$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa File: d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa (raw, json) Hash identifier: /MLysB75YmddIvwc6ifUUflpGVGIorE7e9T6OQuyUHA= Subject key identifier: 2A:4C:63:60:EC:F9:44:DB:88:07:58:36:CA:64:2B:55:A1:D8:7B:E6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52E9B67B3C9BFA1B4BE691C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa Signing time: Fri 26 Sep 2025 15:14:53 +0000 ROA not before: Fri 26 Sep 2025 15:14:53 +0000 ROA not after: Thu 25 Dec 2025 16:14:53 +0000 asID: 8069 IP address blocks: 20.153.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:e9:b6:7b:3c:9b:fa:1b:4b:e6:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 15:14:53 2025 GMT Not After : Dec 25 16:14:53 2025 GMT Subject: CN=29db6d0c-6807-4ff5-85b7-8c29ac03ca07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4a:0a:57:f3:e0:dd:39:b9:c7:aa:5f:47:5b: b4:45:26:05:94:d4:8f:12:50:8d:8e:bb:da:9e:99: 35:17:3e:71:d5:24:9d:45:a5:4c:f8:38:cb:da:62: 96:28:d2:4e:c7:e7:fd:0c:45:4f:b6:8d:44:ac:2c: 72:c3:4f:6b:30:f8:ed:08:a4:40:48:02:61:56:7c: 69:ef:a6:fd:79:ff:a5:d5:85:9b:99:64:26:28:5f: ab:a6:27:42:67:03:fb:42:bf:b9:c3:d3:5b:a0:52: 16:b5:4f:cf:d9:d9:9f:75:d1:11:2f:ea:60:8f:23: e0:c1:7f:be:ed:24:9f:3f:50:dd:55:33:71:3b:4a: d8:d7:b7:57:a5:9e:2e:03:b3:b7:ce:f3:28:04:65: 5f:9e:12:98:6b:a1:f5:c5:fa:f6:1d:1c:8b:2b:40: c0:f9:3a:c7:8c:88:d2:0a:9b:c5:d4:c0:f6:1c:c8: 82:0c:2d:53:7e:08:a9:f5:68:aa:6d:2a:e5:98:ac: 41:33:2d:c7:8c:54:55:bd:d8:5a:21:90:68:f4:83: 9e:7b:6c:76:79:66:1e:31:fa:c1:0f:3a:20:c0:89: 47:8b:8b:cd:fe:14:93:c7:32:60:e7:9b:8c:d6:b4: eb:0f:15:8a:e6:fe:e4:cb:01:62:ed:83:df:63:ec: b2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4C:63:60:EC:F9:44:DB:88:07:58:36:CA:64:2B:55:A1:D8:7B:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:12:6f:b9:45:80:9c:35:c8:b1:db:9a:52:b2:20:75:7e:f5: 6d:85:6a:b3:da:e6:dc:d7:e1:f4:34:5e:8a:3c:cc:fe:8c:37: 9c:8e:55:05:84:4a:65:bc:0d:26:78:37:7e:f2:61:66:0b:9a: 5e:e9:30:11:16:e2:ae:a4:02:9c:c1:d0:35:64:dd:4d:c4:d1: c8:f8:d4:4e:98:e2:7d:1f:0c:ae:d3:70:93:ca:8f:48:11:3c: b5:91:20:db:64:a3:cf:73:20:c2:41:96:a4:7c:53:24:3c:b5: 8b:93:6b:20:c4:10:34:09:38:d4:b7:63:03:7c:2d:66:b8:cd: 37:82:19:00:1f:41:15:20:48:39:69:71:7e:cf:55:4d:e6:0b: e9:70:53:6c:62:56:65:b0:ad:ca:8e:dc:03:75:d6:da:a2:24: 36:13:e8:15:a4:3f:c2:b6:ed:99:2f:13:4c:18:e8:74:ab:50: 4e:75:6f:6c:29:0e:83:c5:2c:02:b7:07:a6:3d:24:1f:6c:14: 2d:09:47:e2:4d:4f:f1:cc:53:d0:f8:d6:56:b5:0d:26:22:35: 89:cd:4b:15:64:39:d1:b5:ed:13:7d:e7:ed:32:e0:0c:1e:b1: f2:76:b5:b7:03:ef:9c:5f:95:f4:f0:df:e5:5a:35:de:d2:51: 23:22:f9:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtS6bZ7PJv6G0vmkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjE1MTQ1M1oXDTI1MTIyNTE2MTQ1M1owLzEtMCsGA1UEAxMk MjlkYjZkMGMtNjgwNy00ZmY1LTg1YjctOGMyOWFjMDNjYTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUoKV/Pg3Tm5x6pfR1u0RSYFlNSPElCNjrva npk1Fz5x1SSdRaVM+DjL2mKWKNJOx+f9DEVPto1ErCxyw09rMPjtCKRASAJhVnxp 76b9ef+l1YWbmWQmKF+rpidCZwP7Qr+5w9NboFIWtU/P2dmfddERL+pgjyPgwX++ 7SSfP1DdVTNxO0rY17dXpZ4uA7O3zvMoBGVfnhKYa6H1xfr2HRyLK0DA+TrHjIjS CpvF1MD2HMiCDC1Tfgip9WiqbSrlmKxBMy3HjFRVvdhaIZBo9IOee2x2eWYeMfrB DzogwIlHi4vN/hSTxzJg55uM1rTrDxWK5v7kywFi7YPfY+yyWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpMY2Ds+UTbiAdYNspkK1Wh2HvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDNiMzk5NmQtZWU4Ny0z MDc1LThiZWYtZjA5ZDFmN2IyMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgSb7lFgJw1yLHbmlKyIHV+9W2FarPa5tzX4fQ0Xoo8zP6MN5yOVQWE SmW8DSZ4N37yYWYLml7pMBEW4q6kApzB0DVk3U3E0cj41E6Y4n0fDK7TcJPKj0gR PLWRINtko89zIMJBlqR8UyQ8tYuTayDEEDQJONS3YwN8LWa4zTeCGQAfQRUgSDlp cX7PVU3mC+lwU2xiVmWwrcqO3AN11tqiJDYT6BWkP8K27ZkvE0wY6HSrUE51b2wp DoPFLAK3B6Y9JB9sFC0JR+JNT/HMU9D41la1DSYiNYnNSxVkOdG17RN95+0y4Awe sfJ2tbcD75xflfTw3+VaNd7SUSMi+QE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:01:14 2025 by rpki-client