$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f671a-d520-39bf-bbc0-7a9f1b087044.roa File: 433f671a-d520-39bf-bbc0-7a9f1b087044.roa (raw, json) Hash identifier: drim+eMyl45NaM/C/1yBsg/CSEhvJ2m00sswBThN6g8= Subject key identifier: 42:71:BE:7A:FE:61:DB:65:64:E5:CA:EE:39:57:7E:7F:4D:8F:6B:68 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA0D26F480D11D12C35BE97C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f671a-d520-39bf-bbc0-7a9f1b087044.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 8069 IP address blocks: 20.153.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6f:48:0d:11:d1:2c:35:be:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=2bc2465e-d107-4f5a-9a8d-3b60f88422d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ac:83:e4:04:ba:3e:c7:6f:c7:96:a8:eb:55: d5:08:cb:cf:04:19:f2:99:71:85:cd:a5:52:ab:23: 8e:b0:18:e5:c3:3d:44:29:e4:62:98:17:c8:17:d0: cc:03:83:cc:e3:57:e1:b7:3d:09:11:19:60:cf:d6: 3e:70:f2:ee:d9:76:6c:2c:a9:ee:20:72:dd:55:4c: c2:91:c2:49:9c:4d:8d:f1:b4:65:f4:8b:dd:e9:a9: 72:dc:fb:f2:38:29:45:f6:4a:3f:06:ce:dc:7e:78: 70:e0:bc:b0:00:e2:a8:9f:30:84:ac:45:8e:7a:d5: 54:75:f8:11:d9:19:22:3a:55:bd:93:3d:d4:b8:a8: a7:39:6b:2e:26:d8:27:3c:61:37:7b:5c:e7:da:a9: 86:f1:ec:dd:38:69:5a:cb:ac:c4:60:48:f5:61:48: 73:f5:19:8e:d4:b6:4b:8c:61:26:2f:35:f1:4c:6c: c7:82:1f:78:02:fc:47:df:6b:df:1e:f1:0a:45:c9: ea:5d:37:a8:c3:e8:27:a3:93:17:ee:7f:0d:8b:ce: 1b:fc:3a:63:81:2c:6d:a9:e9:33:98:20:ea:b7:c9: 0e:6d:72:28:eb:81:c8:5d:ba:1c:3c:c7:9f:27:b1: 77:7b:d0:15:6b:96:ce:e3:56:5a:75:8a:5e:e2:33: 39:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:71:BE:7A:FE:61:DB:65:64:E5:CA:EE:39:57:7E:7F:4D:8F:6B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f671a-d520-39bf-bbc0-7a9f1b087044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:8a:87:a7:a3:a2:a3:cb:86:4c:99:f1:3b:a9:cf:02:48:90: 52:7f:8e:b5:b1:e1:9b:a0:ec:3c:33:12:7b:9a:cc:48:ff:cf: 76:61:f8:5c:44:0d:78:f6:52:68:01:8d:3c:b6:1d:f1:93:e9: 7d:6f:33:15:0d:b6:40:e0:52:4c:aa:18:89:4f:b6:5f:07:59: 2e:5a:cb:7a:ff:61:04:0f:90:17:cc:77:15:47:db:a3:a9:be: c5:f5:67:2a:54:dd:65:c7:19:c4:2d:ed:b6:99:bf:bb:16:49: 63:11:68:30:54:1e:b2:1b:16:6b:47:ab:64:7b:42:07:8f:c4: 8a:85:55:74:1b:d5:02:34:f6:dc:f1:87:37:26:c8:3c:8f:79: 5e:32:06:37:b3:3e:4e:7d:72:4f:93:f3:67:8e:5e:b0:d3:02: 93:43:cb:88:59:3f:59:9a:bf:99:98:2f:07:d9:ba:d3:2e:67: 5e:6c:ec:77:d3:92:61:82:f6:ec:c0:3b:61:90:6c:eb:19:6d: ea:7f:bc:76:f4:93:21:d5:66:a1:9e:43:41:27:1c:c7:03:7f: 8c:68:ea:85:54:0f:48:cd:ca:a4:61:d9:3b:48:04:33:a0:86: 32:76:bc:00:0e:6b:47:f7:9c:67:28:50:2a:1f:da:b7:22:87: a7:1b:9d:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0m9IDRHRLDW+l8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MmJjMjQ2NWUtZDEwNy00ZjVhLTlhOGQtM2I2MGY4ODQyMmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqyD5AS6Psdvx5ao61XVCMvPBBnymXGFzaVS qyOOsBjlwz1EKeRimBfIF9DMA4PM41fhtz0JERlgz9Y+cPLu2XZsLKnuIHLdVUzC kcJJnE2N8bRl9Ivd6aly3PvyOClF9ko/Bs7cfnhw4LywAOKonzCErEWOetVUdfgR 2RkiOlW9kz3UuKinOWsuJtgnPGE3e1zn2qmG8ezdOGlay6zEYEj1YUhz9RmO1LZL jGEmLzXxTGzHgh94AvxH32vfHvEKRcnqXTeow+gno5MX7n8Ni84b/DpjgSxtqekz mCDqt8kObXIo64HIXbocPMefJ7F3e9AVa5bO41ZadYpe4jM56wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJxvnr+YdtlZOXK7jlXfn9Nj2toMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDMzZjY3MWEtZDUyMC0z OWJmLWJiYzAtN2E5ZjFiMDg3MDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+Kh6ejoqPLhkyZ8TupzwJIkFJ/jrWx4Zug7DwzEnuazEj/z3Zh+FxE DXj2UmgBjTy2HfGT6X1vMxUNtkDgUkyqGIlPtl8HWS5ay3r/YQQPkBfMdxVH26Op vsX1ZypU3WXHGcQt7baZv7sWSWMRaDBUHrIbFmtHq2R7QgePxIqFVXQb1QI09tzx hzcmyDyPeV4yBjezPk59ck+T82eOXrDTApNDy4hZP1mav5mYLwfZutMuZ15s7HfT kmGC9uzAO2GQbOsZbep/vHb0kyHVZqGeQ0EnHMcDf4xo6oVUD0jNyqRh2TtIBDOg hjJ2vAAOa0f3nGcoUCof2rcih6cbnbo= -----END CERTIFICATE-----Generated at Wed Nov 5 23:46:46 2025 by rpki-client