$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ccbe6b35-9d46-3d6a-b109-1ec55c7362b4.roa File: ccbe6b35-9d46-3d6a-b109-1ec55c7362b4.roa (raw, json) Hash identifier: oQCtUgPzPLxrUiAJ4ztlkQueCFa/V5a4SKv/OechpOA= Subject key identifier: 35:69:61:CE:67:16:D3:79:5F:D8:67:F6:31:0F:AF:66:F2:86:BD:19 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA39D3A63652505828CC18040 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ccbe6b35-9d46-3d6a-b109-1ec55c7362b4.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:3a:63:65:25:05:82:8c:c1:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=dea26cb5-702b-472f-a03a-52193a9fea8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:59:9e:2b:4a:fa:d5:74:b1:5e:2e:8c:15:93: f9:23:bc:a0:25:14:ac:bf:dd:12:31:e2:dd:6b:cf: cb:58:22:2f:e5:3c:10:bb:65:c9:f0:b3:88:fa:73: 56:0c:12:73:c5:fd:93:89:51:d8:7d:98:fd:d0:2d: ad:a0:cb:78:ae:ee:d7:5f:eb:bd:7e:a5:95:92:29: 99:1f:69:5b:b1:a5:d2:e5:70:ec:c2:7c:f4:98:38: aa:c6:49:6c:55:5b:69:59:91:35:a1:88:c9:f5:15: 81:03:de:f2:4b:43:4e:4c:89:85:14:e1:04:90:dd: f9:69:d3:f1:8a:7f:61:6e:53:26:07:44:20:11:fd: ab:ee:0c:86:d1:d8:b1:50:a4:19:81:c4:73:c9:cc: 21:3f:b0:d2:11:7d:62:b0:ac:fe:ae:98:b8:0a:80: 92:06:f3:26:eb:35:88:c6:c0:05:f1:3e:32:66:0f: e4:2b:9f:16:d7:82:1c:9e:fe:31:8d:3f:a6:ba:0b: f4:dd:9f:3c:ed:d4:83:e2:5d:37:a0:04:90:d3:cd: 46:97:13:8d:40:f4:25:8f:a7:6f:38:3d:ce:d5:49: b6:4b:e4:3b:57:5d:3d:ef:42:69:b8:84:7f:a4:d7: b0:fc:09:cd:13:a4:5e:22:9d:63:42:60:bd:0e:fa: e6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:69:61:CE:67:16:D3:79:5F:D8:67:F6:31:0F:AF:66:F2:86:BD:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ccbe6b35-9d46-3d6a-b109-1ec55c7362b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d9:9c:79:67:5a:f3:1d:96:b5:11:23:5e:66:5a:c3:20:4f: b1:40:b5:a1:7f:90:9e:59:bf:d6:63:b8:1f:6f:55:be:14:e1: 14:17:19:84:eb:2a:6d:19:01:74:41:7a:c5:fc:dc:4d:9d:3c: 79:12:79:05:e7:07:01:87:91:d5:c9:b6:b8:ad:96:00:9d:e9: 9c:5f:43:dd:36:75:ad:7d:09:64:92:f9:f6:3f:17:f6:b4:23: da:c2:a3:c1:6b:0c:97:49:8c:6e:ae:fc:10:3d:c6:1b:05:73: 1c:73:e9:a3:d3:67:ab:d5:ab:05:5e:0c:0f:32:48:43:e7:1f: 2b:4b:ae:7d:38:a7:47:01:61:cd:ff:0d:f7:bc:69:51:75:ba: 48:03:d2:92:8c:cf:97:0f:88:b4:28:4c:21:3d:06:a6:d2:42: 5a:50:1d:17:6a:2f:22:2b:34:6b:56:14:f4:b6:47:0d:17:a3: d1:0b:5e:90:03:63:76:4d:d9:22:17:2a:00:f3:60:b0:42:05: 83:5d:f7:94:a4:61:45:ec:c0:66:2c:65:0a:0f:ef:92:eb:4d: ff:8d:46:d2:aa:41:02:79:2e:3c:25:e8:1a:cd:ba:7a:5f:30: 73:5e:17:a3:df:f7:3a:b2:1b:6e:6e:c5:5b:b1:ba:34:20:38: 88:9e:a4:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTpjZSUFgozBgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZGVhMjZjYjUtNzAyYi00NzJmLWEwM2EtNTIxOTNhOWZlYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1meK0r61XSxXi6MFZP5I7ygJRSsv90SMeLd a8/LWCIv5TwQu2XJ8LOI+nNWDBJzxf2TiVHYfZj90C2toMt4ru7XX+u9fqWVkimZ H2lbsaXS5XDswnz0mDiqxklsVVtpWZE1oYjJ9RWBA97yS0NOTImFFOEEkN35adPx in9hblMmB0QgEf2r7gyG0dixUKQZgcRzycwhP7DSEX1isKz+rpi4CoCSBvMm6zWI xsAF8T4yZg/kK58W14Icnv4xjT+mugv03Z887dSD4l03oASQ081GlxONQPQlj6dv OD3O1Um2S+Q7V10970JpuIR/pNew/AnNE6ReIp1jQmC9DvrmwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVpYc5nFtN5X9hn9jEPr2byhr0ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2NiZTZiMzUtOWQ0Ni0z ZDZhLWIxMDktMWVjNTVjNzM2MmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvZnHlnWvMdlrURI15mWsMgT7FAtaF/kJ5Zv9ZjuB9vVb4U4RQXGYTr Km0ZAXRBesX83E2dPHkSeQXnBwGHkdXJtritlgCd6ZxfQ902da19CWSS+fY/F/a0 I9rCo8FrDJdJjG6u/BA9xhsFcxxz6aPTZ6vVqwVeDA8ySEPnHytLrn04p0cBYc3/ Dfe8aVF1ukgD0pKMz5cPiLQoTCE9BqbSQlpQHRdqLyIrNGtWFPS2Rw0Xo9ELXpAD Y3ZN2SIXKgDzYLBCBYNd95SkYUXswGYsZQoP75LrTf+NRtKqQQJ5Ljwl6BrNunpf MHNeF6Pf9zqyG25uxVuxujQgOIiepMc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:30 2025 by rpki-client