$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/691cb6c7-e2ea-39f7-ba50-5e36c69c6b28.roa File: 691cb6c7-e2ea-39f7-ba50-5e36c69c6b28.roa (raw, json) Hash identifier: 3Z3O+ovrlXH/LYuPpgoUZ1SuZzvHeJcXfVIcfnRhS1g= Subject key identifier: 18:CF:77:4B:5F:BB:50:B9:DB:47:A2:39:BA:AF:91:FA:6F:6C:A9:C0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA39D184AFFEE8D91907CB120 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/691cb6c7-e2ea-39f7-ba50-5e36c69c6b28.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:18:4a:ff:ee:8d:91:90:7c:b1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=3fcfd0a1-444e-4c99-a801-c1f58b666f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:63:52:42:8f:76:07:8c:a0:ed:7f:e4:bb: f9:16:56:e6:df:92:af:02:99:3a:64:43:95:42:4f: bf:bc:7f:60:38:1e:48:ed:92:56:f5:b0:3c:7b:ba: 37:d4:46:df:e2:bc:65:d5:db:77:78:65:9c:d8:b0: 60:51:5f:a8:0f:87:6e:0c:30:d7:5e:d0:ea:5a:50: 60:5a:50:f9:90:62:10:f9:f7:03:4f:06:c5:ac:ad: 5e:1d:44:16:43:61:17:b4:e7:0d:82:6d:b7:b4:8e: 27:b7:13:d5:f9:d8:81:25:81:7d:81:86:d3:6d:e1: 2a:6a:f4:77:cd:22:bc:bc:c5:6d:61:d0:dd:68:ba: 6d:c7:ca:01:a7:8f:ba:a9:d3:a2:43:32:0e:b5:da: b4:e5:22:30:29:98:9c:b9:8a:78:75:bb:2f:6c:65: a4:bf:29:ef:27:26:c9:1d:ad:8b:3f:a1:3c:45:3b: b6:8c:c5:c6:db:10:b3:cf:5a:a0:79:9a:61:06:85: 6f:11:a3:1f:ff:72:b7:df:23:4d:8f:ff:db:e2:37: 49:de:0c:68:a1:29:a0:a7:fb:7f:7f:ac:12:8b:62: 6e:7f:4b:b4:83:c4:9b:89:58:74:c2:28:cc:ca:99: ed:ec:d1:3b:f5:21:e0:fd:11:63:5f:30:6e:f7:a9: 3c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CF:77:4B:5F:BB:50:B9:DB:47:A2:39:BA:AF:91:FA:6F:6C:A9:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/691cb6c7-e2ea-39f7-ba50-5e36c69c6b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ac:74:af:32:6b:ef:ec:39:77:95:c9:16:ae:6a:c7:b6:f0: 9f:bf:da:64:37:18:59:0c:47:f3:d7:5a:9c:ad:e0:11:95:60: 58:55:d9:9a:1a:95:a2:c8:18:fc:bd:96:f0:40:66:98:11:25: c3:e2:a3:d9:4c:d7:ef:7e:25:80:e1:28:2c:ba:23:da:b4:5d: 60:47:88:e7:df:c3:27:1b:b2:f9:65:f5:06:82:b9:a1:54:4e: 69:cb:2f:13:fb:96:b9:6e:7f:1a:f5:fb:61:be:a9:2a:30:50: b3:69:0a:a1:2d:85:04:b1:eb:b5:88:70:e7:21:1f:84:ff:35: 0b:7d:da:1f:3b:6a:99:69:65:af:77:92:c3:fe:8b:97:33:71: 2f:db:b6:b7:e4:ea:2a:55:f0:5d:40:f2:a8:a0:6c:98:20:4d: ed:b0:8b:59:93:a3:32:20:50:6d:d1:fd:4b:66:df:cc:b9:68: 99:76:c0:77:0b:a0:ea:a4:61:de:3b:b3:b5:7c:ea:cd:59:45: b2:26:72:71:74:6b:f6:0b:cb:62:ed:32:a9:e9:12:d9:b9:bf: 11:43:05:a6:ae:40:2f:5c:f2:87:21:e4:c3:b2:e0:86:dd:87: 9d:dd:70:8d:78:5a:93:eb:32:ff:e9:1c:85:e4:c6:89:fb:6e: a7:96:4c:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRhK/+6NkZB8sSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk M2ZjZmQwYTEtNDQ0ZS00Yzk5LWE4MDEtYzFmNThiNjY2ZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquRjUkKPdgeMoO1/5Lv5Flbm35KvApk6ZEOV Qk+/vH9gOB5I7ZJW9bA8e7o31Ebf4rxl1dt3eGWc2LBgUV+oD4duDDDXXtDqWlBg WlD5kGIQ+fcDTwbFrK1eHUQWQ2EXtOcNgm23tI4ntxPV+diBJYF9gYbTbeEqavR3 zSK8vMVtYdDdaLptx8oBp4+6qdOiQzIOtdq05SIwKZicuYp4dbsvbGWkvynvJybJ Ha2LP6E8RTu2jMXG2xCzz1qgeZphBoVvEaMf/3K33yNNj//b4jdJ3gxooSmgp/t/ f6wSi2Juf0u0g8SbiVh0wijMypnt7NE79SHg/RFjXzBu96k84QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjPd0tfu1C520eiObqvkfpvbKnAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjkxY2I2YzctZTJlYS0z OWY3LWJhNTAtNWUzNmM2OWM2YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmsdK8ya+/sOXeVyRauase28J+/2mQ3GFkMR/PXWpyt4BGVYFhV2Zoa laLIGPy9lvBAZpgRJcPio9lM1+9+JYDhKCy6I9q0XWBHiOffwycbsvll9QaCuaFU TmnLLxP7lrlufxr1+2G+qSowULNpCqEthQSx67WIcOchH4T/NQt92h87aplpZa93 ksP+i5czcS/btrfk6ipV8F1A8qigbJggTe2wi1mTozIgUG3R/Utm38y5aJl2wHcL oOqkYd47s7V86s1ZRbImcnF0a/YLy2LtMqnpEtm5vxFDBaauQC9c8och5MOy4Ibd h53dcI14WpPrMv/pHIXkxon7bqeWTN4= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:20 2025 by rpki-client