$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/31070cfa-eefe-3512-a2fa-aaeba7433178.roa File: 31070cfa-eefe-3512-a2fa-aaeba7433178.roa (raw, json) Hash identifier: hWtJ1rM/iWYrssR2T2blFlCSLC+q+uaijQpys5lIFZA= Subject key identifier: 55:D3:2D:B6:77:FB:6F:70:96:67:29:3F:A2:45:27:D7:E2:9D:C5:16 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52E9B4DB6AD23D394774D7B0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/31070cfa-eefe-3512-a2fa-aaeba7433178.roa Signing time: Fri 26 Sep 2025 15:14:52 +0000 ROA not before: Fri 26 Sep 2025 15:14:52 +0000 ROA not after: Thu 25 Dec 2025 16:14:52 +0000 asID: 8069 IP address blocks: 20.153.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:e9:b4:db:6a:d2:3d:39:47:74:d7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 15:14:52 2025 GMT Not After : Dec 25 16:14:52 2025 GMT Subject: CN=4cc84629-b778-4a6f-b594-66a43f5f823b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:11:1b:31:37:00:6f:a0:30:fc:b6:50:08:87: 85:04:27:f9:b5:08:1d:93:3b:ca:ef:25:9b:e4:4d: 1f:28:c1:5e:29:1e:1c:79:0b:db:6b:78:c0:18:af: 9d:69:cc:01:f4:3a:6f:ee:2f:22:82:c4:6f:d9:af: 1c:ac:f4:6b:67:10:62:78:6e:9b:f3:8a:f9:4e:7b: 97:61:dd:6c:76:4d:a9:19:da:1f:06:8c:1a:fb:8f: ce:c1:c1:ea:48:d7:b5:45:4e:d7:d8:2b:3b:8e:8c: f6:e1:2f:94:b7:82:af:ac:a1:f9:c7:31:62:4b:95: 35:23:23:32:50:b9:fb:ba:19:56:4c:bf:16:75:64: 84:bf:da:71:94:9c:b2:97:b3:8a:63:ca:9d:d1:3e: 26:38:17:a0:aa:12:26:a2:88:6d:0d:8c:a9:d4:e7: bc:3a:6f:cf:70:e7:7b:ce:68:24:08:57:03:59:99: bb:a0:5d:be:58:97:05:76:29:04:ed:43:9a:19:5e: 06:2c:6d:0f:6f:74:cc:51:a3:d0:8e:ee:cc:e0:52: 28:e4:bf:77:3a:8c:86:fb:e2:67:75:2c:c5:ec:55: f7:0f:3d:51:ee:4f:96:3f:6c:9f:b2:23:90:db:7f: 47:32:e5:fd:2c:ee:79:c0:94:53:bf:81:a0:3c:b0: 0d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D3:2D:B6:77:FB:6F:70:96:67:29:3F:A2:45:27:D7:E2:9D:C5:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/31070cfa-eefe-3512-a2fa-aaeba7433178.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:70:49:6f:42:8f:1e:0e:b4:eb:b4:1f:58:17:65:ec:40:ef: e5:a2:bc:2f:8d:94:d1:e2:11:df:3b:24:fd:4c:8e:77:ab:a1: 26:23:3a:49:85:b1:d6:90:8e:c7:de:78:61:d7:50:7c:f8:5b: 0d:2c:c8:e3:e0:8a:2e:dc:4e:bf:c6:98:ce:8d:3d:6d:d9:48: 61:a6:54:f1:8a:f6:d9:d0:25:cf:cc:f3:c1:51:e9:17:4a:cc: 69:4f:1b:57:f1:75:f9:aa:e6:5a:7f:02:25:da:67:2e:6e:96: 1d:a4:2a:7b:9a:5b:2a:c5:5b:30:db:f8:c1:c2:70:1e:53:46: 69:29:2b:85:64:3d:90:41:71:98:45:57:9d:c1:20:2e:a1:af: 09:df:5f:c7:6e:09:8a:ba:46:04:1b:12:9e:e0:33:66:2b:80: 0d:fa:92:fd:5b:4e:e1:b8:f4:4d:17:a9:fa:fe:d3:80:29:c5: c1:82:74:2f:fe:44:a1:da:ae:e3:9c:49:70:2c:74:e8:43:5d: 5d:ca:82:77:ac:db:0a:45:ad:30:fe:49:fb:81:d5:e2:a4:7e: e4:65:ac:de:33:38:4b:00:0d:5c:43:26:7a:67:bd:8d:7f:16: 1b:45:6e:b9:8d:ae:5a:3f:a9:09:fc:b6:68:99:70:83:fc:87: 7e:c5:eb:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtS6bTbatI9OUd017AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjE1MTQ1MloXDTI1MTIyNTE2MTQ1MlowLzEtMCsGA1UEAxMk NGNjODQ2MjktYjc3OC00YTZmLWI1OTQtNjZhNDNmNWY4MjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkREbMTcAb6Aw/LZQCIeFBCf5tQgdkzvK7yWb 5E0fKMFeKR4ceQvba3jAGK+dacwB9Dpv7i8igsRv2a8crPRrZxBieG6b84r5TnuX Yd1sdk2pGdofBowa+4/OwcHqSNe1RU7X2Cs7joz24S+Ut4KvrKH5xzFiS5U1IyMy ULn7uhlWTL8WdWSEv9pxlJyyl7OKY8qd0T4mOBegqhImoohtDYyp1Oe8Om/PcOd7 zmgkCFcDWZm7oF2+WJcFdikE7UOaGV4GLG0Pb3TMUaPQju7M4FIo5L93OoyG++Jn dSzF7FX3Dz1R7k+WP2yfsiOQ239HMuX9LO55wJRTv4GgPLANUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXTLbZ3+29wlmcpP6JFJ9fincUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzEwNzBjZmEtZWVmZS0z NTEyLWEyZmEtYWFlYmE3NDMzMTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRwSW9Cjx4OtOu0H1gXZexA7+WivC+NlNHiEd87JP1MjneroSYjOkmF sdaQjsfeeGHXUHz4Ww0syOPgii7cTr/GmM6NPW3ZSGGmVPGK9tnQJc/M88FR6RdK zGlPG1fxdfmq5lp/AiXaZy5ulh2kKnuaWyrFWzDb+MHCcB5TRmkpK4VkPZBBcZhF V53BIC6hrwnfX8duCYq6RgQbEp7gM2YrgA36kv1bTuG49E0Xqfr+04ApxcGCdC/+ RKHaruOcSXAsdOhDXV3Kgnes2wpFrTD+SfuB1eKkfuRlrN4zOEsADVxDJnpnvY1/ FhtFbrmNrlo/qQn8tmiZcIP8h37F678= -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:28 2025 by rpki-client