$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da1d564b-362d-3a9a-993d-48e4fe19b098.roa File: da1d564b-362d-3a9a-993d-48e4fe19b098.roa (raw, json) Hash identifier: xn65OlTbQIYF5FKg6SCdv22KrSO8OGMTuB+kha+s/Ec= Subject key identifier: 35:5F:56:D7:E2:91:C7:E7:B2:25:37:8F:91:FD:C8:F0:07:5C:3B:D6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA9754F4F0B023BB9BBA03680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da1d564b-362d-3a9a-993d-48e4fe19b098.roa Signing time: Mon 27 Oct 2025 15:15:41 +0000 ROA not before: Mon 27 Oct 2025 15:15:41 +0000 ROA not after: Sun 25 Jan 2026 16:15:41 +0000 asID: 8069 IP address blocks: 20.153.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:75:4f:4f:0b:02:3b:b9:bb:a0:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 27 15:15:41 2025 GMT Not After : Jan 25 16:15:41 2026 GMT Subject: CN=8cca53e5-577e-4217-883b-571ecf62db54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f2:b6:8f:52:7a:fb:cf:46:58:46:9f:87:73: 8d:58:1d:2a:1c:fd:53:c4:09:5e:02:e1:64:95:69: 44:95:1e:cd:7c:a1:a5:a1:0c:07:52:6e:66:40:17: 15:d8:66:cd:de:64:af:12:d9:54:c1:74:f7:71:8c: 24:93:b7:ac:af:81:aa:71:8a:bb:0c:b8:cb:1a:5b: cf:2e:9c:7d:00:39:c0:03:b3:f4:fd:b3:0f:ea:2e: 0d:44:81:46:2d:43:f6:0f:5f:83:fd:1e:e3:ab:9d: ed:66:26:b6:e5:ef:fc:68:f5:c2:5f:f3:d6:35:54: fb:ff:8b:73:f6:ff:2e:5b:e4:d6:b9:5d:c5:61:5b: d8:8a:22:14:a8:f2:ae:23:7b:ef:1a:b3:da:b2:33: 2d:31:f2:64:75:e6:07:f8:a1:23:a1:a3:f3:82:2c: 40:a2:e5:0f:b8:93:44:39:13:aa:da:f9:da:f1:b8: f5:d5:b6:f2:93:b1:a0:d6:0a:69:1c:c9:4c:3c:d1: 08:47:ec:d6:a0:a1:44:92:a4:97:29:75:5c:75:ea: 51:cb:6a:1c:a6:93:d6:3b:b5:55:10:97:59:54:96: 0a:c9:43:56:1d:e6:cf:d2:a9:a5:f3:18:fc:4e:7c: 0e:a3:c8:6b:e9:18:33:bd:e8:bb:3a:79:9a:c1:f1: c2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5F:56:D7:E2:91:C7:E7:B2:25:37:8F:91:FD:C8:F0:07:5C:3B:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da1d564b-362d-3a9a-993d-48e4fe19b098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:2f:dd:c8:c9:d3:9f:51:f2:8a:a6:a7:ce:d9:95:84:c4:e5: 47:cc:fe:e8:9e:84:0a:e1:d0:22:f0:27:df:ab:0d:56:55:34: 5a:f5:aa:50:9a:87:31:e9:70:3c:ea:ec:fc:30:67:97:17:0b: dc:fd:60:7e:25:b7:bd:09:eb:c1:63:ee:d8:c8:d5:d5:f1:4b: 3a:6c:f6:50:f2:18:a3:1f:ca:f4:cb:82:dd:a4:cf:88:18:53: a8:04:0f:59:19:d3:4e:a7:84:59:65:bb:76:7c:f8:3d:39:52: 5c:fa:25:70:15:6c:ba:55:5b:c8:ed:bc:fd:1d:6d:ba:6a:31: ae:5d:79:92:1b:82:7f:0c:a9:b4:c1:87:ff:d6:1b:3d:64:32: ac:81:64:7c:72:58:f9:54:96:fa:c1:ff:cf:d4:8c:55:79:e1: 10:e4:49:e1:55:ba:23:0c:6f:df:8e:55:f4:94:d9:d8:15:fd: 83:dc:02:e6:6c:0f:1a:0f:d2:f9:da:8b:08:0f:79:8b:9d:87: b1:22:d3:96:03:b3:bb:cb:9c:cc:92:27:ae:f9:f6:74:d1:62: dc:60:02:56:e5:db:06:b0:ed:48:b7:90:bf:cb:47:5c:1b:78: a2:76:68:f8:f4:7d:af:4b:a6:5c:76:78:99:1a:ec:98:89:a5: 26:74:d4:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupdU9PCwI7ubugNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNzE1MTU0MVoXDTI2MDEyNTE2MTU0MVowLzEtMCsGA1UEAxMk OGNjYTUzZTUtNTc3ZS00MjE3LTg4M2ItNTcxZWNmNjJkYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PK2j1J6+89GWEafh3ONWB0qHP1TxAleAuFk lWlElR7NfKGloQwHUm5mQBcV2GbN3mSvEtlUwXT3cYwkk7esr4GqcYq7DLjLGlvP Lpx9ADnAA7P0/bMP6i4NRIFGLUP2D1+D/R7jq53tZia25e/8aPXCX/PWNVT7/4tz 9v8uW+TWuV3FYVvYiiIUqPKuI3vvGrPasjMtMfJkdeYH+KEjoaPzgixAouUPuJNE OROq2vna8bj11bbyk7Gg1gppHMlMPNEIR+zWoKFEkqSXKXVcdepRy2ocppPWO7VV EJdZVJYKyUNWHebP0qml8xj8TnwOo8hr6Rgzvei7OnmawfHCywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVfVtfikcfnsiU3j5H9yPAHXDvWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGExZDU2NGItMzYyZC0z YTlhLTk5M2QtNDhlNGZlMTliMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEv3cjJ059R8oqmp87ZlYTE5UfM/uiehArh0CLwJ9+rDVZVNFr1qlCa hzHpcDzq7PwwZ5cXC9z9YH4lt70J68Fj7tjI1dXxSzps9lDyGKMfyvTLgt2kz4gY U6gED1kZ006nhFllu3Z8+D05Ulz6JXAVbLpVW8jtvP0dbbpqMa5deZIbgn8MqbTB h//WGz1kMqyBZHxyWPlUlvrB/8/UjFV54RDkSeFVuiMMb9+OVfSU2dgV/YPcAuZs DxoP0vnaiwgPeYudh7Ei05YDs7vLnMySJ6759nTRYtxgAlbl2waw7Ui3kL/LR1wb eKJ2aPj0fa9Lplx2eJka7JiJpSZ01Js= -----END CERTIFICATE-----Generated at Wed Nov 5 10:19:48 2025 by rpki-client