$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bce0494a-ea55-37d5-890f-f7e08109514e.roa File: bce0494a-ea55-37d5-890f-f7e08109514e.roa (raw, json) Hash identifier: Rt128sUmDTa6vMXEmvDL/ZO0OH1WutKsk5S2Ow1F3TQ= Subject key identifier: FE:94:CD:E7:3B:2C:D1:82:34:9F:10:39:FE:25:1E:17:8D:45:44:7E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA9755245F6D967A2FDF9AA80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bce0494a-ea55-37d5-890f-f7e08109514e.roa Signing time: Mon 27 Oct 2025 15:15:42 +0000 ROA not before: Mon 27 Oct 2025 15:15:42 +0000 ROA not after: Sun 25 Jan 2026 16:15:42 +0000 asID: 8069 IP address blocks: 20.153.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:75:52:45:f6:d9:67:a2:fd:f9:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 27 15:15:42 2025 GMT Not After : Jan 25 16:15:42 2026 GMT Subject: CN=385e14b2-dc96-4511-899c-40868fd55f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:72:29:5c:9a:73:04:95:c0:ef:00:d9:56:14: 39:02:7a:c9:e2:e7:5b:b8:e7:4e:48:e0:0b:d9:57: dd:86:ea:21:2c:e9:06:9b:e9:76:dc:20:92:e1:16: e8:55:d6:82:60:24:a9:72:88:71:c3:f3:91:f5:cc: f1:12:7e:88:03:26:83:bb:c6:0f:dc:a6:a5:bd:0c: ab:81:6e:17:83:fa:91:cd:c5:05:00:29:4e:07:cb: d4:e0:1a:be:4b:0c:08:99:c5:69:37:3d:8d:7e:92: 6d:41:c9:02:c5:3d:5c:a2:2f:7b:43:ac:ae:36:99: c5:38:75:02:6a:3d:e2:b1:2e:ab:ac:fd:c6:23:63: e1:04:0f:21:68:77:74:bb:1f:a4:a0:76:e3:49:e6: 36:b6:31:24:11:02:b7:32:0e:e7:58:b8:ed:6b:98: 7a:e1:04:a5:00:55:eb:5f:13:dc:ed:53:59:70:46: a8:9d:01:23:56:c1:58:79:76:45:bb:0d:a3:6e:49: f9:c5:19:ba:65:bc:76:0f:ec:0e:95:b6:e8:4e:ce: 9f:91:32:b5:f1:32:41:77:b1:bf:13:5a:f8:99:1e: 03:65:84:11:35:e6:b5:93:f9:97:da:4e:a3:f0:aa: d6:98:1a:06:7a:b8:53:97:0d:70:26:ed:55:62:79: bc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:94:CD:E7:3B:2C:D1:82:34:9F:10:39:FE:25:1E:17:8D:45:44:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bce0494a-ea55-37d5-890f-f7e08109514e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:68:d5:13:6d:77:0e:a6:17:2d:ce:3a:82:5c:41:6e:a3:8d: 53:73:d3:76:d8:75:3c:9c:2e:a6:30:18:46:c8:13:06:53:29: 38:97:df:ee:fb:42:16:02:05:e9:bb:9b:39:4f:26:96:22:48: f7:4c:f0:60:d3:d6:c2:67:c1:64:cb:75:e4:44:47:5f:ea:1a: 21:d7:1b:da:86:21:4c:5c:8f:73:3a:f5:71:21:f1:79:30:98: 7e:9c:69:90:a7:7a:3f:45:6c:12:33:00:6c:57:e7:49:d3:bd: 36:27:70:9f:13:b7:f1:84:02:d2:a4:65:ec:cd:c0:ea:f5:39: 49:59:4a:e7:ee:b4:d4:86:4a:a7:1f:39:c8:97:96:76:2e:51: 39:f2:58:c0:01:f9:be:1b:ec:dd:e9:6b:35:55:af:3a:da:ef: 0b:cb:ed:95:26:90:0a:38:85:f1:97:91:e7:34:6b:42:d9:76: b5:03:a6:c1:74:eb:29:b1:b9:2c:b6:b1:c9:9c:ee:db:27:9d: 17:3c:1c:2d:9c:a7:0e:33:a6:d7:1e:4e:bc:ad:d8:4e:de:04: 6a:22:1b:6d:34:01:85:c3:2b:e8:b3:64:67:85:03:cd:21:ce: f2:c7:61:35:73:c5:37:f5:a4:c9:79:fe:94:32:4e:db:e6:5b: 71:c6:0c:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupdVJF9tlnov35qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNzE1MTU0MloXDTI2MDEyNTE2MTU0MlowLzEtMCsGA1UEAxMk Mzg1ZTE0YjItZGM5Ni00NTExLTg5OWMtNDA4NjhmZDU1ZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnIpXJpzBJXA7wDZVhQ5AnrJ4udbuOdOSOAL 2VfdhuohLOkGm+l23CCS4RboVdaCYCSpcohxw/OR9czxEn6IAyaDu8YP3KalvQyr gW4Xg/qRzcUFAClOB8vU4Bq+SwwImcVpNz2NfpJtQckCxT1coi97Q6yuNpnFOHUC aj3isS6rrP3GI2PhBA8haHd0ux+koHbjSeY2tjEkEQK3Mg7nWLjta5h64QSlAFXr XxPc7VNZcEaonQEjVsFYeXZFuw2jbkn5xRm6Zbx2D+wOlbboTs6fkTK18TJBd7G/ E1r4mR4DZYQRNea1k/mX2k6j8KrWmBoGerhTlw1wJu1VYnm8yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6Uzec7LNGCNJ8QOf4lHheNRUR+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYmNlMDQ5NGEtZWE1NS0z N2Q1LTg5MGYtZjdlMDgxMDk1MTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJo1RNtdw6mFy3OOoJcQW6jjVNz03bYdTycLqYwGEbIEwZTKTiX3+77 QhYCBem7mzlPJpYiSPdM8GDT1sJnwWTLdeRER1/qGiHXG9qGIUxcj3M69XEh8Xkw mH6caZCnej9FbBIzAGxX50nTvTYncJ8Tt/GEAtKkZezNwOr1OUlZSufutNSGSqcf OciXlnYuUTnyWMAB+b4b7N3pazVVrzra7wvL7ZUmkAo4hfGXkec0a0LZdrUDpsF0 6ymxuSy2scmc7tsnnRc8HC2cpw4zptceTryt2E7eBGoiG200AYXDK+izZGeFA80h zvLHYTVzxTf1pMl5/pQyTtvmW3HGDPY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:40:45 2025 by rpki-client