$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be6d61d-293d-3ed8-a651-1bf004bc5280.roa File: 8be6d61d-293d-3ed8-a651-1bf004bc5280.roa (raw, json) Hash identifier: Q6NSJ4xPa9l9JG4t6erhvnZ5NrnuGtLmkLgj6aqzBF0= Subject key identifier: C2:34:E2:11:28:C5:62:40:12:BB:75:B3:20:76:02:25:D4:00:97:45 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52A759031DE6AB2AEE37DE40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be6d61d-293d-3ed8-a651-1bf004bc5280.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 8069 IP address blocks: 20.157.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:59:03:1d:e6:ab:2a:ee:37:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=ecab045e-fdc0-482d-b3ea-238b5e6e4aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f8:32:3e:1b:b1:e3:89:2f:a1:d0:80:e8:76: ae:db:38:59:8d:f2:98:2e:7f:f4:69:38:e4:98:0f: 59:65:47:45:76:7c:dd:67:06:9f:bf:26:82:7c:88: fc:3d:c9:28:bb:94:09:73:7d:aa:a9:37:0f:b6:bb: 97:df:08:9e:52:3a:d4:85:0a:72:bb:b8:c3:73:5e: 07:d0:19:ea:3a:07:a0:53:28:8a:3d:83:fd:60:95: bd:be:a2:30:56:61:6f:b7:10:26:ba:32:2f:71:01: 02:9c:af:c9:22:a5:66:03:f7:ab:ab:e6:87:aa:57: 2a:bf:1b:ae:f8:22:4d:57:3a:75:2e:cd:a4:8a:1b: 0b:82:6a:b4:6b:92:4c:f7:05:94:7f:ad:94:0c:97: c2:6f:54:84:6f:a2:d6:fe:0d:a6:2f:a8:ab:68:c4: 85:39:4b:d9:d5:72:19:93:20:d5:9b:9f:b6:98:ed: c2:22:57:e4:59:02:fa:5a:b7:43:aa:23:aa:bd:e6: fd:74:cd:e6:8b:14:77:42:ec:79:4d:53:cc:4b:3f: 8f:86:1c:fd:7e:bc:18:5c:6f:8c:a7:5e:84:ca:dd: d7:8d:ce:ee:78:a0:d3:30:dd:84:a2:66:64:d1:6f: 45:b5:7a:37:eb:60:f8:79:a7:a1:3f:68:e4:fe:2e: 86:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:34:E2:11:28:C5:62:40:12:BB:75:B3:20:76:02:25:D4:00:97:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be6d61d-293d-3ed8-a651-1bf004bc5280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:a8:b2:d3:96:df:eb:3b:ee:09:39:22:57:13:fe:1e:3c:34: 9a:87:d4:3b:ac:1a:aa:89:6a:5f:83:a1:b1:85:4d:9b:14:ef: 96:d9:ea:d6:5c:dd:18:b4:c7:f6:ec:91:ee:68:79:77:7e:fe: 83:a2:ee:0f:78:d7:96:08:fe:d6:c5:81:d6:4b:27:47:2e:6f: 04:f0:4c:23:68:a2:70:fd:4e:71:65:db:1e:05:31:fb:17:54: 69:83:cf:98:24:b2:97:62:5a:91:3e:d9:29:5c:6b:f1:dc:75: 00:09:23:e8:0a:63:e5:b1:b5:38:bf:95:74:19:43:9b:cd:3d: 48:b3:59:46:ff:79:1f:79:93:80:e5:46:fd:92:d0:ef:d3:9d: 33:32:ce:b0:33:d3:9a:64:cb:8b:34:5d:17:a8:0f:8f:70:bf: f0:16:06:ef:0f:36:69:50:ef:fb:5d:71:fe:8d:b4:55:48:f5: 50:d0:55:48:cc:e9:36:cd:1b:f1:37:a9:60:e9:b5:ac:cc:75: 14:ab:b2:3a:04:63:72:94:02:37:37:0a:ac:65:73:5e:b6:29: 41:9f:54:f3:1b:3d:58:a5:98:7c:bf:a2:5b:50:88:88:85:ca: 67:76:2a:24:fb:73:94:a5:c7:57:c6:9f:e5:7a:40:bb:88:3d: 27:b7:e1:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1kDHearKu433kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZWNhYjA0NWUtZmRjMC00ODJkLWIzZWEtMjM4YjVlNmU0YWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/gyPhux44kvodCA6Hau2zhZjfKYLn/0aTjk mA9ZZUdFdnzdZwafvyaCfIj8Pckou5QJc32qqTcPtruX3wieUjrUhQpyu7jDc14H 0BnqOgegUyiKPYP9YJW9vqIwVmFvtxAmujIvcQECnK/JIqVmA/erq+aHqlcqvxuu +CJNVzp1Ls2kihsLgmq0a5JM9wWUf62UDJfCb1SEb6LW/g2mL6iraMSFOUvZ1XIZ kyDVm5+2mO3CIlfkWQL6WrdDqiOqveb9dM3mixR3Qux5TVPMSz+Phhz9frwYXG+M p16Eyt3Xjc7ueKDTMN2EomZk0W9FtXo362D4eaehP2jk/i6G5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMI04hEoxWJAErt1syB2AiXUAJdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGJlNmQ2MWQtMjkzZC0z ZWQ4LWE2NTEtMWJmMDA0YmM1MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyostOW3+s77gk5IlcT/h48NJqH1DusGqqJal+DobGFTZsU75bZ6tZc 3Ri0x/bske5oeXd+/oOi7g9415YI/tbFgdZLJ0cubwTwTCNoonD9TnFl2x4FMfsX VGmDz5gkspdiWpE+2Slca/HcdQAJI+gKY+WxtTi/lXQZQ5vNPUizWUb/eR95k4Dl Rv2S0O/TnTMyzrAz05pky4s0XReoD49wv/AWBu8PNmlQ7/tdcf6NtFVI9VDQVUjM 6TbNG/E3qWDptazMdRSrsjoEY3KUAjc3Cqxlc162KUGfVPMbPVilmHy/oltQiIiF ymd2KiT7c5Slx1fGn+V6QLuIPSe34QM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:51:27 2025 by rpki-client