$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6caa8ff9-1320-340a-be5a-a05ace7c9eb9.roa File: 6caa8ff9-1320-340a-be5a-a05ace7c9eb9.roa (raw, json) Hash identifier: jZi9uxccCwr7H+epsrniLgS4QOFue+32K6H8+ZUN+Rs= Subject key identifier: 98:7E:8E:78:FC:6D:01:35:49:40:64:3D:B6:6B:56:19:07:59:00:D1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52E9AE5F85C25F40D6E91100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6caa8ff9-1320-340a-be5a-a05ace7c9eb9.roa Signing time: Fri 26 Sep 2025 15:14:49 +0000 ROA not before: Fri 26 Sep 2025 15:14:49 +0000 ROA not after: Thu 25 Dec 2025 16:14:49 +0000 asID: 8069 IP address blocks: 20.153.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:e9:ae:5f:85:c2:5f:40:d6:e9:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 15:14:49 2025 GMT Not After : Dec 25 16:14:49 2025 GMT Subject: CN=3d70bfe0-d914-4732-aab8-04ae2d682dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e0:7f:7c:e0:ac:51:46:f7:9c:fa:8b:3a:7f: 29:13:f1:10:b7:1f:e1:e0:3b:ca:fd:8b:b7:d3:81: cb:94:1b:fa:f7:30:9c:a3:fb:e9:9b:47:d7:18:6f: 53:3d:4e:bd:ab:f7:95:51:a0:2e:49:c3:c5:5e:60: 30:89:92:82:f7:16:5b:15:d0:62:8d:b7:40:a1:e2: 84:07:9c:ab:53:a6:79:bf:9e:44:b7:a9:90:31:a4: 9e:b7:46:44:a3:88:8e:80:e1:7d:26:bd:52:6d:79: 53:ec:b7:8c:77:2f:b3:14:a4:88:82:ef:24:aa:6a: d6:1f:ab:bc:72:9f:60:d0:d2:d0:88:20:0b:b0:31: 62:7a:bd:34:f0:3b:7e:67:7a:7d:0a:6d:f8:68:b5: 9b:b3:19:a9:12:df:85:b3:02:60:c9:8f:3d:28:89: 72:94:74:79:54:d1:24:a5:0a:9f:b2:9a:1a:7d:2d: 53:c9:c6:74:6f:30:88:51:c8:f3:3f:66:ff:75:ef: 03:a3:20:b3:3d:4a:b4:3b:8c:fa:f0:fa:93:35:14: fe:66:7a:f4:6d:d1:32:ed:6d:9c:a2:80:06:d0:02: e9:0d:46:27:ed:d0:93:f3:5c:e7:5d:49:9c:04:ea: db:c8:16:9d:e0:af:17:50:7a:ee:e2:6b:af:24:b6: d7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7E:8E:78:FC:6D:01:35:49:40:64:3D:B6:6B:56:19:07:59:00:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6caa8ff9-1320-340a-be5a-a05ace7c9eb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:6e:71:cf:58:e2:22:8d:71:3e:20:f7:6a:52:ff:30:d3:9d: 49:9c:a5:fa:a2:1f:03:35:7b:16:00:0c:c1:46:cd:cf:b7:36: 92:e4:ff:e1:10:cb:e2:ba:38:6c:b1:12:b0:bb:31:fd:a4:b3: cf:7a:18:a3:f0:16:5e:88:2f:d4:48:8f:d7:ec:24:1d:df:6b: aa:65:6c:22:eb:6c:41:2c:e9:3e:49:c5:0e:98:c2:d6:be:cc: ba:73:26:ee:b1:07:87:7c:17:29:69:81:9d:6e:19:95:d7:ad: be:43:4e:c4:6d:18:a1:6d:91:92:bc:13:03:23:97:ca:a4:be: aa:25:2d:47:e6:58:17:b5:ac:72:4d:66:2c:79:67:0e:b7:e5: 5b:40:6b:a2:6c:58:0c:c0:fc:2b:82:08:1f:fe:df:20:68:0f: 48:8a:47:84:3e:67:ac:e1:5e:37:30:3f:9f:f8:76:b0:da:64: e1:1c:ac:6a:74:dd:cf:b0:78:92:56:7d:67:63:39:c1:39:00: 19:7c:52:ac:de:3a:50:aa:7d:14:0e:27:7f:9d:95:9b:31:9d: 92:60:2b:a2:c7:54:9b:bc:52:47:c4:42:82:ef:61:6c:f6:7a: 09:b5:d6:b4:7a:e3:fb:ce:ef:61:1c:98:e6:2f:37:09:f3:83: 3d:35:25:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtS6a5fhcJfQNbpEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjE1MTQ0OVoXDTI1MTIyNTE2MTQ0OVowLzEtMCsGA1UEAxMk M2Q3MGJmZTAtZDkxNC00NzMyLWFhYjgtMDRhZTJkNjgyZGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuB/fOCsUUb3nPqLOn8pE/EQtx/h4DvK/Yu3 04HLlBv69zCco/vpm0fXGG9TPU69q/eVUaAuScPFXmAwiZKC9xZbFdBijbdAoeKE B5yrU6Z5v55Et6mQMaSet0ZEo4iOgOF9Jr1SbXlT7LeMdy+zFKSIgu8kqmrWH6u8 cp9g0NLQiCALsDFier008Dt+Z3p9Cm34aLWbsxmpEt+FswJgyY89KIlylHR5VNEk pQqfspoafS1TycZ0bzCIUcjzP2b/de8DoyCzPUq0O4z68PqTNRT+Znr0bdEy7W2c ooAG0ALpDUYn7dCT81znXUmcBOrbyBad4K8XUHru4muvJLbXdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJh+jnj8bQE1SUBkPbZrVhkHWQDRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmNhYThmZjktMTMyMC0z NDBhLWJlNWEtYTA1YWNlN2M5ZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtucc9Y4iKNcT4g92pS/zDTnUmcpfqiHwM1exYADMFGzc+3NpLk/+EQ y+K6OGyxErC7Mf2ks896GKPwFl6IL9RIj9fsJB3fa6plbCLrbEEs6T5JxQ6Ywta+ zLpzJu6xB4d8FylpgZ1uGZXXrb5DTsRtGKFtkZK8EwMjl8qkvqolLUfmWBe1rHJN Zix5Zw635VtAa6JsWAzA/CuCCB/+3yBoD0iKR4Q+Z6zhXjcwP5/4drDaZOEcrGp0 3c+weJJWfWdjOcE5ABl8UqzeOlCqfRQOJ3+dlZsxnZJgK6LHVJu8UkfEQoLvYWz2 egm11rR64/vO72EcmOYvNwnzgz01JQY= -----END CERTIFICATE-----Generated at Mon Oct 20 04:27:32 2025 by rpki-client