$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/582c9230-96ab-3e98-b9e4-388350b12133.roa File: 582c9230-96ab-3e98-b9e4-388350b12133.roa (raw, json) Hash identifier: kpryrzuc9IcUWtG+QFfzTbam6TV+1kEFnP50e9mFCZ4= Subject key identifier: AA:57:AA:CA:02:5F:EA:D2:29:D2:FB:63:DD:E6:3F:86:7E:F7:71:63 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA39D3C24451CDFEE60498580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/582c9230-96ab-3e98-b9e4-388350b12133.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:3c:24:45:1c:df:ee:60:49:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=b421cbb5-8037-4b41-a8c4-9931205bc79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:87:17:7b:e2:24:51:3b:c8:ae:c0:fb:55:80: fe:05:63:c5:5d:69:6b:da:1c:ca:a1:fe:b3:5c:3f: af:51:0d:1e:b4:b3:72:ab:b8:ee:6b:5c:aa:a3:9b: 8a:d6:06:3e:3e:2d:46:ea:67:3a:bc:59:f5:67:8e: 10:5c:8d:c9:18:1a:52:03:76:83:21:3d:6b:bb:4a: 3d:1d:38:0c:13:81:6f:5c:b4:ce:8c:20:93:22:6c: 19:59:43:ef:e3:2d:a3:1f:8a:7f:44:cd:bd:3a:11: 8f:80:41:c1:5b:7b:38:0f:9d:9d:0a:de:bb:39:c5: 33:6d:f2:7d:2a:2e:5c:20:dd:2d:d6:87:56:0b:0c: c7:04:73:b6:5d:8a:49:c2:a6:1e:60:0c:75:f7:70: f0:5d:04:40:e4:2d:11:57:49:3e:40:9f:e4:70:f2: 66:b7:27:45:88:41:b8:95:c1:39:5b:d7:66:60:a5: ee:dc:aa:4b:89:83:55:1c:7d:ae:be:34:95:34:6b: 58:a7:cc:4b:9c:04:3d:a3:b5:35:58:19:cb:ad:0d: 87:ce:17:99:a8:aa:f4:92:f4:ed:a8:0c:be:fe:cf: f6:48:af:59:1c:f8:14:28:f3:cc:7a:98:c6:51:42: d6:a5:7f:29:aa:26:0e:c3:bb:38:8b:72:e1:d9:ee: 68:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:57:AA:CA:02:5F:EA:D2:29:D2:FB:63:DD:E6:3F:86:7E:F7:71:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/582c9230-96ab-3e98-b9e4-388350b12133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:7b:2c:01:6b:08:89:45:64:c8:8b:d9:18:53:34:8f:d7:89: 1a:eb:d4:89:af:79:15:e9:9c:a8:07:41:dc:6f:f0:d2:92:aa: b2:a5:03:59:26:95:a2:8b:34:4d:e0:a4:2e:05:a0:64:99:e6: c1:75:49:e2:66:7c:15:a5:dc:c0:a5:8d:e0:c5:79:e2:04:ca: 79:a6:d9:0a:97:8e:c9:a3:25:9c:ce:2b:f6:6a:10:79:23:8c: 31:0a:8c:10:d5:f6:2b:ab:7e:26:8a:79:0f:36:de:b3:27:61: 55:79:13:ce:d0:80:cf:2f:ed:34:04:a2:10:83:41:e6:94:10: f2:4b:6d:db:e1:7d:bb:11:1d:8c:35:e2:53:89:5b:c5:a2:e5: c3:de:57:76:a7:79:66:f8:62:9a:1f:94:d5:f4:7c:28:0b:7e: a3:85:2b:be:51:d3:15:76:ca:7d:28:2b:8e:e5:8a:6e:49:23: b6:bf:e9:d4:c2:5b:70:7a:e1:72:bc:37:2d:12:d7:47:04:32: d2:cd:03:1f:44:0b:bb:c6:ae:52:ef:15:aa:b4:03:24:55:67: 5f:af:03:5e:aa:33:46:71:84:50:da:a5:57:a9:ab:a6:b5:aa: 8c:a6:7d:9a:58:f6:4c:7e:16:a6:12:80:f8:8c:0f:4a:15:c4: 95:48:44:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTwkRRzf7mBJhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YjQyMWNiYjUtODAzNy00YjQxLWE4YzQtOTkzMTIwNWJjNzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ocXe+IkUTvIrsD7VYD+BWPFXWlr2hzKof6z XD+vUQ0etLNyq7jua1yqo5uK1gY+Pi1G6mc6vFn1Z44QXI3JGBpSA3aDIT1ru0o9 HTgME4FvXLTOjCCTImwZWUPv4y2jH4p/RM29OhGPgEHBW3s4D52dCt67OcUzbfJ9 Ki5cIN0t1odWCwzHBHO2XYpJwqYeYAx193DwXQRA5C0RV0k+QJ/kcPJmtydFiEG4 lcE5W9dmYKXu3KpLiYNVHH2uvjSVNGtYp8xLnAQ9o7U1WBnLrQ2HzheZqKr0kvTt qAy+/s/2SK9ZHPgUKPPMepjGUULWpX8pqiYOw7s4i3Lh2e5o1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpXqsoCX+rSKdL7Y93mP4Z+93FjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTgyYzkyMzAtOTZhYi0z ZTk4LWI5ZTQtMzg4MzUwYjEyMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFR7LAFrCIlFZMiL2RhTNI/XiRrr1ImveRXpnKgHQdxv8NKSqrKlA1km laKLNE3gpC4FoGSZ5sF1SeJmfBWl3MCljeDFeeIEynmm2QqXjsmjJZzOK/ZqEHkj jDEKjBDV9iurfiaKeQ823rMnYVV5E87QgM8v7TQEohCDQeaUEPJLbdvhfbsRHYw1 4lOJW8Wi5cPeV3aneWb4YpoflNX0fCgLfqOFK75R0xV2yn0oK47lim5JI7a/6dTC W3B64XK8Ny0S10cEMtLNAx9EC7vGrlLvFaq0AyRVZ1+vA16qM0ZxhFDapVepq6a1 qoymfZpY9kx+FqYSgPiMD0oVxJVIRC0= -----END CERTIFICATE-----Generated at Wed Nov 5 12:20:13 2025 by rpki-client