$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f2865812-96b6-3483-9dce-a517a79d34c3.roa File: f2865812-96b6-3483-9dce-a517a79d34c3.roa (raw, json) Hash identifier: qq2/3JJkI26h3NkG8yz5FnV2+kTmlMRjB5GzDYjDeEk= Subject key identifier: 57:49:DD:C0:C3:6A:A7:66:46:14:0D:80:B4:0C:44:B0:D9:D2:A1:D0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52E9960F1FEFAFFBD74C0200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f2865812-96b6-3483-9dce-a517a79d34c3.roa Signing time: Fri 26 Sep 2025 15:14:38 +0000 ROA not before: Fri 26 Sep 2025 15:14:38 +0000 ROA not after: Thu 25 Dec 2025 16:14:38 +0000 asID: 8069 IP address blocks: 20.153.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:e9:96:0f:1f:ef:af:fb:d7:4c:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 15:14:38 2025 GMT Not After : Dec 25 16:14:38 2025 GMT Subject: CN=07c5b746-f62e-4706-b9b8-f0a1052105d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d3:92:14:e9:48:6e:d9:c0:32:de:dd:e9:c9: 4c:ca:32:5d:dc:30:4c:d9:ec:05:19:69:fa:c2:a6: 87:f3:88:4b:1c:12:ee:84:b0:16:70:7b:c7:b1:d4: 21:b4:72:fe:73:bb:a8:6c:cf:0a:58:b7:12:d4:7c: 08:7d:33:f8:16:7f:f3:b8:5d:80:ef:b2:ab:97:91: 9f:6a:8b:d9:a7:21:6c:a0:19:27:cc:f1:28:e8:d0: 9b:44:c7:88:95:1d:c2:db:68:61:52:1b:61:44:9c: 79:39:bb:a6:8c:32:20:02:62:df:74:0b:93:63:59: b9:b1:4f:ae:f0:34:35:80:40:cf:25:88:f4:dd:5e: 4c:4a:cf:43:65:9b:f8:5e:e1:fc:87:9c:c8:5d:b1: 3b:e9:4b:c5:3e:36:fc:e0:cb:44:9d:c2:a4:6b:c0: cc:2a:f0:8b:65:e1:38:94:88:9e:11:ae:68:19:99: 44:2e:7b:b2:bd:e8:47:c2:47:2d:70:d8:11:c1:d1: 28:35:fe:a1:f7:9f:54:c8:7c:b2:76:e0:96:fb:28: d1:25:f4:92:5a:ad:54:a2:31:aa:57:f1:c7:c5:0d: 19:63:15:8f:5f:b3:ad:2a:2d:78:b7:ee:33:aa:23: d9:8d:f9:95:a7:a9:9e:42:c7:00:fc:ce:b1:a6:b3: 67:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:49:DD:C0:C3:6A:A7:66:46:14:0D:80:B4:0C:44:B0:D9:D2:A1:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f2865812-96b6-3483-9dce-a517a79d34c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1c:05:49:65:ef:f0:b5:67:03:34:79:c4:d2:bf:70:94:94: 4a:7b:8f:ce:b3:8f:13:1e:f4:d4:f3:27:9d:43:be:a4:aa:c8: 11:fc:1b:40:19:d2:03:b0:16:0a:c5:5d:04:60:7f:fe:8a:00: cd:e4:3d:15:84:f3:ee:f5:be:2a:0d:b0:ac:b9:f2:39:a6:db: 15:ab:73:c7:2b:e8:d9:33:53:e9:b7:92:e8:69:93:af:56:2e: 57:05:53:56:b7:ce:ae:12:91:f1:fe:29:eb:2b:4f:77:4a:d6: 53:fc:cf:dc:5c:fa:b8:f6:0b:5c:45:69:4b:7b:98:44:b5:e1: db:f4:1b:25:8b:4f:9a:95:a9:d8:04:35:e9:a2:af:81:99:71: 9f:4b:ad:8b:9b:e1:a3:47:c3:66:10:5f:e1:42:04:ff:e6:7b: ef:54:39:d6:ea:35:4c:fe:bb:23:47:d1:64:98:8b:f8:96:96: d1:0c:82:e9:db:5a:5d:1d:9e:71:20:25:28:95:07:0e:d9:8b: c3:c9:b0:c3:6a:2e:b7:bd:a4:53:b4:23:46:59:f9:ff:fe:d1: fd:89:9e:c5:65:23:50:c2:9b:d2:21:b0:62:b4:2b:24:ed:f6: fc:9e:26:50:7b:00:1f:c5:da:50:3c:53:36:a0:32:23:ca:f4: 4d:1d:f9:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtS6ZYPH++v+9dMAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjE1MTQzOFoXDTI1MTIyNTE2MTQzOFowLzEtMCsGA1UEAxMk MDdjNWI3NDYtZjYyZS00NzA2LWI5YjgtZjBhMTA1MjEwNWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNOSFOlIbtnAMt7d6clMyjJd3DBM2ewFGWn6 wqaH84hLHBLuhLAWcHvHsdQhtHL+c7uobM8KWLcS1HwIfTP4Fn/zuF2A77Krl5Gf aovZpyFsoBknzPEo6NCbRMeIlR3C22hhUhthRJx5ObumjDIgAmLfdAuTY1m5sU+u 8DQ1gEDPJYj03V5MSs9DZZv4XuH8h5zIXbE76UvFPjb84MtEncKka8DMKvCLZeE4 lIieEa5oGZlELnuyvehHwkctcNgRwdEoNf6h959UyHyyduCW+yjRJfSSWq1UojGq V/HHxQ0ZYxWPX7OtKi14t+4zqiPZjfmVp6meQscA/M6xprNncwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdJ3cDDaqdmRhQNgLQMRLDZ0qHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjI4NjU4MTItOTZiNi0z NDgzLTlkY2UtYTUxN2E3OWQzNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYcBUll7/C1ZwM0ecTSv3CUlEp7j86zjxMe9NTzJ51DvqSqyBH8G0AZ 0gOwFgrFXQRgf/6KAM3kPRWE8+71vioNsKy58jmm2xWrc8cr6NkzU+m3kuhpk69W LlcFU1a3zq4SkfH+KesrT3dK1lP8z9xc+rj2C1xFaUt7mES14dv0GyWLT5qVqdgE Nemir4GZcZ9LrYub4aNHw2YQX+FCBP/me+9UOdbqNUz+uyNH0WSYi/iWltEMgunb Wl0dnnEgJSiVBw7Zi8PJsMNqLre9pFO0I0ZZ+f/+0f2JnsVlI1DCm9IhsGK0KyTt 9vyeJlB7AB/F2lA8UzagMiPK9E0d+fI= -----END CERTIFICATE-----Generated at Mon Oct 20 04:27:19 2025 by rpki-client