$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a520f29-bff6-34eb-b254-1d131d623d04.roa File: 9a520f29-bff6-34eb-b254-1d131d623d04.roa (raw, json) Hash identifier: +Hf2ep/bE1k/MeoUf/W8a4qqxU9MFrKOuh/vKBvvWkk= Subject key identifier: B1:B7:7C:25:37:C7:2E:69:16:A4:E3:B1:FB:3B:F7:25:3E:EC:FD:D8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52E990435EB870C94BA7EB70 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a520f29-bff6-34eb-b254-1d131d623d04.roa Signing time: Fri 26 Sep 2025 15:14:35 +0000 ROA not before: Fri 26 Sep 2025 15:14:35 +0000 ROA not after: Thu 25 Dec 2025 16:14:35 +0000 asID: 8069 IP address blocks: 20.153.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:e9:90:43:5e:b8:70:c9:4b:a7:eb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 15:14:35 2025 GMT Not After : Dec 25 16:14:35 2025 GMT Subject: CN=e50f600f-c937-4764-9e37-457db4d3b8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3a:3f:e9:e1:4c:25:ef:df:8a:99:a8:a1:46: 70:28:84:28:1c:26:c0:0e:2e:4d:af:a1:c4:ec:53: c8:be:95:af:48:58:bc:d1:5e:a8:3f:a4:bd:2e:fa: b6:84:af:e0:f1:f0:16:27:58:5c:05:4e:ed:24:e9: c2:d4:b5:9a:8f:d8:d4:df:1e:91:42:81:f9:d6:b2: 17:ae:a9:cd:c5:71:b5:54:4d:a5:d0:cf:fd:d0:c7: a0:8d:78:ad:63:8e:e5:73:9e:10:bb:d2:fd:1f:26: 96:aa:de:d7:7c:15:b0:65:40:1f:54:8a:a6:34:ac: 60:ca:49:24:a4:b2:af:d5:9c:7b:b3:60:af:90:d4: aa:87:39:80:03:96:48:c9:41:1e:10:5a:84:af:92: b7:6d:f4:17:cf:d9:9c:d4:fa:8e:24:9c:ec:39:1f: db:21:bf:b2:ea:83:63:59:78:92:58:c4:51:8e:3e: 14:d6:2e:71:0f:ee:a7:40:d5:b7:fb:ba:18:ff:39: 0d:87:5b:35:04:73:d0:16:9d:6c:44:7e:6c:2e:f9: 98:f1:3c:87:50:da:5f:e7:bc:49:9f:e5:a6:de:e4: 81:70:12:f1:14:77:9e:60:54:80:45:ba:fd:4f:a0: b5:3d:5b:de:48:07:06:70:c0:72:2b:c0:b5:83:6e: 0d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B7:7C:25:37:C7:2E:69:16:A4:E3:B1:FB:3B:F7:25:3E:EC:FD:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a520f29-bff6-34eb-b254-1d131d623d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:28:e7:ca:e2:7c:6d:2e:ae:53:46:3a:a0:3a:e4:72:51:e8: fd:53:bc:8d:7d:fa:93:1d:ec:66:6d:8d:49:0f:54:3f:f1:af: ac:cc:dd:d8:72:83:3d:ba:2c:1f:5d:51:3c:79:1a:ca:7e:e7: 26:c6:09:e8:a6:8a:dc:83:b3:36:69:7d:92:8f:fd:55:f5:ce: 6d:53:ea:ce:6d:22:a8:5d:7e:6d:48:98:4e:88:05:97:08:9d: d4:94:2c:ce:c6:db:22:3a:17:8e:f7:03:f1:33:65:86:ec:b6: c2:77:5e:50:d3:ad:c9:7b:6c:25:fb:7a:31:25:0d:25:81:51: 23:29:f6:91:05:d6:a6:cd:f2:e7:24:a9:f1:7b:ab:78:ba:f1: ce:d2:27:0b:e2:16:60:32:1d:d0:92:1c:6b:b8:c7:6e:e6:8a: eb:a8:77:47:c9:9b:56:99:38:13:61:a4:ea:35:c8:f3:15:ac: b8:5f:c6:2c:b0:c7:02:57:e3:d3:95:2a:9b:b8:63:12:5b:be: 99:7b:9b:72:df:9c:c9:29:68:df:cd:f6:ee:f4:3b:82:59:97: 19:bd:8c:48:8a:8b:84:a4:08:46:fb:dd:4a:39:a0:cc:8f:77: 3e:b1:f0:b4:a1:21:48:8e:fb:c2:0d:73:3e:87:27:e4:f3:f7: 4e:6d:a1:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtS6ZBDXrhwyUun63AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjE1MTQzNVoXDTI1MTIyNTE2MTQzNVowLzEtMCsGA1UEAxMk ZTUwZjYwMGYtYzkzNy00NzY0LTllMzctNDU3ZGI0ZDNiOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3To/6eFMJe/fipmooUZwKIQoHCbADi5Nr6HE 7FPIvpWvSFi80V6oP6S9Lvq2hK/g8fAWJ1hcBU7tJOnC1LWaj9jU3x6RQoH51rIX rqnNxXG1VE2l0M/90MegjXitY47lc54Qu9L9HyaWqt7XfBWwZUAfVIqmNKxgykkk pLKv1Zx7s2CvkNSqhzmAA5ZIyUEeEFqEr5K3bfQXz9mc1PqOJJzsOR/bIb+y6oNj WXiSWMRRjj4U1i5xD+6nQNW3+7oY/zkNh1s1BHPQFp1sRH5sLvmY8TyHUNpf57xJ n+Wm3uSBcBLxFHeeYFSARbr9T6C1PVveSAcGcMByK8C1g24NzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLG3fCU3xy5pFqTjsfs79yU+7P3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWE1MjBmMjktYmZmNi0z NGViLWIyNTQtMWQxMzFkNjIzZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4o58rifG0urlNGOqA65HJR6P1TvI19+pMd7GZtjUkPVD/xr6zM3dhy gz26LB9dUTx5Gsp+5ybGCeimityDszZpfZKP/VX1zm1T6s5tIqhdfm1ImE6IBZcI ndSULM7G2yI6F473A/EzZYbstsJ3XlDTrcl7bCX7ejElDSWBUSMp9pEF1qbN8uck qfF7q3i68c7SJwviFmAyHdCSHGu4x27miuuod0fJm1aZOBNhpOo1yPMVrLhfxiyw xwJX49OVKpu4YxJbvpl7m3LfnMkpaN/N9u70O4JZlxm9jEiKi4SkCEb73Uo5oMyP dz6x8LShIUiO+8INcz6HJ+Tz905tocc= -----END CERTIFICATE-----Generated at Mon Oct 20 04:27:11 2025 by rpki-client