$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b32841cc-04b7-32b6-80ba-42e688ea4078.roa File: b32841cc-04b7-32b6-80ba-42e688ea4078.roa (raw, json) Hash identifier: +Ux06BZs++SNVcBR/QTu+I+SzKWRHDykXXTqsMOBSYY= Subject key identifier: E7:D0:2A:10:BF:17:2F:28:45:C9:1C:D4:E6:48:E5:12:C5:AA:68:20 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BBFA5A0F2E04268A08EF57AC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b32841cc-04b7-32b6-80ba-42e688ea4078.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a0:f2:e0:42:68:a0:8e:f5:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=4cbfb7ef-ef05-4b6d-886e-6c39d1fb28f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:34:7b:df:53:2f:db:2d:f8:16:64:06:f6:71: cc:6a:d1:0f:26:16:da:a2:7d:5b:7f:30:ba:07:95: a0:fd:ec:a9:29:4b:73:ca:4e:f0:1c:bd:21:be:26: 39:d8:eb:2f:73:21:8a:dc:f1:79:2e:19:dd:c3:c2: 90:c6:a6:55:36:df:bd:c9:d9:6a:43:26:64:7a:d6: 00:44:78:0f:69:96:2b:7c:1d:ea:b1:5f:87:95:02: 5c:87:fb:71:01:1b:af:85:36:ac:0a:e3:4d:9b:23: 03:af:69:58:9d:b8:6a:21:19:d1:e6:af:25:ba:ad: 8f:f1:41:e2:2b:39:99:dc:88:68:3c:2e:19:98:a1: 59:98:f1:c7:72:3c:61:56:71:4d:a2:d6:03:a4:87: 47:16:bf:48:15:49:12:58:dc:72:6e:59:96:c4:95: 29:e0:ff:40:87:12:7f:78:1c:23:92:7b:dd:4b:75: c7:07:d0:f0:73:8e:41:be:3c:1a:41:90:7e:b3:2a: 92:d4:84:6d:13:cd:f3:2b:be:4d:a9:e5:8e:79:24: da:48:82:70:a1:ee:a4:d0:c5:e2:32:36:59:ee:41: 7f:e8:c1:11:0e:c4:21:1c:2d:5f:86:84:67:8d:bc: 4b:0d:f3:71:6d:61:7a:04:4c:74:a5:b7:6f:5e:79: 4c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D0:2A:10:BF:17:2F:28:45:C9:1C:D4:E6:48:E5:12:C5:AA:68:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b32841cc-04b7-32b6-80ba-42e688ea4078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:df:aa:87:2a:b8:25:84:c9:a2:1d:33:b7:64:13:2e:5d:a4: b4:ba:10:7c:46:de:06:31:65:7a:04:d9:12:f1:5c:b2:e1:18: 0e:fb:ca:35:22:0a:79:67:a5:d7:10:68:54:b8:78:6e:0b:17: 9c:e9:95:b6:b8:d1:49:6e:d0:2b:75:d3:53:d7:c6:c6:21:18: a4:60:6c:22:f7:28:1e:cb:c0:4a:3d:48:f7:f8:66:5c:b7:31: bc:c7:1a:71:bd:85:8f:c9:d7:a1:2d:38:8d:38:4d:57:ac:7c: 6f:b9:80:2b:8a:71:e9:1d:be:de:2b:f1:56:86:73:68:49:2d: 2c:dd:8a:ec:ed:3e:14:de:a7:97:2c:be:b7:36:98:6b:94:c2: 5a:9e:99:e0:82:ad:47:60:c4:7b:cb:60:ca:ba:8c:b4:b7:af: dd:6f:c8:18:5f:af:6e:59:51:8d:39:75:3d:bb:f9:e9:14:5f: b3:58:f0:d6:09:a3:00:40:a1:67:b4:94:3e:ca:b7:bd:90:18: 00:dc:b7:26:fc:53:1f:eb:ee:53:ef:53:96:37:e4:71:45:9f: 29:a0:c1:ae:19:02:28:64:32:27:60:12:a7:0a:ac:fe:12:57: e8:7e:d9:3e:ad:3d:5b:2d:26:37:d7:5c:df:0d:eb:4c:cf:85: 1d:8f:c8:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/paDy4EJooI71esAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NGNiZmI3ZWYtZWYwNS00YjZkLTg4NmUtNmMzOWQxZmIyOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTR731Mv2y34FmQG9nHMatEPJhbaon1bfzC6 B5Wg/eypKUtzyk7wHL0hviY52OsvcyGK3PF5Lhndw8KQxqZVNt+9ydlqQyZketYA RHgPaZYrfB3qsV+HlQJch/txARuvhTasCuNNmyMDr2lYnbhqIRnR5q8luq2P8UHi KzmZ3IhoPC4ZmKFZmPHHcjxhVnFNotYDpIdHFr9IFUkSWNxyblmWxJUp4P9AhxJ/ eBwjknvdS3XHB9Dwc45BvjwaQZB+syqS1IRtE83zK75NqeWOeSTaSIJwoe6k0MXi MjZZ7kF/6MERDsQhHC1fhoRnjbxLDfNxbWF6BEx0pbdvXnlMkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfQKhC/Fy8oRckc1OZI5RLFqmggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjMyODQxY2MtMDRiNy0z MmI2LTgwYmEtNDJlNjg4ZWE0MDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLfqocquCWEyaIdM7dkEy5dpLS6EHxG3gYxZXoE2RLxXLLhGA77yjUi CnlnpdcQaFS4eG4LF5zplba40Ulu0Ct101PXxsYhGKRgbCL3KB7LwEo9SPf4Zly3 MbzHGnG9hY/J16EtOI04TVesfG+5gCuKcekdvt4r8VaGc2hJLSzdiuztPhTep5cs vrc2mGuUwlqemeCCrUdgxHvLYMq6jLS3r91vyBhfr25ZUY05dT27+ekUX7NY8NYJ owBAoWe0lD7Kt72QGADctyb8Ux/r7lPvU5Y35HFFnymgwa4ZAihkMidgEqcKrP4S V+h+2T6tPVstJjfXXN8N60zPhR2PyJQ= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:26 2025 by rpki-client