$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19839f40-6d5c-3b86-9930-5d3c85ddb5c9.roa File: 19839f40-6d5c-3b86-9930-5d3c85ddb5c9.roa (raw, json) Hash identifier: Ynpil9GSCyyAad74dvfwdxt1UWhHDtlIeIWbJcXZ9/o= Subject key identifier: 13:88:6E:FB:43:3A:7B:4A:94:A8:A4:68:3A:C7:56:41:11:FA:3E:80 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B41E7096A5244785088774F00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19839f40-6d5c-3b86-9930-5d3c85ddb5c9.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:09:6a:52:44:78:50:88:77:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=26f8135e-5c05-462f-9807-d64942d7294a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:51:42:73:16:05:21:79:47:c7:e3:15:57: b5:0a:9c:8f:1c:f3:2a:23:67:a6:c0:f6:e0:12:18: 57:0c:9a:af:61:45:ed:e6:f3:e6:55:b8:60:fe:69: da:65:fc:83:67:ba:1d:32:fd:ac:d2:f0:c4:2e:32: d4:be:ee:f8:9b:e7:d0:5c:54:b5:bb:fb:70:19:a6: d4:41:f9:81:5b:8e:f5:c3:da:ab:55:85:d3:c9:8c: af:e8:04:ff:9d:1c:ab:8d:75:10:dd:06:2c:76:6f: ff:0c:42:e2:c6:72:4f:5a:bb:1d:b6:91:75:4e:2e: 3d:3e:d2:c9:98:9a:98:96:a5:54:db:88:da:ab:53: 3e:61:15:41:0d:1d:57:89:a0:ac:02:b1:a5:0a:97: ee:4c:82:ac:cc:1c:86:df:1f:47:63:b6:97:1e:c0: 31:4f:a6:a6:34:9e:97:ae:fb:a9:27:e7:fd:96:b1: 1e:40:25:30:6a:ee:ea:5f:21:f7:66:ae:0c:9a:d7: fa:60:94:af:91:01:f6:11:4d:c1:8b:f8:cc:b1:e0: 0c:7d:8f:41:bf:5a:b5:ae:90:b5:c2:d9:8e:b5:e0: 44:fa:ce:a7:76:09:10:47:7c:f9:be:b1:46:ba:d7: 1a:7c:0d:84:cc:12:a7:67:61:26:f3:a8:cd:42:d0: 53:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:88:6E:FB:43:3A:7B:4A:94:A8:A4:68:3A:C7:56:41:11:FA:3E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19839f40-6d5c-3b86-9930-5d3c85ddb5c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:bb:74:17:d8:c7:22:ef:03:09:e0:c0:21:d2:42:69:50:be: 10:b6:5a:df:10:1c:b2:e6:36:11:7c:e5:92:3e:a9:d6:d1:c3: 7c:f8:ad:f6:f6:7f:e7:27:1d:4b:71:9c:3d:96:2e:da:7a:21: 2c:65:cd:64:98:81:ea:d3:6a:2c:4f:d1:d9:e1:05:2e:c6:e6: f1:4c:f3:41:86:cc:0b:2c:29:e7:fc:98:a6:4f:ad:27:1b:a4: e7:1c:c2:43:81:ac:84:ef:15:89:d0:22:0e:34:0f:50:39:83: 63:59:0a:b4:7a:11:1a:fc:10:17:88:ab:b4:37:a5:50:a8:30: ab:a6:cc:af:a6:1f:b6:13:ae:26:c9:5c:75:0c:c8:a3:8e:2f: b4:7a:80:43:6f:78:75:bf:00:74:cb:55:13:79:79:33:2f:aa: e6:54:22:3a:d6:5e:11:89:4e:39:6b:d7:b5:2e:8c:d2:d4:1a: ad:96:2b:1c:55:84:45:fa:01:fc:ae:a1:21:f4:f8:23:3a:d3: 0b:a9:eb:c8:73:cb:4b:69:bc:b3:17:63:bf:d4:b1:70:0c:8d: b7:2e:fe:b8:a0:8d:62:48:00:11:fd:e0:8e:44:ac:e8:33:d0: 40:8e:dd:73:cc:80:90:fc:07:41:7e:6c:f1:57:db:25:d1:85: 9d:7c:01:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5wlqUkR4UIh3TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MjZmODEzNWUtNWMwNS00NjJmLTk4MDctZDY0OTQyZDcyOTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkBRQnMWBSF5R8fjFVe1CpyPHPMqI2emwPbg EhhXDJqvYUXt5vPmVbhg/mnaZfyDZ7odMv2s0vDELjLUvu74m+fQXFS1u/twGabU QfmBW471w9qrVYXTyYyv6AT/nRyrjXUQ3QYsdm//DELixnJPWrsdtpF1Ti49PtLJ mJqYlqVU24jaq1M+YRVBDR1XiaCsArGlCpfuTIKszByG3x9HY7aXHsAxT6amNJ6X rvupJ+f9lrEeQCUwau7qXyH3Zq4Mmtf6YJSvkQH2EU3Bi/jMseAMfY9Bv1q1rpC1 wtmOteBE+s6ndgkQR3z5vrFGutcafA2EzBKnZ2Em86jNQtBTcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOIbvtDOntKlKikaDrHVkER+j6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTk4MzlmNDAtNmQ1Yy0z Yjg2LTk5MzAtNWQzYzg1ZGRiNWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES7dBfYxyLvAwngwCHSQmlQvhC2Wt8QHLLmNhF85ZI+qdbRw3z4rfb2 f+cnHUtxnD2WLtp6ISxlzWSYgerTaixP0dnhBS7G5vFM80GGzAssKef8mKZPrScb pOccwkOBrITvFYnQIg40D1A5g2NZCrR6ERr8EBeIq7Q3pVCoMKumzK+mH7YTribJ XHUMyKOOL7R6gENveHW/AHTLVRN5eTMvquZUIjrWXhGJTjlr17UujNLUGq2WKxxV hEX6AfyuoSH0+CM60wup68hzy0tpvLMXY7/UsXAMjbcu/rigjWJIABH94I5ErOgz 0ECO3XPMgJD8B0F+bPFX2yXRhZ18AVc= -----END CERTIFICATE-----Generated at Mon Oct 20 07:35:16 2025 by rpki-client