$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4da8097e-cbb4-35bc-9ec6-71f731776eae.roa File: 4da8097e-cbb4-35bc-9ec6-71f731776eae.roa (raw, json) Hash identifier: wRoPgvF75a1bl8RiRygquKaL3/IU6s8uBxa4pgUuu38= Subject key identifier: AF:A9:2D:AA:B9:63:50:0A:4F:4C:9A:CA:10:76:26:47:31:60:DF:06 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52E9B0CCC6DA17B512375080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4da8097e-cbb4-35bc-9ec6-71f731776eae.roa Signing time: Fri 26 Sep 2025 15:14:51 +0000 ROA not before: Fri 26 Sep 2025 15:14:51 +0000 ROA not after: Thu 25 Dec 2025 16:14:51 +0000 asID: 8069 IP address blocks: 20.153.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:e9:b0:cc:c6:da:17:b5:12:37:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 15:14:51 2025 GMT Not After : Dec 25 16:14:51 2025 GMT Subject: CN=a066e1c0-e722-4174-a6e4-ffb6734262fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:41:7d:8d:2e:87:5c:8a:d2:fa:77:00:c1:82: 57:4a:8d:2c:0a:76:97:61:1c:20:37:e9:9a:3e:c6: 82:12:83:b3:94:56:88:b4:6c:a9:d3:e8:df:08:f6: f6:eb:bb:ba:6c:27:bf:d3:12:ba:b4:31:70:23:1e: 80:01:ac:3c:62:d3:3f:2b:ad:68:6a:a9:7e:5d:59: 19:5f:3a:96:02:f1:84:a4:81:96:f3:b7:4a:c2:71: e9:d0:79:53:f1:9a:9c:fc:3e:4b:84:7e:cb:3d:51: 14:c1:8e:0a:41:ca:02:1d:09:4c:c7:1f:ba:b0:e4: 08:88:04:65:5f:0b:d7:49:f8:44:38:78:a3:78:67: 47:58:91:d4:27:3e:69:af:32:a3:af:fa:08:1a:48: 46:cc:45:52:35:2e:b9:5a:ff:aa:1f:2c:a1:cf:cb: 95:8a:7b:46:9e:0d:46:a3:24:48:ed:a4:bf:bb:6f: 59:64:a8:be:e2:fb:79:08:87:44:90:7f:e3:28:7c: 39:99:d1:8e:5c:a0:a7:4d:91:90:62:70:9e:14:69: 2d:27:6d:97:e5:d0:85:73:1d:c5:27:68:70:ed:51: 24:22:38:0c:71:3a:1a:b1:86:47:72:ba:9a:c7:6f: 7c:80:6c:e7:c0:6e:03:ec:3f:4d:cb:00:e8:e8:35: 3d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A9:2D:AA:B9:63:50:0A:4F:4C:9A:CA:10:76:26:47:31:60:DF:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4da8097e-cbb4-35bc-9ec6-71f731776eae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:32:0c:2d:e2:b8:0b:a5:2a:70:8a:eb:f9:d8:8c:3e:eb:dd: 63:03:03:b3:a5:67:91:04:7b:38:8f:46:23:72:9f:fb:c6:5e: 68:f7:24:8a:2a:4c:b1:3d:8e:43:23:75:28:1e:bf:43:56:91: 4c:4f:01:f9:a3:64:9e:8e:85:32:cf:0c:c7:c1:b6:6a:43:d0: 24:79:a8:d3:22:6d:b8:c3:71:2e:5a:dc:9e:e4:99:c9:fa:b7: 16:de:a9:50:79:78:c4:9b:e6:40:36:ee:ca:7b:d8:c8:9c:ea: 7c:86:76:bf:7a:91:79:d7:63:86:a3:0a:29:e6:30:bc:cd:d2: 84:98:f9:fb:63:0f:f1:e5:b7:34:9d:16:a4:4b:ca:1b:6d:e2: 34:72:db:9d:81:cc:e2:80:09:9d:26:01:6e:da:ef:ba:60:96: d4:45:14:f1:b4:43:37:2b:d9:12:7a:f4:3e:65:58:4f:54:fb: 2c:92:e7:18:fd:a4:bb:25:c4:b2:dd:7b:4c:79:07:5a:f2:5d: a5:e6:d8:46:76:6b:57:69:ae:e9:46:92:52:74:60:06:5a:3f: dc:fc:23:1e:5d:b0:6e:a3:07:e1:6e:d1:f4:84:31:8d:67:65: 6f:7d:e2:6f:35:51:f0:15:5a:a6:97:6c:a5:cb:e1:56:05:ce: 53:3b:d1:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtS6bDMxtoXtRI3UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjE1MTQ1MVoXDTI1MTIyNTE2MTQ1MVowLzEtMCsGA1UEAxMk YTA2NmUxYzAtZTcyMi00MTc0LWE2ZTQtZmZiNjczNDI2MmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUF9jS6HXIrS+ncAwYJXSo0sCnaXYRwgN+ma PsaCEoOzlFaItGyp0+jfCPb267u6bCe/0xK6tDFwIx6AAaw8YtM/K61oaql+XVkZ XzqWAvGEpIGW87dKwnHp0HlT8Zqc/D5LhH7LPVEUwY4KQcoCHQlMxx+6sOQIiARl XwvXSfhEOHijeGdHWJHUJz5przKjr/oIGkhGzEVSNS65Wv+qHyyhz8uVintGng1G oyRI7aS/u29ZZKi+4vt5CIdEkH/jKHw5mdGOXKCnTZGQYnCeFGktJ22X5dCFcx3F J2hw7VEkIjgMcToasYZHcrqax298gGznwG4D7D9NywDo6DU9AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+pLaq5Y1AKT0yayhB2JkcxYN8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGRhODA5N2UtY2JiNC0z NWJjLTllYzYtNzFmNzMxNzc2ZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJliMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQyDC3iuAulKnCK6/nYjD7r3WMDA7OlZ5EEeziPRiNyn/vGXmj3JIoq TLE9jkMjdSgev0NWkUxPAfmjZJ6OhTLPDMfBtmpD0CR5qNMibbjDcS5a3J7kmcn6 txbeqVB5eMSb5kA27sp72Mic6nyGdr96kXnXY4ajCinmMLzN0oSY+ftjD/HltzSd FqRLyhtt4jRy252BzOKACZ0mAW7a77pgltRFFPG0Qzcr2RJ69D5lWE9U+yyS5xj9 pLslxLLde0x5B1ryXaXm2EZ2a1dprulGklJ0YAZaP9z8Ix5dsG6jB+Fu0fSEMY1n ZW994m81UfAVWqaXbKXL4VYFzlM70So= -----END CERTIFICATE-----Generated at Mon Oct 20 14:50:39 2025 by rpki-client