$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7dc95a14-2a26-334d-b6a8-873f3200a247.roa File: 7dc95a14-2a26-334d-b6a8-873f3200a247.roa (raw, json) Hash identifier: Ye7m7y43cVK1MfVjw58urO7O3qkU46p5IovrE5+UOdo= Subject key identifier: 2D:A8:02:DA:62:9C:B3:38:64:57:18:7A:CC:6A:C9:7D:F3:2E:6B:CE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52E9A4B1942F511F45BCCEC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7dc95a14-2a26-334d-b6a8-873f3200a247.roa Signing time: Fri 26 Sep 2025 15:14:45 +0000 ROA not before: Fri 26 Sep 2025 15:14:45 +0000 ROA not after: Thu 25 Dec 2025 16:14:45 +0000 asID: 8069 IP address blocks: 20.153.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:e9:a4:b1:94:2f:51:1f:45:bc:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 15:14:45 2025 GMT Not After : Dec 25 16:14:45 2025 GMT Subject: CN=c414f924-c6d6-4d7e-9c14-1a18b126d9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bb:03:32:7a:d0:ac:55:e6:d7:59:19:a7:77: a8:1e:46:15:9a:51:0e:20:87:0e:b6:f9:9f:58:ea: ea:0b:ea:02:e1:88:65:37:5c:df:aa:4c:39:c3:66: 87:3c:fb:61:07:8b:93:f4:25:3b:b0:57:67:5c:a6: a0:c1:db:81:95:4f:37:24:2b:46:5f:63:1e:23:37: f8:45:8a:39:5f:87:94:81:d0:b1:d8:d5:a7:9d:4d: 12:63:01:38:87:07:05:55:a5:bd:81:57:d8:95:27: 6d:71:5b:0d:8a:5a:ee:91:d0:b6:92:2b:61:d2:61: 8b:fa:24:7f:06:49:f0:f4:72:77:b5:07:c2:6d:43: d1:3f:c3:c8:51:83:cd:f9:5c:c4:8d:b5:99:14:4f: 2c:1d:34:05:fd:b8:1b:ae:1f:37:11:8e:c5:f0:01: ce:99:2e:fb:5b:1c:89:99:f7:1f:8a:7e:1b:8e:72: f3:66:ab:f8:b4:7c:b7:be:71:f1:00:61:8f:2d:2a: c2:60:10:ec:81:8e:24:d6:ff:dc:7c:3a:8e:eb:d3: da:ac:ec:8f:15:ba:0e:4d:89:51:ba:d5:5e:0d:24: 53:3c:cc:da:2b:a0:c8:b2:f4:64:da:78:a7:6d:73: 73:a3:54:53:13:2e:37:f0:fb:ca:f4:cb:f7:be:5b: c9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A8:02:DA:62:9C:B3:38:64:57:18:7A:CC:6A:C9:7D:F3:2E:6B:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7dc95a14-2a26-334d-b6a8-873f3200a247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e1:93:7b:25:4c:23:20:c8:98:e7:f2:36:24:85:96:32:e3: 0f:00:27:fc:97:1e:07:96:2e:f9:45:77:e6:f5:e3:85:72:b7: ee:73:2a:a6:8f:3a:da:56:fa:37:e1:a0:ad:fc:6e:c6:67:ea: 8e:9f:9d:92:e0:73:6a:e7:cc:cb:84:b3:c5:0d:08:b3:0a:4d: 0c:32:1b:55:2d:b9:ff:f5:01:cf:6e:8f:25:12:26:ed:0a:07: 4c:ee:78:dd:e5:ed:83:2a:6a:60:0a:9b:86:6b:9a:ac:da:29: 62:2d:8e:e7:6f:2b:1d:7c:ff:22:5f:5c:02:67:66:cd:9e:76: 06:d5:27:e8:6d:5c:71:08:eb:fa:c2:c4:75:0f:ba:1c:ad:00: 31:ea:85:f0:f7:af:16:1b:27:7f:20:6a:5d:76:05:fe:a4:48: d1:ca:e9:d1:67:6d:c7:ff:8b:ea:c7:a9:da:df:7b:38:97:42: 7d:b9:7c:91:e3:e2:4b:f8:4e:11:84:34:05:a8:7f:20:86:cc: b6:37:ba:af:77:b2:70:bf:5d:5c:8a:43:9d:78:57:83:45:ac: 39:d8:f5:a5:93:89:5d:6f:eb:70:1b:ba:f3:32:8d:a1:4c:35: 78:89:46:62:65:14:6a:6b:ae:9d:24:12:73:2d:bb:3e:55:73: a7:39:8c:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtS6aSxlC9RH0W8zsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjE1MTQ0NVoXDTI1MTIyNTE2MTQ0NVowLzEtMCsGA1UEAxMk YzQxNGY5MjQtYzZkNi00ZDdlLTljMTQtMWExOGIxMjZkOWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrsDMnrQrFXm11kZp3eoHkYVmlEOIIcOtvmf WOrqC+oC4YhlN1zfqkw5w2aHPPthB4uT9CU7sFdnXKagwduBlU83JCtGX2MeIzf4 RYo5X4eUgdCx2NWnnU0SYwE4hwcFVaW9gVfYlSdtcVsNilrukdC2kith0mGL+iR/ Bknw9HJ3tQfCbUPRP8PIUYPN+VzEjbWZFE8sHTQF/bgbrh83EY7F8AHOmS77WxyJ mfcfin4bjnLzZqv4tHy3vnHxAGGPLSrCYBDsgY4k1v/cfDqO69ParOyPFboOTYlR utVeDSRTPMzaK6DIsvRk2ninbXNzo1RTEy438PvK9Mv3vlvJmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2oAtpinLM4ZFcYesxqyX3zLmvOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2RjOTVhMTQtMmEyNi0z MzRkLWI2YTgtODczZjMyMDBhMjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHThk3slTCMgyJjn8jYkhZYy4w8AJ/yXHgeWLvlFd+b144Vyt+5zKqaP OtpW+jfhoK38bsZn6o6fnZLgc2rnzMuEs8UNCLMKTQwyG1Utuf/1Ac9ujyUSJu0K B0zueN3l7YMqamAKm4ZrmqzaKWItjudvKx18/yJfXAJnZs2edgbVJ+htXHEI6/rC xHUPuhytADHqhfD3rxYbJ38gal12Bf6kSNHK6dFnbcf/i+rHqdrfeziXQn25fJHj 4kv4ThGENAWofyCGzLY3uq93snC/XVyKQ514V4NFrDnY9aWTiV1v63AbuvMyjaFM NXiJRmJlFGprrp0kEnMtuz5Vc6c5jL0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:26:53 2025 by rpki-client