$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d72792fe-5daf-30c7-8173-737c0832e061.roa File: d72792fe-5daf-30c7-8173-737c0832e061.roa (raw, json) Hash identifier: YuVBgmLK046/CtUQMFxqFIR9IYHaTSGjt+/rkai1cuU= Subject key identifier: 78:B2:9D:E6:8D:11:80:48:3A:62:7E:45:BA:47:5D:40:27:1F:7E:21 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA39D3802A104057FCD1C2D80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d72792fe-5daf-30c7-8173-737c0832e061.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:38:02:a1:04:05:7f:cd:1c:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=a0f99d99-7532-4208-af77-0bb80d8fb00d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5c:e8:ef:fb:f6:f1:e9:92:e0:9d:7a:23:2a: d2:b7:9e:0c:53:2a:fb:a0:1f:a5:c1:1d:f0:33:25: 99:d9:e1:8b:a1:91:0c:cd:a0:55:ad:4a:2a:66:f8: bb:01:74:4f:74:da:f9:a3:89:e2:72:b3:95:a6:45: c5:0d:e9:e0:c3:05:c1:c1:0f:29:d5:b4:27:1c:7d: 16:f8:3f:45:c0:03:e0:c4:83:c9:cb:e8:49:46:73: 4b:fa:57:82:12:23:8b:86:ae:47:57:2c:c1:4f:89: 88:91:1d:c4:e4:31:8b:56:c8:e9:3c:ed:a4:76:1a: 5c:3d:d1:fc:2c:98:94:29:4f:9f:83:a9:22:e7:f8: c9:b5:b4:2e:34:44:7e:fc:cb:5c:00:f5:17:7f:c0: 8b:b2:df:ab:5a:6c:03:61:60:d9:5e:da:b9:78:ac: 00:64:2d:f8:5f:0f:a4:f4:a3:e6:40:3d:40:4e:71: 16:99:64:28:c8:9e:a4:df:2a:f6:8f:23:eb:fe:92: 57:be:91:1e:21:5b:a1:db:c3:5e:2a:cd:c7:83:39: 5f:30:e8:e4:cd:be:f4:fd:0c:16:5d:d0:f6:fe:2f: f0:2a:cb:a9:ed:d6:ad:90:e9:ad:e3:19:e3:69:44: 33:d9:24:4b:21:6a:f5:09:94:78:10:1e:db:60:07: 23:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B2:9D:E6:8D:11:80:48:3A:62:7E:45:BA:47:5D:40:27:1F:7E:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d72792fe-5daf-30c7-8173-737c0832e061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:bb:e5:17:02:77:e5:dc:5c:1b:9b:b4:2d:a1:b0:41:4d:09: d3:8b:b9:39:83:c6:5f:8c:8d:fc:0c:a2:a3:7b:d6:4d:e3:59: 33:d2:26:3e:30:eb:22:ac:be:c7:b8:43:ec:db:61:29:b6:6c: f8:ed:36:98:e1:ea:86:e8:e0:33:e8:9e:ac:43:73:85:e7:51: 3f:6a:32:f5:be:72:3a:53:9f:0e:79:c0:b5:d3:95:9a:a7:f0: 0d:95:1b:5e:51:28:0e:c5:e4:57:92:d7:01:12:8b:ef:96:ac: 59:42:68:a4:c4:56:e8:ce:fd:ac:66:30:c4:b6:27:8b:06:22: e2:0f:80:2a:7a:42:2c:80:e4:35:10:ef:d3:50:39:fd:10:4b: 3b:4f:4a:3d:e7:1c:4b:08:e4:ce:13:44:3a:82:bc:1d:42:e1: 78:ac:a6:db:22:b9:5e:cf:cc:36:ad:e3:7b:b3:22:61:69:20: 4d:5c:d3:a6:a4:c9:33:7a:d6:16:64:4f:50:0a:9f:5b:00:3b: 39:d4:1b:16:fd:fa:1d:b5:1e:a6:07:e7:f4:ca:df:a5:ba:db: ce:b6:28:4e:be:2b:c2:cb:05:0f:fc:92:ba:7e:0b:66:aa:a2: bf:fd:bb:d1:a1:8f:e5:63:b6:e8:5e:01:d3:e4:e3:c1:90:6c: 91:52:5b:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTgCoQQFf80cLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YTBmOTlkOTktNzUzMi00MjA4LWFmNzctMGJiODBkOGZiMDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1zo7/v28emS4J16IyrSt54MUyr7oB+lwR3w MyWZ2eGLoZEMzaBVrUoqZvi7AXRPdNr5o4nicrOVpkXFDengwwXBwQ8p1bQnHH0W +D9FwAPgxIPJy+hJRnNL+leCEiOLhq5HVyzBT4mIkR3E5DGLVsjpPO2kdhpcPdH8 LJiUKU+fg6ki5/jJtbQuNER+/MtcAPUXf8CLst+rWmwDYWDZXtq5eKwAZC34Xw+k 9KPmQD1ATnEWmWQoyJ6k3yr2jyPr/pJXvpEeIVuh28NeKs3HgzlfMOjkzb70/QwW XdD2/i/wKsup7datkOmt4xnjaUQz2SRLIWr1CZR4EB7bYAcjqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiyneaNEYBIOmJ+RbpHXUAnH34hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDcyNzkyZmUtNWRhZi0z MGM3LTgxNzMtNzM3YzA4MzJlMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKq75RcCd+XcXBubtC2hsEFNCdOLuTmDxl+MjfwMoqN71k3jWTPSJj4w 6yKsvse4Q+zbYSm2bPjtNpjh6obo4DPonqxDc4XnUT9qMvW+cjpTnw55wLXTlZqn 8A2VG15RKA7F5FeS1wESi++WrFlCaKTEVujO/axmMMS2J4sGIuIPgCp6QiyA5DUQ 79NQOf0QSztPSj3nHEsI5M4TRDqCvB1C4XisptsiuV7PzDat43uzImFpIE1c06ak yTN61hZkT1AKn1sAOznUGxb9+h21HqYH5/TK36W62862KE6+K8LLBQ/8krp+C2aq or/9u9Ghj+VjtuheAdPk48GQbJFSWyI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:53:40 2025 by rpki-client