$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9fe82129-7ac7-3807-a8b1-97e83fcba244.roa File: 9fe82129-7ac7-3807-a8b1-97e83fcba244.roa (raw, json) Hash identifier: E5KIAS8Yj2HeVfrdacK0c8v2EbRqcEA2/6FawnOehpc= Subject key identifier: 72:F7:15:60:11:A5:60:23:A0:2D:0E:15:32:0F:73:AD:26:AE:54:02 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA9755194277841D005A24680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9fe82129-7ac7-3807-a8b1-97e83fcba244.roa Signing time: Mon 27 Oct 2025 15:15:42 +0000 ROA not before: Mon 27 Oct 2025 15:15:42 +0000 ROA not after: Sun 25 Jan 2026 16:15:42 +0000 asID: 8069 IP address blocks: 20.153.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:75:51:94:27:78:41:d0:05:a2:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 27 15:15:42 2025 GMT Not After : Jan 25 16:15:42 2026 GMT Subject: CN=e578c810-f491-4eeb-9f5f-66f0dfdab492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:be:1f:02:be:0e:13:4c:11:b1:2a:2f:08: 5f:ca:e0:3e:5e:db:c3:66:37:0e:c1:9e:85:f2:be: 5d:d2:24:ce:f3:4e:c3:a6:5c:e8:eb:d9:3b:f6:88: 2f:82:3f:19:ca:98:c7:35:24:bd:ae:c1:da:e3:ab: 24:f8:ac:3f:5e:d7:3d:7f:f8:61:fe:ea:6b:38:31: 95:5d:05:d6:2c:4f:53:a5:b2:7b:a0:12:c3:65:d1: 9b:bc:f5:61:70:53:dd:70:3c:e3:47:3f:d1:cf:ff: ea:bb:6c:e5:1f:50:af:26:fc:7a:87:fb:37:a3:59: dc:ea:3b:59:d8:6c:0b:4f:1f:c3:0a:b4:28:f4:44: 24:b1:5a:9f:4a:ad:92:e0:dc:c7:91:35:0a:ef:8b: 1f:48:fe:d2:d3:5b:93:24:3f:67:b1:87:a8:c8:6e: 47:e5:73:cb:87:7f:77:58:aa:02:b6:fe:82:e8:ef: 0e:89:58:26:0d:12:90:65:3e:f1:2f:63:7c:b7:c5: 85:c3:d5:87:dc:b6:76:87:a4:78:05:0b:e6:3b:f0: dc:4e:13:c7:33:6b:c2:c9:06:96:47:88:98:97:88: 6a:e4:ff:f5:04:e9:8d:00:38:5c:02:88:ad:37:4d: f4:1a:36:21:c6:68:fe:54:4e:48:95:32:6c:ae:19: 2a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F7:15:60:11:A5:60:23:A0:2D:0E:15:32:0F:73:AD:26:AE:54:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9fe82129-7ac7-3807-a8b1-97e83fcba244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:59:ad:58:6d:fc:fd:cf:77:0a:ca:73:58:7b:6b:df:66:71: ca:0e:4f:d7:f2:77:64:8e:38:01:31:5b:91:d3:77:c9:7f:b0: 1a:99:fb:a5:62:f5:d6:8c:56:a0:4d:6d:47:9a:e0:f5:ad:fe: 3f:0a:bd:58:c4:85:79:83:29:e5:81:c9:d5:4e:da:32:6a:d3: 46:e7:e0:11:7c:16:7e:24:84:39:4e:9e:d5:b5:65:27:4d:26: 91:4f:32:d4:45:8c:5a:e1:b3:07:08:86:af:00:cd:3d:d3:63: 39:98:d3:1c:82:55:bd:fe:24:ad:60:79:39:e9:c4:4e:bf:ec: 26:ed:30:50:53:fd:31:95:60:a7:c7:3a:48:91:7c:85:29:25: a3:d0:6f:5b:45:14:7f:51:05:89:0d:55:da:34:ad:de:00:d6: 16:79:98:48:f8:52:5c:b8:e4:47:f1:3e:db:f8:9a:e1:e0:61: 95:5d:53:7c:1c:3f:16:cd:d1:11:34:7f:4e:d8:dc:c6:b0:3d: 56:7e:7e:9c:9a:d9:14:3d:76:82:99:7a:d3:ba:72:a5:dc:49: 43:32:ce:19:44:e4:ca:52:dd:e8:f4:da:6e:bb:06:8e:80:e8: 4a:c5:c2:89:a3:68:8b:03:80:21:16:da:fd:af:83:7a:0e:cd: 0f:f5:a3:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupdVGUJ3hB0AWiRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNzE1MTU0MloXDTI2MDEyNTE2MTU0MlowLzEtMCsGA1UEAxMk ZTU3OGM4MTAtZjQ5MS00ZWViLTlmNWYtNjZmMGRmZGFiNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v2+HwK+DhNMEbEqLwhfyuA+XtvDZjcOwZ6F 8r5d0iTO807Dplzo69k79ogvgj8ZypjHNSS9rsHa46sk+Kw/Xtc9f/hh/uprODGV XQXWLE9TpbJ7oBLDZdGbvPVhcFPdcDzjRz/Rz//qu2zlH1CvJvx6h/s3o1nc6jtZ 2GwLTx/DCrQo9EQksVqfSq2S4NzHkTUK74sfSP7S01uTJD9nsYeoyG5H5XPLh393 WKoCtv6C6O8OiVgmDRKQZT7xL2N8t8WFw9WH3LZ2h6R4BQvmO/DcThPHM2vCyQaW R4iYl4hq5P/1BOmNADhcAoitN030GjYhxmj+VE5IlTJsrhkqAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL3FWARpWAjoC0OFTIPc60mrlQCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWZlODIxMjktN2FjNy0z ODA3LWE4YjEtOTdlODNmY2JhMjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFZrVht/P3PdwrKc1h7a99mccoOT9fyd2SOOAExW5HTd8l/sBqZ+6Vi 9daMVqBNbUea4PWt/j8KvVjEhXmDKeWBydVO2jJq00bn4BF8Fn4khDlOntW1ZSdN JpFPMtRFjFrhswcIhq8AzT3TYzmY0xyCVb3+JK1geTnpxE6/7CbtMFBT/TGVYKfH OkiRfIUpJaPQb1tFFH9RBYkNVdo0rd4A1hZ5mEj4Uly45EfxPtv4muHgYZVdU3wc PxbN0RE0f07Y3MawPVZ+fpya2RQ9doKZetO6cqXcSUMyzhlE5MpS3ej02m67Bo6A 6ErFwomjaIsDgCEW2v2vg3oOzQ/1o9M= -----END CERTIFICATE-----Generated at Wed Nov 5 10:19:13 2025 by rpki-client