$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6d643aa4-9a8c-3d27-8dac-dec8d34cd22c.roa File: 6d643aa4-9a8c-3d27-8dac-dec8d34cd22c.roa (raw, json) Hash identifier: R9fl1bTmvwONKX54OP6kync0FwXv53JBBAg9OYeyfGY= Subject key identifier: 09:85:29:97:F7:A3:D7:4D:16:FB:29:B6:50:3E:A0:1D:6D:40:E6:30 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA39D374D072617D6208BF900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6d643aa4-9a8c-3d27-8dac-dec8d34cd22c.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:37:4d:07:26:17:d6:20:8b:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=c68780ee-c8fb-45cc-898b-727258e18417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8b:ff:49:d1:dc:11:2b:23:de:5e:1f:e7:65: 27:9c:b3:be:98:c0:01:5a:b7:d9:3c:39:01:d4:eb: db:54:61:b2:e4:a3:c7:e2:7f:78:ef:17:05:d6:5f: cc:d4:11:90:4e:d9:ed:6d:0f:de:a3:7d:7b:44:88: 3f:42:5e:a3:6e:7f:c3:2f:c5:74:72:88:58:dd:4b: 65:2f:94:e9:2a:8d:88:bc:14:b5:db:81:e1:05:a2: 5a:44:11:ef:72:24:43:d8:08:61:d3:09:77:a6:3f: f5:c2:3e:60:cf:79:4d:c3:3c:c0:bd:2f:a3:7d:ba: d2:20:63:88:99:47:b9:6f:ff:a4:3b:3a:63:cd:0f: e8:09:07:b8:d0:91:7a:de:54:ac:f6:f6:b5:61:66: 32:55:fa:4d:a6:2b:dd:74:5b:cc:80:bd:f3:e5:43: 5b:6a:19:5e:41:0f:ca:c9:13:35:73:9b:78:4d:81: 12:ca:ab:fc:10:5c:79:71:8c:99:92:61:f1:78:fb: 55:48:d6:77:43:e1:b8:8d:f0:7f:55:5b:8f:e6:3a: 39:2b:8b:93:c0:4c:13:53:5b:8d:6d:14:ad:c9:31: 66:f2:78:59:7d:50:cd:f6:6b:ce:16:6e:f8:da:1c: da:74:fa:d7:17:65:c7:aa:75:6a:43:80:69:ef:95: 66:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:85:29:97:F7:A3:D7:4D:16:FB:29:B6:50:3E:A0:1D:6D:40:E6:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6d643aa4-9a8c-3d27-8dac-dec8d34cd22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a7:9b:f3:db:d7:ba:aa:29:95:15:7e:ce:7a:02:9a:17:05: 66:73:08:55:56:d3:4a:fc:a1:d8:dd:59:0f:81:ff:b8:5a:94: 61:4d:d9:b0:57:bf:9c:d4:27:2d:a4:5a:ff:11:57:0c:9b:d6: 84:d6:52:6b:de:08:9a:05:5c:ab:f7:c6:0a:13:9c:42:58:d5: 4b:20:42:93:f9:4e:d3:10:c8:f1:4c:6f:b1:43:1a:6f:27:de: 6a:bf:b9:64:6e:a2:e9:ca:32:37:73:cf:19:98:b3:9a:a9:0a: e6:62:4c:d9:59:49:f9:f1:ee:c2:6e:2f:25:48:78:4a:90:1c: ed:82:be:e0:a8:dd:37:a0:3c:45:5f:9b:6b:a4:db:2a:26:b3: dc:65:a9:e2:3b:6a:8a:af:64:31:62:c6:b3:47:f6:a9:f4:99: d4:b3:fd:e0:66:25:74:2e:a2:9c:8a:da:35:aa:a8:58:79:c5: e2:46:b6:e0:05:3b:88:2e:33:c7:80:e0:04:e9:1e:de:72:7c: 7b:8b:2c:f8:db:a7:f1:f6:28:9a:5e:ac:bb:5f:e4:8b:b2:02: bb:aa:b4:5b:68:eb:02:67:7c:49:7e:54:03:a8:34:55:e0:c1: d0:37:f9:c5:a6:03:17:80:9c:e8:65:fd:f9:68:39:d4:4f:dd: 35:63:ad:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTdNByYX1iCL+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YzY4NzgwZWUtYzhmYi00NWNjLTg5OGItNzI3MjU4ZTE4NDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhov/SdHcESsj3l4f52UnnLO+mMABWrfZPDkB 1OvbVGGy5KPH4n947xcF1l/M1BGQTtntbQ/eo317RIg/Ql6jbn/DL8V0cohY3Utl L5TpKo2IvBS124HhBaJaRBHvciRD2Ahh0wl3pj/1wj5gz3lNwzzAvS+jfbrSIGOI mUe5b/+kOzpjzQ/oCQe40JF63lSs9va1YWYyVfpNpivddFvMgL3z5UNbahleQQ/K yRM1c5t4TYESyqv8EFx5cYyZkmHxePtVSNZ3Q+G4jfB/VVuP5jo5K4uTwEwTU1uN bRStyTFm8nhZfVDN9mvOFm742hzadPrXF2XHqnVqQ4Bp75VmHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmFKZf3o9dNFvsptlA+oB1tQOYwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmQ2NDNhYTQtOWE4Yy0z ZDI3LThkYWMtZGVjOGQzNGNkMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSnm/Pb17qqKZUVfs56ApoXBWZzCFVW00r8odjdWQ+B/7halGFN2bBX v5zUJy2kWv8RVwyb1oTWUmveCJoFXKv3xgoTnEJY1UsgQpP5TtMQyPFMb7FDGm8n 3mq/uWRuounKMjdzzxmYs5qpCuZiTNlZSfnx7sJuLyVIeEqQHO2CvuCo3TegPEVf m2uk2yoms9xlqeI7aoqvZDFixrNH9qn0mdSz/eBmJXQuopyK2jWqqFh5xeJGtuAF O4guM8eA4ATpHt5yfHuLLPjbp/H2KJperLtf5IuyAruqtFto6wJnfEl+VAOoNFXg wdA3+cWmAxeAnOhl/floOdRP3TVjrX4= -----END CERTIFICATE-----Generated at Wed Nov 5 07:01:03 2025 by rpki-client