$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa File: b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa (raw, json) Hash identifier: GaqEM0oEPQmM6w0btAdQUqa4DCb/UXEpfTnHnooCiN8= Subject key identifier: 09:5F:83:1E:77:46:BC:43:6F:87:F4:13:DF:F4:C6:46:F9:89:B0:8A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA39D18037447AB8CAA3D0440 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:18:03:74:47:ab:8c:aa:3d:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=3d410d5a-a678-4820-814b-046a06b92bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:67:6d:f9:f3:2f:03:7d:2c:9e:12:ed:2e:0b: 54:88:e6:65:68:6a:83:73:73:ee:70:86:bc:9d:c2: cf:42:b3:63:16:1a:39:27:fc:eb:a4:55:7b:d1:f6: 04:44:5e:46:6b:21:a8:93:4c:4d:16:ed:ee:5b:d5: 47:39:c3:3f:af:13:be:80:fc:2c:df:c6:a1:bb:61: 94:56:1e:de:f4:6b:ab:79:ac:70:8d:f3:29:93:0b: 47:13:0b:40:9e:b3:eb:12:44:e5:98:45:6f:2f:38: b2:bf:09:f1:d1:13:ae:78:f3:ad:fa:33:a1:cd:08: fd:22:60:d1:fc:28:73:fc:ee:da:65:3d:a5:44:f7: ca:57:43:17:3e:be:86:3a:f1:83:5d:57:84:c6:ab: 98:ab:49:93:9f:8c:a4:b2:54:f4:62:6c:04:91:a5: 04:1d:1a:f3:2e:86:03:21:71:71:cb:e9:97:95:98: e2:96:49:cb:77:08:0e:72:57:c7:b5:14:70:cd:07: d4:c7:a7:ed:2e:65:07:d9:47:32:5c:71:53:9e:66: ea:3c:f0:de:2c:8f:0b:5a:6c:5c:2e:de:d7:f4:44: 3c:28:1d:cf:b6:62:da:2d:57:bc:9d:26:a7:d3:4a: 3f:3c:a9:3c:1e:2d:ec:86:73:a1:b4:72:2f:84:e6: 26:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5F:83:1E:77:46:BC:43:6F:87:F4:13:DF:F4:C6:46:F9:89:B0:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:97:5a:64:f1:ce:24:91:75:4f:7c:0c:f5:26:fb:df:6d:6e: 29:22:78:d5:52:e5:f4:4b:6c:78:2c:08:69:34:76:66:38:70: f0:53:98:99:a5:b7:7e:dd:6c:6a:ab:fe:8c:95:ce:30:b9:5e: 5c:e9:36:e5:36:83:16:7e:15:0b:f6:31:13:8d:68:77:9d:c8: 40:aa:82:4e:b5:da:1d:59:75:cf:6d:4a:1f:29:af:19:80:00: a4:d9:57:04:03:62:f7:03:28:74:27:b0:b5:cb:7c:31:fc:ff: ae:4d:0a:7a:8f:19:ba:69:cd:3d:5e:bb:bb:25:8c:42:db:fe: d6:4c:27:8d:10:35:d5:a9:c1:7d:ac:26:bf:c1:ec:17:92:3f: 31:ed:57:a5:97:43:19:21:a4:61:93:47:82:96:0d:84:51:d3: a7:34:5c:ca:09:cf:6f:30:cb:94:31:f1:c0:cc:3d:b7:cb:c3: fa:b1:d0:36:c0:40:86:9e:a0:47:00:f9:1c:b8:44:16:8b:34: 9b:eb:f3:67:a9:d4:6a:4c:7a:01:40:e2:bc:14:65:20:bb:fb: de:43:dd:f9:5c:ad:4b:39:38:7d:1f:6b:47:db:b0:fc:f3:1c: 5c:e6:9f:c7:b9:e8:4a:e3:4e:72:24:49:3c:01:f0:f4:88:a8: 4b:f7:d0:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRgDdEerjKo9BEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk M2Q0MTBkNWEtYTY3OC00ODIwLTgxNGItMDQ2YTA2YjkyYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGdt+fMvA30snhLtLgtUiOZlaGqDc3PucIa8 ncLPQrNjFho5J/zrpFV70fYERF5GayGok0xNFu3uW9VHOcM/rxO+gPws38ahu2GU Vh7e9GureaxwjfMpkwtHEwtAnrPrEkTlmEVvLziyvwnx0ROuePOt+jOhzQj9ImDR /Chz/O7aZT2lRPfKV0MXPr6GOvGDXVeExquYq0mTn4ykslT0YmwEkaUEHRrzLoYD IXFxy+mXlZjilknLdwgOclfHtRRwzQfUx6ftLmUH2UcyXHFTnmbqPPDeLI8LWmxc Lt7X9EQ8KB3PtmLaLVe8nSan00o/PKk8Hi3shnOhtHIvhOYmVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlfgx53RrxDb4f0E9/0xkb5ibCKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjVlZTdjM2EtZjc1MS0z M2U0LWI5ZTItMzdhZjE1YWFiYTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuXWmTxziSRdU98DPUm+99tbikieNVS5fRLbHgsCGk0dmY4cPBTmJml t37dbGqr/oyVzjC5XlzpNuU2gxZ+FQv2MRONaHedyECqgk612h1Zdc9tSh8prxmA AKTZVwQDYvcDKHQnsLXLfDH8/65NCnqPGbppzT1eu7sljELb/tZMJ40QNdWpwX2s Jr/B7BeSPzHtV6WXQxkhpGGTR4KWDYRR06c0XMoJz28wy5Qx8cDMPbfLw/qx0DbA QIaeoEcA+Ry4RBaLNJvr82ep1GpMegFA4rwUZSC7+95D3flcrUs5OH0fa0fbsPzz HFzmn8e56ErjTnIkSTwB8PSIqEv30AM= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:47 2025 by rpki-client