$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9787ae2-b78b-316e-910a-4dea629b14f6.roa File: d9787ae2-b78b-316e-910a-4dea629b14f6.roa (raw, json) Hash identifier: s2Jclmy+Y6VLPGd4UOhg8fw6DiGSONgXdSJlinJJLaE= Subject key identifier: 04:84:0E:DB:5B:95:30:C6:46:84:3B:2B:F7:3E:7E:16:2C:AB:67:FC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B41E7097E65D478326EF65000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9787ae2-b78b-316e-910a-4dea629b14f6.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:09:7e:65:d4:78:32:6e:f6:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=9c7e54b6-2f4d-4261-b6b3-b5686665f2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:53:92:a1:e4:97:8e:dc:ad:c0:f1:a6:f5:32: 28:f6:86:36:3c:7f:fc:27:4f:a7:ae:fb:c7:16:10: e8:72:f2:ce:8a:07:1a:ef:ef:c2:5a:f3:ed:7d:e1: 06:93:52:0c:f3:73:5e:c8:22:3b:84:8b:13:ad:ec: 27:bd:c9:ba:9e:ca:9d:07:18:07:76:4a:a7:e7:3b: f4:f8:18:91:11:24:f8:99:09:6d:da:b4:d5:69:b7: 8b:07:57:b9:a2:d1:1c:c4:4d:2f:0e:41:f7:26:d8: 4b:5c:5e:5b:d1:90:6b:06:d8:e9:2b:a5:b5:c1:57: 04:2d:24:42:40:c0:10:5f:0d:0b:d3:27:fd:a2:cd: 79:7e:25:a1:4f:70:3b:0e:f5:6a:0c:b5:9f:48:b2: 17:fa:41:75:74:39:d3:58:39:d3:58:2d:2f:ed:42: f6:64:41:e7:37:55:c0:60:bd:dc:f6:d1:1a:af:31: 15:a9:fc:ad:44:10:f5:d7:30:ac:e7:e0:06:2c:3f: 49:c4:f9:36:3d:bc:b0:8c:1e:6b:e1:3a:91:28:67: a4:87:2c:74:56:f4:77:29:67:16:d8:f7:d4:14:cd: fa:c1:56:dd:af:84:3b:d8:be:88:59:25:4e:20:5f: 67:1c:14:21:39:3f:a4:ab:a6:63:e9:ea:32:eb:4c: 42:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:84:0E:DB:5B:95:30:C6:46:84:3B:2B:F7:3E:7E:16:2C:AB:67:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9787ae2-b78b-316e-910a-4dea629b14f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f0:07:64:ae:20:8f:d9:d6:86:46:f6:72:c4:f1:a3:f3:7d: 63:82:12:3c:9a:e4:2a:81:32:77:b5:07:4f:28:19:75:08:57: 98:51:62:bf:aa:04:dc:fd:c5:46:c4:74:e1:ce:31:3e:56:10: 9d:96:6c:dd:ec:32:e7:9a:9b:73:e8:f0:cc:9a:0b:6f:d0:29: fe:b9:22:b8:77:f9:8b:47:87:2f:fc:78:de:76:56:d5:14:35: 2a:43:48:b9:6f:a0:b4:43:8f:5c:95:88:d6:ba:ef:3e:7d:f3: 90:79:58:1e:c6:27:09:4a:1e:ed:21:9d:d2:d8:1e:f5:ce:de: 59:3e:33:a8:61:92:38:be:7a:2a:5b:b1:57:09:a2:b5:4b:89: d7:8c:cc:02:12:69:a3:a9:54:8f:ee:a4:a7:3c:d2:f3:73:c3: c8:64:66:1d:03:b0:cc:0e:35:b4:83:26:03:ae:4c:71:51:b5: 14:34:e3:ea:fa:9d:54:bc:6d:77:b7:d8:41:a3:5a:1e:c0:c5: f2:a1:a6:8e:73:68:6b:cb:85:61:be:fa:56:84:c1:72:84:bf: 2b:78:3f:4d:71:0e:ff:9b:6b:ac:c9:c6:12:01:fe:d2:1b:af: 89:8e:30:e7:99:bf:ff:75:cc:e0:3f:6d:b4:00:66:cf:91:48: 26:94:d0:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5wl+ZdR4Mm72UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk OWM3ZTU0YjYtMmY0ZC00MjYxLWI2YjMtYjU2ODY2NjVmMmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1OSoeSXjtytwPGm9TIo9oY2PH/8J0+nrvvH FhDocvLOigca7+/CWvPtfeEGk1IM83NeyCI7hIsTrewnvcm6nsqdBxgHdkqn5zv0 +BiREST4mQlt2rTVabeLB1e5otEcxE0vDkH3JthLXF5b0ZBrBtjpK6W1wVcELSRC QMAQXw0L0yf9os15fiWhT3A7DvVqDLWfSLIX+kF1dDnTWDnTWC0v7UL2ZEHnN1XA YL3c9tEarzEVqfytRBD11zCs5+AGLD9JxPk2PbywjB5r4TqRKGekhyx0VvR3KWcW 2PfUFM36wVbdr4Q72L6IWSVOIF9nHBQhOT+kq6Zj6eoy60xCJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASEDttblTDGRoQ7K/c+fhYsq2f8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDk3ODdhZTItYjc4Yi0z MTZlLTkxMGEtNGRlYTYyOWIxNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/wB2SuII/Z1oZG9nLE8aPzfWOCEjya5CqBMne1B08oGXUIV5hRYr+q BNz9xUbEdOHOMT5WEJ2WbN3sMueam3Po8MyaC2/QKf65Irh3+YtHhy/8eN52VtUU NSpDSLlvoLRDj1yViNa67z5985B5WB7GJwlKHu0hndLYHvXO3lk+M6hhkji+eipb sVcJorVLideMzAISaaOpVI/upKc80vNzw8hkZh0DsMwONbSDJgOuTHFRtRQ04+r6 nVS8bXe32EGjWh7AxfKhpo5zaGvLhWG++laEwXKEvyt4P01xDv+ba6zJxhIB/tIb r4mOMOeZv/91zOA/bbQAZs+RSCaU0Cs= -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:25 2025 by rpki-client