$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/292e8c9a-3098-3afc-842f-831ca4d85fe8.roa File: 292e8c9a-3098-3afc-842f-831ca4d85fe8.roa (raw, json) Hash identifier: PjN85DdGdc7btBTYYfqKfpfmbOqHkKhihzswd8FVUOk= Subject key identifier: F1:8A:6A:71:8B:C9:CE:45:EE:9D:22:FD:42:39:D4:79:69:8E:FC:F8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA9754DA68E0B634A139ACE40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/292e8c9a-3098-3afc-842f-831ca4d85fe8.roa Signing time: Mon 27 Oct 2025 15:15:40 +0000 ROA not before: Mon 27 Oct 2025 15:15:40 +0000 ROA not after: Sun 25 Jan 2026 16:15:40 +0000 asID: 8069 IP address blocks: 20.153.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:75:4d:a6:8e:0b:63:4a:13:9a:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 27 15:15:40 2025 GMT Not After : Jan 25 16:15:40 2026 GMT Subject: CN=8e9dd04c-8c6a-4211-8f08-87c8bb6978f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:06:06:c3:3f:69:41:1c:c8:45:35:3b:5d:02: f2:bc:6f:f3:6a:d8:aa:f4:56:76:dc:46:c9:be:a4: 78:df:fd:e7:bc:ab:3c:92:63:2f:fc:b4:7d:ac:99: d8:ec:78:f7:84:82:ca:38:aa:56:33:8e:3c:f7:71: af:16:85:8a:a9:a4:9b:05:1b:e8:51:be:3c:98:b1: 5a:81:b0:7b:8c:b2:bf:b3:54:21:dc:91:e1:71:67: b9:96:a6:df:52:30:de:b1:53:f5:31:c8:c5:97:70: c3:6d:18:30:dc:de:52:e1:62:f2:41:19:1a:b9:b5: cc:ed:bc:2a:19:d3:ce:22:09:5d:c0:16:d5:15:67: 0a:26:57:82:4b:e1:6b:b1:b6:87:2b:22:5c:5b:e6: db:bd:89:af:f1:d2:6b:37:59:93:94:e6:53:e3:ce: 2b:da:4e:83:e1:38:75:c5:39:cc:e6:25:75:73:85: b1:50:df:87:e0:28:6a:72:76:4a:01:a8:f5:6b:3e: c8:96:49:ad:92:56:16:f1:87:73:2e:04:ba:51:cb: 86:46:8a:89:54:e9:77:95:3e:22:f3:24:2e:c4:bf: b8:6e:71:e0:2f:5d:ec:4e:f6:74:77:37:fb:1b:ff: b1:fb:99:af:1c:cb:4b:87:a4:92:34:18:2b:6f:b4: b5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8A:6A:71:8B:C9:CE:45:EE:9D:22:FD:42:39:D4:79:69:8E:FC:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/292e8c9a-3098-3afc-842f-831ca4d85fe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:7d:bc:2c:d2:89:69:5a:fe:60:9e:87:18:9c:96:3c:77:51: eb:ac:3c:69:d8:72:a2:c4:52:e1:31:22:39:79:4d:c4:fb:58: 5a:da:e8:34:ff:78:86:78:d8:65:c6:1a:28:27:ba:8b:32:43: e1:49:b5:df:77:c9:49:a4:c7:33:b4:61:f6:7c:4e:53:bd:89: b6:ed:a6:45:13:a7:88:57:6c:49:50:6d:dc:3d:4a:50:3a:d9: f1:7d:be:5e:c3:ce:67:aa:c5:3b:39:3a:3e:31:b6:e3:5f:e9: ef:8a:cb:9b:73:23:43:7f:35:c1:c0:2c:38:b9:7c:63:f8:11: 36:76:96:ac:dd:d1:f4:ca:34:e4:f8:0c:bb:8d:97:cc:eb:72: 7f:c1:3f:cb:7f:f5:d4:14:07:9c:7d:6f:18:b0:2a:91:09:7a: 5f:11:08:ae:6a:00:71:61:ee:aa:21:2c:bf:01:3a:eb:d3:e0: 8b:88:44:4f:ab:1f:93:42:b8:83:f1:d1:99:d9:fe:2c:d5:46: f0:71:3e:1e:de:d3:56:dd:e8:1c:74:37:6e:22:4c:8f:59:5b: 10:2b:21:1f:1b:4c:80:f8:f9:47:5a:92:24:61:43:04:e6:85: 25:d5:2e:84:dc:2c:d3:8a:f3:d6:be:21:45:a6:fb:9e:19:b6: 87:7b:1d:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupdU2mjgtjShOazkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNzE1MTU0MFoXDTI2MDEyNTE2MTU0MFowLzEtMCsGA1UEAxMk OGU5ZGQwNGMtOGM2YS00MjExLThmMDgtODdjOGJiNjk3OGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwYGwz9pQRzIRTU7XQLyvG/zatiq9FZ23EbJ vqR43/3nvKs8kmMv/LR9rJnY7Hj3hILKOKpWM44893GvFoWKqaSbBRvoUb48mLFa gbB7jLK/s1Qh3JHhcWe5lqbfUjDesVP1McjFl3DDbRgw3N5S4WLyQRkaubXM7bwq GdPOIgldwBbVFWcKJleCS+FrsbaHKyJcW+bbvYmv8dJrN1mTlOZT484r2k6D4Th1 xTnM5iV1c4WxUN+H4ChqcnZKAaj1az7IlkmtklYW8YdzLgS6UcuGRoqJVOl3lT4i 8yQuxL+4bnHgL13sTvZ0dzf7G/+x+5mvHMtLh6SSNBgrb7S1tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGKanGLyc5F7p0i/UI51Hlpjvz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjkyZThjOWEtMzA5OC0z YWZjLTg0MmYtODMxY2E0ZDg1ZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKd9vCzSiWla/mCehxicljx3UeusPGnYcqLEUuExIjl5TcT7WFra6DT/ eIZ42GXGGignuosyQ+FJtd93yUmkxzO0YfZ8TlO9ibbtpkUTp4hXbElQbdw9SlA6 2fF9vl7DzmeqxTs5Oj4xtuNf6e+Ky5tzI0N/NcHALDi5fGP4ETZ2lqzd0fTKNOT4 DLuNl8zrcn/BP8t/9dQUB5x9bxiwKpEJel8RCK5qAHFh7qohLL8BOuvT4IuIRE+r H5NCuIPx0ZnZ/izVRvBxPh7e01bd6Bx0N24iTI9ZWxArIR8bTID4+UdakiRhQwTm hSXVLoTcLNOK89a+IUWm+54Ztod7HfA= -----END CERTIFICATE-----Generated at Wed Nov 5 10:19:04 2025 by rpki-client