$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24803b2e-172b-3508-a3e4-a9a666ba5d61.roa File: 24803b2e-172b-3508-a3e4-a9a666ba5d61.roa (raw, json) Hash identifier: pYdunpkK5UO5N7vkJS7Lf3KDSq2W/Jgr02Kx/gDaRlg= Subject key identifier: C3:3D:D7:28:FD:34:26:43:24:DF:69:55:A3:E4:AD:6C:50:DD:34:63 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA9754CBF9DD08A1A887AB740 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24803b2e-172b-3508-a3e4-a9a666ba5d61.roa Signing time: Mon 27 Oct 2025 15:15:39 +0000 ROA not before: Mon 27 Oct 2025 15:15:39 +0000 ROA not after: Sun 25 Jan 2026 16:15:39 +0000 asID: 8069 IP address blocks: 20.153.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:75:4c:bf:9d:d0:8a:1a:88:7a:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 27 15:15:39 2025 GMT Not After : Jan 25 16:15:39 2026 GMT Subject: CN=73411ca2-9064-4b6f-8182-b3839baa4afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:66:bd:51:79:54:46:5a:41:10:6f:20:51:b4: d3:c4:cc:40:1a:58:11:b4:a4:41:9a:ab:82:80:6a: 5c:22:05:f6:6d:8f:d5:6f:a4:59:a3:f8:93:80:6e: 52:bd:b4:eb:4e:1b:e3:2a:97:2e:43:53:49:d4:a3: bb:76:e2:b0:a9:3a:18:49:9b:3d:e6:ee:d2:f0:ee: 02:d5:c7:b0:8e:a5:f6:ab:d7:7a:3d:a8:c2:7a:59: 7f:11:2d:b8:34:ef:02:2c:21:7a:48:ca:44:02:c0: 80:72:3d:f5:e3:71:a1:8d:1f:c6:48:aa:d5:fc:26: ac:84:83:9b:12:e9:20:6c:18:16:09:1a:05:20:c9: 5a:00:84:e4:a6:4a:81:e6:34:ae:40:f2:f4:c5:85: e9:a4:05:d3:3a:05:dd:ac:dd:4c:05:a8:d2:6b:e0: d8:9a:60:c2:e2:11:3f:9b:8a:48:fc:95:6f:3c:76: ee:9c:2c:55:44:5e:4f:2e:f1:c5:4e:d2:d6:67:3a: 0c:c5:c5:85:56:0e:ce:f3:b3:9e:d8:e8:b6:eb:aa: 16:0a:61:1e:a1:fa:ee:0b:49:6d:65:e1:a2:51:e6: 9f:19:4f:dd:61:b2:6a:ef:10:49:7d:cf:4d:1b:36: 62:9e:2f:56:46:db:62:2a:9f:4f:ff:e9:9f:e8:42: 93:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3D:D7:28:FD:34:26:43:24:DF:69:55:A3:E4:AD:6C:50:DD:34:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24803b2e-172b-3508-a3e4-a9a666ba5d61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:2e:c5:66:3f:53:a0:ed:73:a4:f3:06:e8:1e:9f:0a:1d:2f: 33:45:1d:6a:52:ca:9d:0d:74:91:3d:69:56:45:9d:5e:0c:24: 9b:25:db:cc:a8:60:09:32:4f:d7:dc:d0:0e:d1:b5:f7:a9:eb: 85:c4:ed:a1:da:21:3b:2c:2c:b9:6d:30:b0:cf:db:0f:b0:49: e4:1d:5c:52:c3:39:a7:0a:37:a8:da:9c:b6:a4:72:13:d9:20: fe:54:31:9e:8d:91:2d:e8:ed:7e:f5:a8:ad:98:13:4a:8b:57: d2:49:f0:ee:af:84:36:dd:1a:01:9c:6e:7a:fb:9d:c7:25:0d: 48:65:e0:3b:9e:a8:f3:bc:ad:f1:24:18:c8:21:3f:33:3f:57: ee:44:ba:e9:e8:e9:0a:f9:01:39:44:56:66:3e:2c:90:09:f6: 38:55:b5:13:d9:53:03:33:05:72:e6:6b:13:f4:c8:ad:7a:f0: d5:07:9e:91:ba:03:b7:c9:89:b9:2b:04:86:c1:2c:3d:64:aa: 4d:e2:ee:1a:19:b9:ca:47:e4:50:f2:eb:d0:97:c6:dd:30:90: 8b:f8:55:2a:10:25:fa:8f:44:d7:de:51:e2:70:a3:a7:3d:6e: 76:cc:3e:68:09:f9:c7:35:15:d7:cf:11:ef:f2:40:c0:dd:a1: fc:78:06:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupdUy/ndCKGoh6t0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNzE1MTUzOVoXDTI2MDEyNTE2MTUzOVowLzEtMCsGA1UEAxMk NzM0MTFjYTItOTA2NC00YjZmLTgxODItYjM4MzliYWE0YWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2a9UXlURlpBEG8gUbTTxMxAGlgRtKRBmquC gGpcIgX2bY/Vb6RZo/iTgG5SvbTrThvjKpcuQ1NJ1KO7duKwqToYSZs95u7S8O4C 1cewjqX2q9d6PajCell/ES24NO8CLCF6SMpEAsCAcj3143GhjR/GSKrV/CashIOb EukgbBgWCRoFIMlaAITkpkqB5jSuQPL0xYXppAXTOgXdrN1MBajSa+DYmmDC4hE/ m4pI/JVvPHbunCxVRF5PLvHFTtLWZzoMxcWFVg7O87Oe2Oi266oWCmEeofruC0lt ZeGiUeafGU/dYbJq7xBJfc9NGzZini9WRttiKp9P/+mf6EKTuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMM91yj9NCZDJN9pVaPkrWxQ3TRjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjQ4MDNiMmUtMTcyYi0z NTA4LWEzZTQtYTlhNjY2YmE1ZDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUuxWY/U6Dtc6TzBugenwodLzNFHWpSyp0NdJE9aVZFnV4MJJsl28yo YAkyT9fc0A7Rtfep64XE7aHaITssLLltMLDP2w+wSeQdXFLDOacKN6janLakchPZ IP5UMZ6NkS3o7X71qK2YE0qLV9JJ8O6vhDbdGgGcbnr7ncclDUhl4DueqPO8rfEk GMghPzM/V+5Euuno6Qr5ATlEVmY+LJAJ9jhVtRPZUwMzBXLmaxP0yK168NUHnpG6 A7fJibkrBIbBLD1kqk3i7hoZucpH5FDy69CXxt0wkIv4VSoQJfqPRNfeUeJwo6c9 bnbMPmgJ+cc1FdfPEe/yQMDdofx4Bss= -----END CERTIFICATE-----Generated at Wed Nov 5 10:19:04 2025 by rpki-client