$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b9116837-e5d6-3169-80de-95f0f7e66807.roa File: b9116837-e5d6-3169-80de-95f0f7e66807.roa (raw, json) Hash identifier: wiTjxuVZMTpbPsS6ufPzLldlgwjpvYCmo1estvwGrvc= Subject key identifier: DE:FE:A0:C3:CA:72:53:E1:1A:D2:D3:10:42:3D:BA:7C:D1:EB:DA:55 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BBFA58F6FB3B4F5262EC1BDC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b9116837-e5d6-3169-80de-95f0f7e66807.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:8f:6f:b3:b4:f5:26:2e:c1:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=0e9b9791-5597-44ae-843b-98ec82022033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c3:f1:c1:44:32:32:17:f5:00:4e:a3:36:f6: 0e:45:a4:07:35:28:98:ff:2f:25:2f:09:32:6c:48: 5d:ac:10:51:b1:c1:1e:9a:f4:85:85:3b:dd:c9:6d: 52:7d:9f:78:b6:af:7c:aa:82:bb:39:1e:fc:ee:0e: ef:44:6b:21:05:a8:99:bc:bc:49:0d:85:36:f1:ab: ef:6d:08:e2:f4:72:bb:cd:1f:19:56:09:2a:42:1e: cd:8c:ce:6a:e3:94:8d:63:55:db:d6:0c:ff:2d:5a: 8f:f1:c2:73:69:b8:5f:88:4b:5b:09:6b:2f:7a:35: 54:61:bb:e6:e1:06:9f:03:3b:1f:b0:c7:2f:ae:1d: 6c:a8:10:9e:a0:a2:27:00:87:95:c3:4c:08:32:d4: 89:e9:d5:0d:0a:44:b0:92:d9:2f:3e:e8:62:c9:09: 0f:bf:22:51:cb:5b:4c:eb:7b:4a:4d:c5:65:97:a2: 3f:5b:6f:94:80:18:5f:8c:48:4a:2c:3c:8d:ee:fe: 32:4c:8f:00:60:6e:cc:f3:11:5e:a1:e0:d7:b2:e9: b1:3f:0e:f5:8c:b1:3a:2d:30:bf:8f:17:e3:be:91: 81:01:c3:a6:29:64:01:53:ec:c4:1b:bb:07:06:79: bd:86:31:12:ee:86:8e:94:cf:d4:54:12:68:bb:5b: 49:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FE:A0:C3:CA:72:53:E1:1A:D2:D3:10:42:3D:BA:7C:D1:EB:DA:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b9116837-e5d6-3169-80de-95f0f7e66807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:14:ad:16:c7:95:8d:8c:7b:30:eb:20:d7:b8:dd:99:b9:a3: 0c:ac:ef:3d:d6:1a:3e:ad:01:d8:e7:f7:cb:e6:ed:9f:2e:76: c1:a2:9f:ac:c8:30:88:ea:fc:e1:2e:e2:35:c6:76:0a:ae:28: d5:0a:93:94:fe:7a:69:5e:b5:54:0b:6d:4d:72:87:7f:2e:ca: 3b:c6:8e:a7:de:2d:fe:a1:90:4a:b7:ea:7a:c5:ab:85:f6:66: 1b:3d:d4:4f:dc:3a:d4:24:a5:c5:2c:88:37:09:4f:05:43:4e: 71:0e:d6:ea:8f:81:04:7d:c4:d3:9d:5e:56:0b:23:56:ac:5c: 18:2f:38:87:94:35:e5:ff:9a:a0:a6:bd:06:4d:55:6e:fe:29: 8f:52:ca:fb:99:3d:85:a6:67:b5:7c:4f:d9:71:82:54:1f:21: a0:78:c3:66:ac:5d:cd:38:0d:c5:ad:2e:0b:ba:d6:be:cc:f0: 64:c4:8c:b0:1d:30:d9:ef:16:88:27:2b:48:42:4e:a4:67:08: 19:0e:97:ea:47:82:44:b6:4f:29:ee:a5:97:e2:60:42:e1:7e: df:8b:d6:a7:e8:e6:9e:bb:60:60:e7:34:37:3d:9d:23:66:b8: 35:15:8e:a2:ce:9c:f7:2e:44:9f:d8:97:f3:b1:75:ba:7a:d4: 59:6d:bd:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pY9vs7T1Ji7BvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MGU5Yjk3OTEtNTU5Ny00NGFlLTg0M2ItOThlYzgyMDIyMDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8PxwUQyMhf1AE6jNvYORaQHNSiY/y8lLwky bEhdrBBRscEemvSFhTvdyW1SfZ94tq98qoK7OR787g7vRGshBaiZvLxJDYU28avv bQji9HK7zR8ZVgkqQh7NjM5q45SNY1Xb1gz/LVqP8cJzabhfiEtbCWsvejVUYbvm 4QafAzsfsMcvrh1sqBCeoKInAIeVw0wIMtSJ6dUNCkSwktkvPuhiyQkPvyJRy1tM 63tKTcVll6I/W2+UgBhfjEhKLDyN7v4yTI8AYG7M8xFeoeDXsumxPw71jLE6LTC/ jxfjvpGBAcOmKWQBU+zEG7sHBnm9hjES7oaOlM/UVBJou1tJLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7+oMPKclPhGtLTEEI9unzR69pVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjkxMTY4MzctZTVkNi0z MTY5LTgwZGUtOTVmMGY3ZTY2ODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUUrRbHlY2MezDrINe43Zm5owys7z3WGj6tAdjn98vm7Z8udsGin6zI MIjq/OEu4jXGdgquKNUKk5T+emletVQLbU1yh38uyjvGjqfeLf6hkEq36nrFq4X2 Zhs91E/cOtQkpcUsiDcJTwVDTnEO1uqPgQR9xNOdXlYLI1asXBgvOIeUNeX/mqCm vQZNVW7+KY9SyvuZPYWmZ7V8T9lxglQfIaB4w2asXc04DcWtLgu61r7M8GTEjLAd MNnvFognK0hCTqRnCBkOl+pHgkS2TynupZfiYELhft+L1qfo5p67YGDnNDc9nSNm uDUVjqLOnPcuRJ/Yl/Oxdbp61Fltvd0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:05 2025 by rpki-client