$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8d211431-659b-3203-b22c-11ca3f703d3e.roa File: 8d211431-659b-3203-b22c-11ca3f703d3e.roa (raw, json) Hash identifier: CBvDgd4Wl/73Ia8n2emm1guHcxZWRPBGGy+kwhkG6YQ= Subject key identifier: 1A:52:89:AD:8C:91:BB:FB:F1:3B:43:F2:E8:61:66:18:A8:BC:01:4D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BBFA5BBA04585DF196E9F8AC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8d211431-659b-3203-b22c-11ca3f703d3e.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:bb:a0:45:85:df:19:6e:9f:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=5f0616fe-95b4-41b8-b40c-9983ffd1283f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:01:4b:9b:3a:b4:27:de:e8:0f:0b:f4:2d: 37:83:46:1d:8c:e4:ae:de:77:30:73:76:ff:5d:3e: c9:cf:ad:a5:39:ab:b2:bf:71:d6:0c:c6:33:52:4d: bd:eb:cb:a4:c4:5f:e9:23:d6:4b:d4:3e:ec:0c:70: f5:94:f2:89:ff:50:9b:0d:73:07:83:64:48:62:64: c3:c8:7b:21:dd:ae:17:85:ac:2f:2e:1f:18:48:e7: 9f:de:ef:f9:ee:bf:d0:a6:9a:c9:e8:15:4f:14:5c: e0:84:5c:7f:ae:e9:d5:10:ad:cb:a4:f3:3a:a4:2b: b3:f0:e0:19:87:82:ec:8b:6e:b9:bc:e0:b8:2d:60: 55:1b:12:46:d9:37:0f:4b:d4:45:f2:64:43:44:0b: 5f:e1:4e:b2:55:61:26:68:f9:f4:c8:ce:39:79:99: 07:42:8a:29:1e:1e:65:c6:64:ed:03:52:94:2b:77: bb:66:e2:b2:28:e0:08:4e:a8:96:3c:c0:ae:b3:ca: 84:0b:fa:e4:d1:a0:84:9e:31:cc:9b:0c:7b:4f:ef: fe:25:f5:51:dd:25:dd:d5:e6:c9:e6:67:c5:64:54: 09:15:05:e4:7c:dd:7e:ac:c9:54:68:5d:47:e0:0b: 37:51:4b:87:44:51:23:17:04:f2:92:ae:20:7b:2d: 68:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:52:89:AD:8C:91:BB:FB:F1:3B:43:F2:E8:61:66:18:A8:BC:01:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8d211431-659b-3203-b22c-11ca3f703d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:44:d0:cf:b1:2c:83:48:0f:80:88:94:ec:c9:b1:c9:e2:ae: 20:12:60:f9:fe:56:6f:9c:c9:19:f7:9e:0c:2d:77:68:3a:eb: 2d:21:15:f3:c7:c7:b7:28:ef:ec:27:c8:21:d7:aa:96:08:77: d9:0e:f3:19:8b:c3:25:b5:e5:39:24:7f:e9:11:ea:06:d7:d2: 10:f2:b9:6e:bf:5f:2c:05:aa:4c:ff:31:57:f2:1d:2a:3c:25: 2f:97:29:d0:d2:d8:d0:86:ff:e9:a0:c7:d2:aa:9f:d3:2b:b4: e3:b9:ad:f9:52:7f:31:91:78:4b:39:4f:e6:7b:03:df:97:47: df:59:f8:5b:2c:70:48:13:38:7e:2c:1b:00:05:01:34:06:3c: d0:f8:e2:e6:9b:d5:11:e4:83:26:1e:70:b7:41:54:c6:cc:a8: 47:b2:83:27:b1:9f:75:eb:7b:3b:d9:07:a5:05:75:f5:47:35: e2:a8:cd:56:b8:44:ca:45:9f:83:f7:da:27:70:fe:27:16:64: 34:f8:f9:2a:c0:e0:00:41:75:e0:64:d3:b6:b8:c2:da:2d:ec: 5b:bf:b9:56:78:e4:a7:1a:4a:bd:4b:ff:f6:f6:50:30:fd:e8: e7:55:22:29:cd:ed:95:4b:5e:76:7f:af:d0:9a:c7:da:11:7c: 6d:9f:ab:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbugRYXfGW6fisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NWYwNjE2ZmUtOTViNC00MWI4LWI0MGMtOTk4M2ZmZDEyODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBwBS5s6tCfe6A8L9C03g0YdjOSu3ncwc3b/ XT7Jz62lOauyv3HWDMYzUk2968ukxF/pI9ZL1D7sDHD1lPKJ/1CbDXMHg2RIYmTD yHsh3a4XhawvLh8YSOef3u/57r/QpprJ6BVPFFzghFx/runVEK3LpPM6pCuz8OAZ h4Lsi265vOC4LWBVGxJG2TcPS9RF8mRDRAtf4U6yVWEmaPn0yM45eZkHQoopHh5l xmTtA1KUK3e7ZuKyKOAITqiWPMCus8qEC/rk0aCEnjHMmwx7T+/+JfVR3SXd1ebJ 5mfFZFQJFQXkfN1+rMlUaF1H4As3UUuHRFEjFwTykq4gey1oRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpSia2Mkbv78TtD8uhhZhiovAFNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGQyMTE0MzEtNjU5Yi0z MjAzLWIyMmMtMTFjYTNmNzAzZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJE0M+xLINID4CIlOzJscniriASYPn+Vm+cyRn3ngwtd2g66y0hFfPH x7co7+wnyCHXqpYId9kO8xmLwyW15Tkkf+kR6gbX0hDyuW6/XywFqkz/MVfyHSo8 JS+XKdDS2NCG/+mgx9Kqn9MrtOO5rflSfzGReEs5T+Z7A9+XR99Z+FsscEgTOH4s GwAFATQGPND44uab1RHkgyYecLdBVMbMqEeygyexn3XrezvZB6UFdfVHNeKozVa4 RMpFn4P32idw/icWZDT4+SrA4ABBdeBk07a4wtot7Fu/uVZ45KcaSr1L//b2UDD9 6OdVIinN7ZVLXnZ/r9Cax9oRfG2fq3w= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:07 2025 by rpki-client