$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c349633-601c-3ce2-8871-3815903a32e1.roa File: 5c349633-601c-3ce2-8871-3815903a32e1.roa (raw, json) Hash identifier: hwuVIp6LxamXCtpspiTupSLt1GY6eGmS0ZLolOH3sNc= Subject key identifier: C7:65:D8:15:07:02:05:E0:08:0D:A8:80:8C:C5:DE:0B:65:9F:FA:9E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BBFA59F3BCA4ECC2F2D9E7580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c349633-601c-3ce2-8871-3815903a32e1.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:9f:3b:ca:4e:cc:2f:2d:9e:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=a934ca59-29d4-432e-9370-2c4b6a861c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:67:42:37:2a:59:a5:6c:7e:87:b1:1f:3d:02: ed:ee:96:d1:2a:ad:3a:2e:65:48:8d:7b:c6:93:7e: 07:91:ce:06:a9:1f:c8:55:b3:e7:86:68:13:02:2b: b2:4b:3d:85:d2:50:d9:6c:5b:d9:67:af:eb:08:84: 52:28:73:a2:91:b7:2f:19:8d:7c:3e:3c:d0:bc:30: f2:dc:b3:a6:1c:02:4d:02:e2:4c:73:4d:0b:74:d7: 44:0c:14:c0:39:6c:cb:e6:a7:f8:57:50:f5:00:35: 64:bb:c1:7b:28:92:f5:76:32:a1:2c:f8:b9:cb:49: c7:71:c0:2b:21:7a:88:45:87:55:51:cf:f0:0f:a7: 40:ba:18:63:8a:65:7d:ad:eb:55:a9:23:4b:0f:6f: 43:dd:26:b2:86:14:4a:a9:8d:ee:ab:c3:f4:04:79: 7d:c0:4d:b1:89:6b:12:c1:57:06:15:d1:06:7f:c3: 4b:f3:40:43:63:ca:61:2c:e2:28:cb:d2:1f:18:ad: 0a:53:b1:d2:20:dc:08:6d:75:d3:a9:84:72:38:ea: fa:ed:a9:68:75:6c:2a:b3:61:5f:c5:b4:c7:e7:ab: 33:ad:18:b4:21:ae:3c:54:07:88:0d:7a:7e:71:f0: 26:f0:ba:15:73:73:92:3d:17:c6:d8:ce:fd:0c:ce: 7a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:65:D8:15:07:02:05:E0:08:0D:A8:80:8C:C5:DE:0B:65:9F:FA:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c349633-601c-3ce2-8871-3815903a32e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:dc:e4:82:53:df:7e:82:15:14:c6:53:70:9e:5b:ce:46:6e: 30:08:4f:cb:be:bb:73:62:c8:6a:81:91:96:ee:33:46:8c:40: 28:1d:16:58:d6:a0:19:3a:23:37:43:56:24:36:1b:80:d7:de: 87:ba:3a:52:c2:ef:f3:5a:f0:e8:c4:0a:2a:6c:a2:09:a3:0a: 7f:ff:2f:c6:0d:62:73:da:c4:9a:1c:d9:79:8f:cc:85:23:3a: 84:ad:c7:06:26:7f:9e:65:c5:e8:1e:54:75:4e:22:22:b5:84: 2e:63:3b:38:87:5d:78:87:c7:21:8a:fd:28:4d:c5:4c:b1:9d: 11:64:81:7b:96:e9:07:73:13:3d:4e:b4:65:b9:c1:ff:88:f1: 33:d1:92:fc:3e:7b:ee:27:2d:37:15:24:c7:d1:18:0d:70:02: f3:22:c2:28:d4:58:2a:01:94:c9:f8:58:07:1a:33:29:3d:b7: 74:9c:b0:93:c8:92:77:28:27:df:e4:c1:40:3f:31:60:11:9b: d9:36:94:e4:c5:bb:e2:ef:9b:0c:7f:72:92:49:2a:2a:be:7c: 48:0e:3d:41:d8:a1:46:aa:b9:3c:ce:9b:06:d8:ef:6b:78:a2: f6:cb:6d:4c:7d:f8:0d:bd:ef:89:1f:06:97:f8:24:c2:de:32: ea:d3:a0:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZ87yk7MLy2edYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk YTkzNGNhNTktMjlkNC00MzJlLTkzNzAtMmM0YjZhODYxYzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GdCNypZpWx+h7EfPQLt7pbRKq06LmVIjXvG k34Hkc4GqR/IVbPnhmgTAiuySz2F0lDZbFvZZ6/rCIRSKHOikbcvGY18PjzQvDDy 3LOmHAJNAuJMc00LdNdEDBTAOWzL5qf4V1D1ADVku8F7KJL1djKhLPi5y0nHccAr IXqIRYdVUc/wD6dAuhhjimV9retVqSNLD29D3SayhhRKqY3uq8P0BHl9wE2xiWsS wVcGFdEGf8NL80BDY8phLOIoy9IfGK0KU7HSINwIbXXTqYRyOOr67alodWwqs2Ff xbTH56szrRi0Ia48VAeIDXp+cfAm8LoVc3OSPRfG2M79DM56KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdl2BUHAgXgCA2ogIzF3gtln/qeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWMzNDk2MzMtNjAxYy0z Y2UyLTg4NzEtMzgxNTkwM2EzMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3c5IJT336CFRTGU3CeW85GbjAIT8u+u3NiyGqBkZbuM0aMQCgdFljW oBk6IzdDViQ2G4DX3oe6OlLC7/Na8OjECipsogmjCn//L8YNYnPaxJoc2XmPzIUj OoStxwYmf55lxegeVHVOIiK1hC5jOziHXXiHxyGK/ShNxUyxnRFkgXuW6QdzEz1O tGW5wf+I8TPRkvw+e+4nLTcVJMfRGA1wAvMiwijUWCoBlMn4WAcaMyk9t3ScsJPI kncoJ9/kwUA/MWARm9k2lOTFu+Lvmwx/cpJJKiq+fEgOPUHYoUaquTzOmwbY72t4 ovbLbUx9+A2974kfBpf4JMLeMurToDQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:00:07 2025 by rpki-client