$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/312f2e5f-b35c-3eea-a603-29052d85ef87.roa File: 312f2e5f-b35c-3eea-a603-29052d85ef87.roa (raw, json) Hash identifier: GG9EnCU02elnXlvmYl6DbHEDD04L2f8+eVtF8R+OJ7A= Subject key identifier: 32:0C:3B:90:61:C7:A1:17:CC:7B:7A:A5:2E:87:AD:23:47:DE:F7:24 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52E9A7E42A8140CEC3DF8D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/312f2e5f-b35c-3eea-a603-29052d85ef87.roa Signing time: Fri 26 Sep 2025 15:14:46 +0000 ROA not before: Fri 26 Sep 2025 15:14:46 +0000 ROA not after: Thu 25 Dec 2025 16:14:46 +0000 asID: 8069 IP address blocks: 20.153.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:e9:a7:e4:2a:81:40:ce:c3:df:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 15:14:46 2025 GMT Not After : Dec 25 16:14:46 2025 GMT Subject: CN=6b1ad4a0-2c8a-4448-a2d1-84b4430ccd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cd:c4:84:75:bd:f7:4a:4a:5b:ac:13:2a:72: ff:e4:f5:bc:ce:77:b1:ca:d3:48:e1:fb:b6:5a:1d: 6c:20:5d:7d:eb:e2:7b:4c:67:d1:cb:ab:07:fc:9e: 95:f8:16:87:e6:a7:25:50:85:88:5d:1c:e4:e8:a7: 3d:a4:d7:81:d3:8f:6a:56:30:29:28:24:20:61:fb: 3d:36:bc:b5:a9:1b:ae:7b:2f:83:1b:c1:1b:83:b8: b9:25:02:9b:64:66:91:bc:0c:95:de:7d:4f:4c:84: 58:9b:08:9b:04:66:fb:10:41:44:cf:d8:69:46:32: 58:b1:1a:24:33:58:a3:4d:33:4d:06:86:ed:e0:94: 90:22:0f:7b:fb:e1:bc:2e:85:c3:e4:b9:00:c3:34: 9b:aa:ca:6d:00:ac:5f:e4:32:34:23:d7:36:e0:75: 3d:c8:bc:b8:83:6e:89:9f:44:cc:df:65:5f:db:a1: 7b:01:91:7e:ec:e8:40:b9:39:fb:af:35:8e:27:f1: dd:b5:3b:9c:dd:9b:e6:f0:19:89:d5:76:04:0a:1a: 0b:f1:64:f3:95:a1:59:21:eb:ed:65:a4:9e:76:d0: 1f:69:88:c3:20:05:f7:59:fe:d7:e7:64:51:ee:90: 28:34:2c:d2:a1:b5:0f:17:f4:0e:63:54:07:db:51: b6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0C:3B:90:61:C7:A1:17:CC:7B:7A:A5:2E:87:AD:23:47:DE:F7:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/312f2e5f-b35c-3eea-a603-29052d85ef87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:2a:29:0e:61:c7:0b:53:e4:89:21:59:59:49:27:82:46:b5: 4d:27:c1:8e:51:00:32:5a:81:ae:22:6b:86:94:d5:40:56:f8: 2f:ac:da:45:0b:14:7e:0b:8b:2d:3c:de:ea:d6:d3:dc:12:44: ec:2c:01:3a:1a:46:12:3c:63:bc:3a:ef:cf:7b:ff:0a:9d:5b: c6:89:38:a8:d2:47:7b:21:1d:35:e1:bf:36:98:77:59:7e:a4: 58:b3:53:f9:36:d1:5f:e1:89:3e:87:36:97:4b:24:ce:48:9d: 2b:19:f0:68:ba:46:84:d0:ed:b1:91:cc:df:78:5a:05:dc:72: 4c:b5:be:df:2f:59:90:30:30:aa:df:db:c4:97:37:db:94:a9: b0:f3:93:15:9f:b0:d0:9f:64:9e:c1:a1:b1:c2:0b:75:35:2d: 8a:0a:4a:9e:75:34:36:c1:69:aa:60:d6:b0:7b:27:45:58:e1: 35:f0:68:35:78:95:0b:47:ee:d5:7e:79:8d:60:b0:ba:60:19: 4b:7f:7e:cb:06:92:a4:92:53:f7:f5:5c:2d:78:a7:3d:2c:c4: a9:1a:7e:81:ee:d9:55:60:98:92:69:5a:4a:3e:5e:ec:ba:39: 83:2a:5a:61:4d:7e:6c:5c:c0:1b:da:a2:10:87:4e:03:31:79: 6a:e8:a1:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtS6afkKoFAzsPfjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjE1MTQ0NloXDTI1MTIyNTE2MTQ0NlowLzEtMCsGA1UEAxMk NmIxYWQ0YTAtMmM4YS00NDQ4LWEyZDEtODRiNDQzMGNjZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc3EhHW990pKW6wTKnL/5PW8znexytNI4fu2 Wh1sIF196+J7TGfRy6sH/J6V+BaH5qclUIWIXRzk6Kc9pNeB049qVjApKCQgYfs9 Nry1qRuuey+DG8Ebg7i5JQKbZGaRvAyV3n1PTIRYmwibBGb7EEFEz9hpRjJYsRok M1ijTTNNBobt4JSQIg97++G8LoXD5LkAwzSbqsptAKxf5DI0I9c24HU9yLy4g26J n0TM32Vf26F7AZF+7OhAuTn7rzWOJ/HdtTuc3Zvm8BmJ1XYEChoL8WTzlaFZIevt ZaSedtAfaYjDIAX3Wf7X52RR7pAoNCzSobUPF/QOY1QH21G24wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIMO5Bhx6EXzHt6pS6HrSNH3vckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzEyZjJlNWYtYjM1Yy0z ZWVhLWE2MDMtMjkwNTJkODVlZjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsqKQ5hxwtT5IkhWVlJJ4JGtU0nwY5RADJaga4ia4aU1UBW+C+s2kUL FH4Liy083urW09wSROwsAToaRhI8Y7w67897/wqdW8aJOKjSR3shHTXhvzaYd1l+ pFizU/k20V/hiT6HNpdLJM5InSsZ8Gi6RoTQ7bGRzN94WgXccky1vt8vWZAwMKrf 28SXN9uUqbDzkxWfsNCfZJ7BobHCC3U1LYoKSp51NDbBaapg1rB7J0VY4TXwaDV4 lQtH7tV+eY1gsLpgGUt/fssGkqSSU/f1XC14pz0sxKkafoHu2VVgmJJpWko+Xuy6 OYMqWmFNfmxcwBvaohCHTgMxeWroob4= -----END CERTIFICATE-----Generated at Mon Oct 20 14:52:02 2025 by rpki-client