$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823f884b-6301-377e-8d28-5834d52ead5c.roa File: 823f884b-6301-377e-8d28-5834d52ead5c.roa (raw, json) Hash identifier: /BG6K9bVEwOQFlNZplX44z98ew+sF+O0qDe7fiddD04= Subject key identifier: D0:F4:36:BD:04:01:31:63:54:7B:2F:25:C7:F0:50:2F:FD:5E:46:29 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52E9AB348F4A87815DBBD400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823f884b-6301-377e-8d28-5834d52ead5c.roa Signing time: Fri 26 Sep 2025 15:14:48 +0000 ROA not before: Fri 26 Sep 2025 15:14:48 +0000 ROA not after: Thu 25 Dec 2025 16:14:48 +0000 asID: 8069 IP address blocks: 20.153.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:e9:ab:34:8f:4a:87:81:5d:bb:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 15:14:48 2025 GMT Not After : Dec 25 16:14:48 2025 GMT Subject: CN=a9ecbcc0-e5a9-4f9e-9032-d25c760bf3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cb:26:ac:92:3a:5f:f3:9f:b9:c5:f9:89:d1: b1:1a:df:72:39:5a:fc:45:79:b0:e9:31:41:11:b7: 3a:54:2a:05:d2:23:42:c1:35:07:67:4f:5f:90:39: 21:e1:6c:57:5c:52:d1:8d:56:52:1a:7e:a9:6e:02: 78:0b:25:c4:8e:5e:67:59:07:ac:16:a0:19:d4:59: ad:d7:ce:78:fa:14:15:b2:93:ea:87:28:0d:e5:c7: ae:75:46:16:6a:6c:71:82:14:db:6d:dd:15:3d:51: bb:ae:11:3d:2a:18:c8:80:01:f5:bd:06:dc:59:c8: c3:bc:3c:86:dd:3f:44:5d:15:5c:e2:23:3f:1e:81: 22:25:8c:21:35:10:c1:0d:34:b2:ef:41:2e:32:f5: 1e:03:22:5e:88:15:d7:ae:79:16:f2:70:b9:05:90: 67:c4:db:6e:15:1b:8c:af:49:8d:51:5a:34:33:00: b0:eb:01:22:e9:89:50:8d:0f:65:1a:f5:d5:78:0d: 52:65:12:e4:98:5b:e4:5f:89:9f:95:ea:25:c5:ea: 52:0b:c1:f9:0c:a5:48:d3:3f:06:4c:28:27:a4:cf: f0:41:1e:25:7c:da:e3:ec:09:91:e0:e9:fc:28:d2: 64:4b:f5:24:19:17:23:cb:b8:7d:0f:8a:0a:f2:1f: c6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F4:36:BD:04:01:31:63:54:7B:2F:25:C7:F0:50:2F:FD:5E:46:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823f884b-6301-377e-8d28-5834d52ead5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:27:f7:84:c5:c2:ad:d0:02:73:c6:7b:1c:3e:07:f3:24:3c: 73:9a:d8:fd:72:4e:39:17:d3:bd:e4:eb:50:f0:d4:7c:91:b1: 11:e5:77:cd:31:31:56:b4:cf:1c:0a:60:4c:03:35:56:a4:a6: 71:ca:4f:26:b2:3f:29:74:4c:31:9d:41:52:09:25:d5:f8:67: e1:92:37:5f:5c:89:84:06:98:67:f9:e8:9d:59:2f:0e:6a:3d: 00:76:dd:08:ed:c7:ce:c4:89:27:fb:b5:4b:ce:6b:7f:80:92: fb:d4:5d:c9:79:5f:68:87:cd:7b:97:50:f0:39:00:09:8e:cb: 09:57:3c:a6:d5:41:3d:9d:dc:f6:46:a7:bc:82:8b:b6:cf:aa: 03:ba:c0:01:0f:c7:1a:a7:33:34:32:6c:62:ec:9d:c7:32:66: 1f:4e:29:3c:05:c4:30:e3:97:e2:7f:53:a6:45:7f:b1:3e:ab: a5:64:57:bf:ab:36:c1:0e:4e:1d:d4:15:21:84:6b:55:ea:9f: ac:1b:8d:7b:4e:0e:1e:8b:06:6f:05:9e:9a:9d:72:a5:20:69: f7:a4:e7:88:9a:30:64:84:b8:a4:4a:06:2a:43:91:0b:3d:7c: a4:4f:2b:d8:66:51:6e:3f:34:c8:52:01:fe:07:0f:ff:5f:0f: 30:87:b7:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtS6as0j0qHgV271AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjE1MTQ0OFoXDTI1MTIyNTE2MTQ0OFowLzEtMCsGA1UEAxMk YTllY2JjYzAtZTVhOS00ZjllLTkwMzItZDI1Yzc2MGJmM2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmssmrJI6X/OfucX5idGxGt9yOVr8RXmw6TFB Ebc6VCoF0iNCwTUHZ09fkDkh4WxXXFLRjVZSGn6pbgJ4CyXEjl5nWQesFqAZ1Fmt 1854+hQVspPqhygN5ceudUYWamxxghTbbd0VPVG7rhE9KhjIgAH1vQbcWcjDvDyG 3T9EXRVc4iM/HoEiJYwhNRDBDTSy70EuMvUeAyJeiBXXrnkW8nC5BZBnxNtuFRuM r0mNUVo0MwCw6wEi6YlQjQ9lGvXVeA1SZRLkmFvkX4mfleolxepSC8H5DKVI0z8G TCgnpM/wQR4lfNrj7AmR4On8KNJkS/UkGRcjy7h9D4oK8h/G4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFND0Nr0EATFjVHsvJcfwUC/9XkYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODIzZjg4NGItNjMwMS0z NzdlLThkMjgtNTgzNGQ1MmVhZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQn94TFwq3QAnPGexw+B/MkPHOa2P1yTjkX073k61Dw1HyRsRHld80x MVa0zxwKYEwDNVakpnHKTyayPyl0TDGdQVIJJdX4Z+GSN19ciYQGmGf56J1ZLw5q PQB23Qjtx87EiSf7tUvOa3+AkvvUXcl5X2iHzXuXUPA5AAmOywlXPKbVQT2d3PZG p7yCi7bPqgO6wAEPxxqnMzQybGLsnccyZh9OKTwFxDDjl+J/U6ZFf7E+q6VkV7+r NsEOTh3UFSGEa1Xqn6wbjXtODh6LBm8FnpqdcqUgafek54iaMGSEuKRKBipDkQs9 fKRPK9hmUW4/NMhSAf4HD/9fDzCHt38= -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:38 2025 by rpki-client