$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/03035c0d-43ad-3251-9eae-f21c2270e539.roa File: 03035c0d-43ad-3251-9eae-f21c2270e539.roa (raw, json) Hash identifier: EmTJqX7U4fLRm0KrWnf0patprCqqN5Nbes2CTdYFqgI= Subject key identifier: 68:04:4B:E5:84:24:54:E2:5F:68:64:4D:71:BD:CD:E4:26:4A:D0:FE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA39D3A8505C9C323257C4100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/03035c0d-43ad-3251-9eae-f21c2270e539.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:3a:85:05:c9:c3:23:25:7c:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=5db23e62-c274-4ad4-9299-99e9099d9e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:df:4c:66:98:7b:e9:cf:9f:ee:75:eb:ad:87: 46:4a:2a:f1:8e:94:e3:0c:41:c0:77:97:b1:aa:59: ee:59:81:97:76:6a:5e:aa:c6:3c:9f:5d:9c:a0:90: 28:1f:cc:d7:ad:16:3c:8f:88:5b:0d:15:41:01:e5: 95:e0:79:dc:3f:ff:4d:50:9a:44:75:39:8b:62:5d: 2b:46:d2:ff:3e:65:11:e4:da:6c:59:61:6c:ef:eb: 05:91:4d:88:7c:9d:80:7f:a4:e2:42:89:82:e5:8e: 39:a5:81:19:e8:73:1c:46:6d:1e:ed:f1:86:18:9f: fe:06:78:09:ac:d9:7d:ef:91:91:ed:0d:b7:8d:90: 5f:84:12:79:b7:c7:77:ad:8b:18:e6:44:81:fc:cd: 5a:b1:bf:e3:c7:7c:b2:b4:2e:cb:b4:d0:16:3d:fe: 94:76:0c:31:a9:05:28:69:58:58:b1:b8:aa:0f:47: 7b:aa:ee:02:62:5c:c3:b5:82:a0:d2:77:51:47:c9: ec:67:23:c7:e9:4b:b9:4e:9b:fd:cf:f4:ae:91:d3: cf:d0:a7:4a:4e:9d:b2:c0:4c:2a:a1:52:f2:c6:21: b8:09:6a:81:46:f4:e9:b0:77:16:d7:e4:ac:96:7c: 80:28:a3:2e:4d:fa:c8:a8:6b:23:bf:46:49:f1:62: 13:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:04:4B:E5:84:24:54:E2:5F:68:64:4D:71:BD:CD:E4:26:4A:D0:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/03035c0d-43ad-3251-9eae-f21c2270e539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:4a:7e:bd:4a:53:51:98:2a:5f:a8:18:3a:b9:40:ee:10:cd: 15:a8:3f:6d:cf:fe:e6:c2:5f:16:92:a9:fd:8d:1b:b3:c7:d2: ff:68:ef:04:f0:3f:35:67:12:cb:b4:e7:3f:24:e5:af:c3:7f: b8:d6:0a:ed:24:c5:0a:e2:e9:a7:0b:0f:a2:25:d2:49:4d:02: d5:c1:02:93:ea:aa:ec:c6:6d:9f:6b:f0:d0:ec:d2:0d:ac:14: 24:37:de:50:c5:02:ec:ef:39:d6:0b:76:e0:a1:74:3a:aa:92: b0:39:b2:09:b2:be:5d:b9:8b:aa:e2:79:0e:ac:64:b9:5d:92: 6f:ad:df:13:91:e1:36:ba:82:7b:03:ca:7c:cc:36:17:67:9a: d9:65:cc:1d:00:ec:10:f5:47:99:68:00:94:f1:48:a2:4c:51: 34:ad:8b:2d:75:0a:50:93:67:78:6f:22:e9:f0:cf:f7:84:1c: 47:fb:aa:b3:65:f7:39:76:7c:4a:9b:4d:ed:cd:66:88:d9:78: 48:64:71:4c:eb:23:21:8c:a4:d5:89:80:5b:a4:fa:b0:9b:9e: 38:40:9a:a1:bc:78:be:96:73:d9:45:84:8b:1f:aa:83:94:3b: ed:77:a7:12:b4:e6:c0:9f:69:b2:63:2c:99:9d:7a:89:e9:e0: 62:4c:85:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTqFBcnDIyV8QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NWRiMjNlNjItYzI3NC00YWQ0LTkyOTktOTllOTA5OWQ5ZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN9MZph76c+f7nXrrYdGSirxjpTjDEHAd5ex qlnuWYGXdmpeqsY8n12coJAoH8zXrRY8j4hbDRVBAeWV4HncP/9NUJpEdTmLYl0r RtL/PmUR5NpsWWFs7+sFkU2IfJ2Af6TiQomC5Y45pYEZ6HMcRm0e7fGGGJ/+BngJ rNl975GR7Q23jZBfhBJ5t8d3rYsY5kSB/M1asb/jx3yytC7LtNAWPf6UdgwxqQUo aVhYsbiqD0d7qu4CYlzDtYKg0ndRR8nsZyPH6Uu5Tpv9z/SukdPP0KdKTp2ywEwq oVLyxiG4CWqBRvTpsHcW1+SslnyAKKMuTfrIqGsjv0ZJ8WITAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgES+WEJFTiX2hkTXG9zeQmStD+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDMwMzVjMGQtNDNhZC0z MjUxLTllYWUtZjIxYzIyNzBlNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJm/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9Kfr1KU1GYKl+oGDq5QO4QzRWoP23P/ubCXxaSqf2NG7PH0v9o7wTw PzVnEsu05z8k5a/Df7jWCu0kxQri6acLD6Il0klNAtXBApPqquzGbZ9r8NDs0g2s FCQ33lDFAuzvOdYLduChdDqqkrA5sgmyvl25i6rieQ6sZLldkm+t3xOR4Ta6gnsD ynzMNhdnmtllzB0A7BD1R5loAJTxSKJMUTStiy11ClCTZ3hvIunwz/eEHEf7qrNl 9zl2fEqbTe3NZojZeEhkcUzrIyGMpNWJgFuk+rCbnjhAmqG8eL6Wc9lFhIsfqoOU O+13pxK05sCfabJjLJmdeonp4GJMhSc= -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:33 2025 by rpki-client