$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0913efcb-4c70-3cd9-bb9a-86850bbd6746.roa File: 0913efcb-4c70-3cd9-bb9a-86850bbd6746.roa (raw, json) Hash identifier: cq+gyyqjiCtuwPEj1zVWZBIch53E/iFMMc/YgN3Sy9I= Subject key identifier: 9A:9C:6D:D4:17:9B:E9:B5:3C:FF:34:59:3E:F1:03:86:76:5C:FC:43 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA97550D4C7E4F810A2688300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0913efcb-4c70-3cd9-bb9a-86850bbd6746.roa Signing time: Mon 27 Oct 2025 15:15:41 +0000 ROA not before: Mon 27 Oct 2025 15:15:41 +0000 ROA not after: Sun 25 Jan 2026 16:15:41 +0000 asID: 8069 IP address blocks: 20.153.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:75:50:d4:c7:e4:f8:10:a2:68:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 27 15:15:41 2025 GMT Not After : Jan 25 16:15:41 2026 GMT Subject: CN=18ea0d39-89cc-47e3-9d07-c9ae6570bfd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ed:9c:cc:b5:1a:ec:25:30:20:41:6b:45:9a: 81:99:d5:ad:38:b3:43:a3:97:65:b0:ab:68:05:93: d5:e3:e7:4e:6a:73:93:16:25:df:69:a1:e5:d0:5c: 15:64:13:bc:be:c5:53:ff:43:82:97:2c:3e:5a:4e: bf:60:56:99:a1:4b:d9:7a:99:ab:d3:4a:30:e6:2c: fc:ac:ed:43:80:82:48:0e:40:4d:f0:5e:25:6a:47: 7e:23:45:c1:28:f6:7d:b5:b8:26:97:65:1e:f2:64: 6b:b1:37:e1:f9:21:a6:ac:7f:76:42:98:32:fe:a8: 0a:46:60:7e:17:9b:88:bf:7c:3b:c3:52:c5:56:6f: 1b:23:25:58:c4:34:94:f0:66:e1:1e:97:50:ab:dc: 05:0e:5b:3e:11:6f:c1:82:5a:76:d8:d6:8f:46:90: c7:88:be:4d:8b:23:d9:52:81:25:8d:51:dc:fa:26: f6:e7:06:45:a3:0b:3a:57:13:e1:e7:17:e5:d8:82: 89:55:34:28:5d:30:dc:1a:61:51:6e:4e:19:f4:47: 97:f7:78:e8:0b:ef:7e:64:98:59:f7:e1:e9:df:bc: 8d:73:9e:44:88:80:ef:95:a8:bb:2d:ee:3d:e5:c9: a0:18:d9:57:6e:52:88:50:ff:a1:72:97:58:01:29: 41:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9C:6D:D4:17:9B:E9:B5:3C:FF:34:59:3E:F1:03:86:76:5C:FC:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0913efcb-4c70-3cd9-bb9a-86850bbd6746.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c7:89:2b:9b:e4:77:a3:fb:f1:d5:10:b5:a8:85:46:da:68: 4f:e9:d6:16:6f:ca:cb:c2:c5:75:71:42:04:4b:bf:d3:01:2a: 93:d7:7d:ae:27:56:3b:e0:7d:1f:19:77:43:63:a8:5d:6e:54: eb:68:25:e4:57:17:8e:5d:74:3e:98:68:e1:fc:f8:0d:70:93: 7d:93:5a:21:1c:ab:d5:ef:16:8a:f5:45:8e:42:26:a6:ac:2b: d3:86:70:cd:1d:73:40:e8:f7:bf:2e:9f:39:fd:71:0b:3c:85: 2d:49:2b:d1:d2:30:2f:5f:32:57:22:4e:a9:c3:c9:c5:c5:9d: 3f:47:31:85:25:23:a9:e5:31:47:c9:58:95:17:45:dd:06:74: fc:a7:d2:af:79:64:ba:91:f6:bb:5a:a5:dd:99:3e:03:81:26: 5e:68:7c:4f:b4:f8:87:c4:f8:9b:a4:f2:d0:fc:65:ba:56:c9: 5b:c8:e2:03:84:5a:06:9a:01:f2:63:29:75:c8:9f:e3:e6:ac: 38:23:04:e2:f9:62:5f:27:3f:01:86:a9:3f:78:cc:99:21:0a: 68:70:16:14:b0:38:e5:54:2a:ad:4f:de:47:c4:6d:c7:a3:9b: 99:80:8f:c2:db:37:ff:54:66:65:a8:7f:f3:02:f0:61:d2:93: 99:d9:3f:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupdVDUx+T4EKJogwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNzE1MTU0MVoXDTI2MDEyNTE2MTU0MVowLzEtMCsGA1UEAxMk MThlYTBkMzktODljYy00N2UzLTlkMDctYzlhZTY1NzBiZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+2czLUa7CUwIEFrRZqBmdWtOLNDo5dlsKto BZPV4+dOanOTFiXfaaHl0FwVZBO8vsVT/0OClyw+Wk6/YFaZoUvZepmr00ow5iz8 rO1DgIJIDkBN8F4lakd+I0XBKPZ9tbgml2Ue8mRrsTfh+SGmrH92Qpgy/qgKRmB+ F5uIv3w7w1LFVm8bIyVYxDSU8GbhHpdQq9wFDls+EW/Bglp22NaPRpDHiL5NiyPZ UoEljVHc+ib25wZFows6VxPh5xfl2IKJVTQoXTDcGmFRbk4Z9EeX93joC+9+ZJhZ 9+Hp37yNc55EiIDvlai7Le495cmgGNlXblKIUP+hcpdYASlBxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqcbdQXm+m1PP80WT7xA4Z2XPxDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDkxM2VmY2ItNGM3MC0z Y2Q5LWJiOWEtODY4NTBiYmQ2NzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjHiSub5Hej+/HVELWohUbaaE/p1hZvysvCxXVxQgRLv9MBKpPXfa4n VjvgfR8Zd0NjqF1uVOtoJeRXF45ddD6YaOH8+A1wk32TWiEcq9XvFor1RY5CJqas K9OGcM0dc0Do978unzn9cQs8hS1JK9HSMC9fMlciTqnDycXFnT9HMYUlI6nlMUfJ WJUXRd0GdPyn0q95ZLqR9rtapd2ZPgOBJl5ofE+0+IfE+Juk8tD8ZbpWyVvI4gOE WgaaAfJjKXXIn+PmrDgjBOL5Yl8nPwGGqT94zJkhCmhwFhSwOOVUKq1P3kfEbcej m5mAj8LbN/9UZmWof/MC8GHSk5nZP1o= -----END CERTIFICATE-----Generated at Wed Nov 5 10:19:40 2025 by rpki-client