6:9e:29:cf:cb:28:ab:d7:1e:df:71:6f:d4:43:aa: 2e:9c:88:7a:92:02:25:fb:c9:ed:5b:40:ce:9e:14: 86:13:7b:23:fc:79:83:28:48:16:1b:ae:d1:90:a6: 1f:9b:6b:76:d8:eb:a5:56:56:db:6f:a5:e1:67:40: 81:24:62:3b:05:b9:ea:0f:b5:c0:99:e3:7e:da:39: e0:8f:b8:58:9c:e3:7a:61:41:80:db:74:9e:54:b1: cd:f9:60:dd:c6:83:0c:b1:6e:bd:96:73:df:4a:cd: c0:b5:c6:0e:ee:24:b0:5c:8f:89:aa:5d:16:bf:14: cd:99:8f:70:43:de:06:ac:e7:52:cd:d6:ed:de:46: 32:a6:e5:43:3c:af:00:3b:11:4f:eb:92:96:59:da: ef:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9C:CC:E5:F9:CA:37:FD:78:F6:0D:6E:AF:32:C6:DE:FB:27:3E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04800cc4-d33c-33e3-9c3c-e1efab77c60b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:b4:8a:76:27:4e:f1:91:af:2d:95:de:21:8a:c0:38:b6:a0: ec:a6:89:7a:db:ba:a7:5b:15:24:51:de:4d:e2:32:08:ed:14: 55:9c:9b:23:85:4c:38:f1:59:6a:22:5b:d5:90:31:da:a4:9c: e7:6f:4f:54:2b:65:54:fd:0a:fc:18:78:81:db:9f:fa:d9:f0: 60:d0:ce:30:18:d2:b5:7d:4a:e6:6e:c2:3e:d6:85:8d:bc:b3: ae:bb:26:59:32:22:b6:0e:bc:6e:bb:15:3d:72:c4:f6:ea:89: 5f:48:49:b3:1d:33:71:13:4a:6d:a0:05:0e:17:be:d4:f4:87: 74:88:78:1a:54:f8:c4:bb:40:a6:b4:c9:03:0d:37:b7:28:40: f4:fb:c9:c9:27:1d:05:f2:7d:d8:06:28:2d:99:b2:ee:04:07: 0d:49:9f:64:13:fd:6d:ea:30:93:37:d5:5b:fe:99:1c:47:ce: cb:02:22:85:7d:e5:a7:f1:91:4b:62:70:fc:64:eb:96:6d:6b: 21:65:8c:25:2e:20:99:a9:bb:4b:c6:41:de:5e:c7:44:54:e3: 57:a5:4d:ae:39:cd:b8:a1:f6:32:2e:59:97:4b:c8:cc:62:fc: d4:fc:db:fb:98:c8:31:61:60:8a:69:3f:46:b4:2d:72:8d:2b: cc:18:e5:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xCnvaYJxwmh4bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MGQxZmQ5ZGQtZmJkOS00ZTI3LThmZjMtZDM4NzZkYTJkZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpqKdz99szqPciu9FEhL9CITyDGwk1lpnKF1 eYG/KmbNpSBe1I5PcexzkAR5eCnsaxEBpO2Cbu6m/AfSUldbTVrMZJAw3xHYqBZ2 y0J9sVpUIKKuddOpMcygo6s+HGiU8ixlnpZkMEzmninPyyir1x7fcW/UQ6ounIh6 kgIl+8ntW0DOnhSGE3sj/HmDKEgWG67RkKYfm2t22OulVlbbb6XhZ0CBJGI7Bbnq D7XAmeN+2jngj7hYnON6YUGA23SeVLHN+WDdxoMMsW69lnPfSs3AtcYO7iSwXI+J ql0WvxTNmY9wQ94GrOdSzdbt3kYypuVDPK8AOxFP65KWWdrvmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuczOX5yjf9ePYNbq8yxt77Jz48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDQ4MDBjYzQtZDMzYy0z M2UzLTljM2MtZTFlZmFiNzdjNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+0inYnTvGRry2V3iGKwDi2oOymiXrbuqdbFSRR3k3iMgjtFFWcmyOF TDjxWWoiW9WQMdqknOdvT1QrZVT9CvwYeIHbn/rZ8GDQzjAY0rV9SuZuwj7WhY28 s667JlkyIrYOvG67FT1yxPbqiV9ISbMdM3ETSm2gBQ4XvtT0h3SIeBpU+MS7QKa0 yQMNN7coQPT7ycknHQXyfdgGKC2Zsu4EBw1Jn2QT/W3qMJM31Vv+mRxHzssCIoV9 5afxkUticPxk65ZtayFljCUuIJmpu0vGQd5ex0RU41elTa45zbih9jIuWZdLyMxi /NT82/uYyDFhYIppP0a0LXKNK8wY5cI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:47:20 2025 by rpki-client