$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/799ddd93-8bb1-31db-b5aa-2f18d42eb259.roa File: 799ddd93-8bb1-31db-b5aa-2f18d42eb259.roa (raw, json) Hash identifier: BdSwUgfx3i+fcxuyXpv8OuCyr3RVO+TclIHpim/1gCM= Subject key identifier: C9:B9:4A:FE:15:AD:EC:81:87:2E:27:EF:9C:82:71:AD:D2:B2:28:D8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52E9A2467A6F9DEB6CA5FBE4 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/799ddd93-8bb1-31db-b5aa-2f18d42eb259.roa Signing time: Fri 26 Sep 2025 15:14:44 +0000 ROA not before: Fri 26 Sep 2025 15:14:44 +0000 ROA not after: Thu 25 Dec 2025 16:14:44 +0000 asID: 8069 IP address blocks: 20.153.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:e9:a2:46:7a:6f:9d:eb:6c:a5:fb:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 15:14:44 2025 GMT Not After : Dec 25 16:14:44 2025 GMT Subject: CN=2fc310f5-c344-4c53-aab4-780f89468d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:72:a3:bc:d9:3c:99:ea:42:a0:bc:aa:98: 7b:0d:cd:36:20:78:2a:ae:56:7a:d7:40:51:44:5e: 52:f4:2e:68:5b:39:ba:40:a8:15:97:b5:98:97:2d: 18:ac:f9:59:e0:29:f2:a6:7b:b4:31:cd:63:b8:08: 29:9f:d4:ce:ee:68:8e:06:74:9c:42:98:d9:01:19: 28:37:c7:6f:c7:7f:b0:5a:19:9b:c0:cd:6c:b4:8b: fd:47:a1:6a:d2:50:74:18:8a:e3:01:0f:8c:c0:20: 20:73:c7:53:13:77:09:ea:54:25:65:f0:a1:cc:d4: 89:87:e1:6f:8d:39:54:8c:80:46:ed:b9:40:43:7f: c8:f9:01:8f:33:a3:f1:8b:7b:2f:f6:58:97:94:18: 05:6f:89:4b:ad:cf:dd:e2:36:30:30:c2:c3:a6:8d: 04:4b:ca:84:c4:e6:e4:c5:c1:8e:bc:b5:43:5e:34: 1c:0f:c3:0d:9f:cd:97:74:d9:8b:f8:6d:46:99:84: 9e:5c:14:83:5d:a9:9e:44:12:d6:ff:59:89:54:d9: 93:32:92:84:0e:2c:16:41:e0:1b:f0:56:4d:63:9d: b3:6a:90:51:d3:31:7c:ea:67:14:33:37:5d:0b:d4: c8:a2:b4:c4:39:21:78:f0:62:34:a5:c0:0d:c8:16: c3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B9:4A:FE:15:AD:EC:81:87:2E:27:EF:9C:82:71:AD:D2:B2:28:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/799ddd93-8bb1-31db-b5aa-2f18d42eb259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:40:c0:72:7b:3f:9b:fd:64:ea:f2:35:f3:55:34:cc:2e:09: 9b:e5:f1:8f:18:9a:9d:29:e1:66:b9:49:6d:48:de:c6:e2:c0: c1:d2:a6:34:f5:d9:9a:d6:44:4d:b3:2e:ca:fa:2d:ae:42:01: 79:17:61:8c:6c:6c:a4:f2:51:7e:d2:e1:28:0e:f0:59:7c:b2: ba:da:28:87:36:ca:3c:a5:d1:eb:76:1d:f7:32:12:a4:04:99: bc:22:76:5a:34:33:7b:28:2e:b6:45:79:ed:3a:00:96:c8:8f: 82:51:34:f2:0e:66:8a:df:eb:72:e8:ca:fc:79:72:b8:48:bc: 7e:46:95:7e:f2:7f:e1:fc:1f:a4:68:1a:50:e3:fa:1a:a5:5d: 4c:35:14:02:0d:a1:9b:e9:0f:61:52:3b:8a:09:92:18:61:c6: 11:d6:00:b7:c5:c2:fd:7f:4f:7b:6d:3b:c0:d4:5b:b7:02:12: e0:02:39:27:7c:a6:a1:75:5e:71:90:7f:3e:31:cf:8f:c8:d5: e3:64:fc:cd:7b:45:38:9e:8e:4b:95:2c:70:90:3c:e7:78:66: 5b:43:a2:56:54:4e:30:c9:de:ee:39:e8:2a:e1:73:1a:70:27: 73:5d:7b:97:a1:98:eb:0c:0a:1f:8d:e8:46:85:75:78:36:a5: 99:c0:5f:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtS6aJGem+d62yl++QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjE1MTQ0NFoXDTI1MTIyNTE2MTQ0NFowLzEtMCsGA1UEAxMk MmZjMzEwZjUtYzM0NC00YzUzLWFhYjQtNzgwZjg5NDY4ZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraFyo7zZPJnqQqC8qph7Dc02IHgqrlZ610BR RF5S9C5oWzm6QKgVl7WYly0YrPlZ4Cnypnu0Mc1juAgpn9TO7miOBnScQpjZARko N8dvx3+wWhmbwM1stIv9R6Fq0lB0GIrjAQ+MwCAgc8dTE3cJ6lQlZfChzNSJh+Fv jTlUjIBG7blAQ3/I+QGPM6Pxi3sv9liXlBgFb4lLrc/d4jYwMMLDpo0ES8qExObk xcGOvLVDXjQcD8MNn82XdNmL+G1GmYSeXBSDXameRBLW/1mJVNmTMpKEDiwWQeAb 8FZNY52zapBR0zF86mcUMzddC9TIorTEOSF48GI0pcANyBbD7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMm5Sv4VreyBhy4n75yCca3SsijYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzk5ZGRkOTMtOGJiMS0z MWRiLWI1YWEtMmYxOGQ0MmViMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBAwHJ7P5v9ZOryNfNVNMwuCZvl8Y8Ymp0p4Wa5SW1I3sbiwMHSpjT1 2ZrWRE2zLsr6La5CAXkXYYxsbKTyUX7S4SgO8Fl8srraKIc2yjyl0et2HfcyEqQE mbwidlo0M3soLrZFee06AJbIj4JRNPIOZorf63Loyvx5crhIvH5GlX7yf+H8H6Ro GlDj+hqlXUw1FAINoZvpD2FSO4oJkhhhxhHWALfFwv1/T3ttO8DUW7cCEuACOSd8 pqF1XnGQfz4xz4/I1eNk/M17RTiejkuVLHCQPOd4ZltDolZUTjDJ3u456Crhcxpw J3Nde5ehmOsMCh+N6EaFdXg2pZnAX6g= -----END CERTIFICATE-----Generated at Mon Oct 20 04:27:31 2025 by rpki-client