$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dad0d392-2c7c-326e-85d5-1901cea0d1e1.roa File: dad0d392-2c7c-326e-85d5-1901cea0d1e1.roa (raw, json) Hash identifier: QZ/JbtMRxLn9/MAGIaz7v7EbGUiPbe59WEeP2oU8olI= Subject key identifier: 4A:0C:E5:C0:26:D2:0A:8C:F6:BF:9D:29:5E:AC:8E:C3:E1:57:1C:E8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA39D185D74FE38139EADAEC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dad0d392-2c7c-326e-85d5-1901cea0d1e1.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:18:5d:74:fe:38:13:9e:ad:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=126dd8ce-b2bf-43f7-aae6-eb46e6696d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:ce:1c:45:e6:5f:26:d7:82:55:b5:2e:22: f2:e2:fe:93:35:63:1f:e5:e3:08:8f:ba:d5:39:43: 2d:79:63:e0:38:95:a0:23:a9:9e:8e:70:f3:19:87: 65:68:32:1d:4d:b2:70:1c:78:36:0f:a6:23:0f:73: 98:3c:b8:93:29:3d:01:3e:22:60:71:99:97:71:f2: 19:eb:a2:27:64:1d:1c:00:96:7b:30:cd:ca:8f:7e: de:f1:6b:f2:1b:3c:20:a9:7e:eb:e7:6f:8c:c6:39: c4:4d:5c:77:2d:5f:9b:36:41:1c:0c:2e:4a:c8:fb: a2:cb:23:4c:66:ef:e6:3a:6f:65:32:a0:02:46:67: c2:47:ea:b1:01:33:be:36:e4:0f:d9:46:f4:33:b7: 2e:3e:1f:6b:af:a2:7b:de:0c:b3:b9:d3:bf:a8:99: b2:d1:1a:da:74:d0:28:52:2a:92:f0:2f:eb:49:75: e3:f9:1f:88:d6:4f:61:a9:8e:92:e8:29:89:99:6e: 9a:a4:b3:51:79:ce:03:7e:95:0c:a7:9c:48:07:2f: 20:5c:d2:48:58:b9:97:c7:60:c5:e0:51:f3:d1:5a: 10:4e:4b:f8:ca:47:5e:f5:90:79:71:bb:02:67:6f: 1f:4a:35:7c:6d:62:9b:82:a3:b9:db:78:ca:ba:b3: 73:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0C:E5:C0:26:D2:0A:8C:F6:BF:9D:29:5E:AC:8E:C3:E1:57:1C:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dad0d392-2c7c-326e-85d5-1901cea0d1e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:c9:93:70:c0:da:9d:e4:df:46:61:b4:2b:de:11:f6:22:e0: 1d:40:43:8d:ee:8e:b2:24:ce:6b:97:84:2d:91:8d:38:71:4c: 2c:9c:81:cd:49:e2:4e:e3:a4:fa:99:b1:4a:36:b5:ef:06:40: 54:1f:1a:23:db:bc:7b:58:9a:f9:78:2c:cc:ab:6c:e3:65:25: 26:ca:6a:05:5b:d4:6a:23:1d:bd:c5:81:58:47:cc:d5:85:37: db:db:21:01:71:a8:1b:e2:d6:16:da:91:10:23:e3:a8:bd:81: b6:55:f3:57:8d:11:ab:55:4b:eb:21:8d:ae:cd:73:c5:0b:62: 8c:37:e1:64:b6:3e:01:01:0d:a1:85:a8:e4:eb:f9:36:5a:4f: 6d:45:60:f1:95:5b:d1:87:8f:87:db:f9:fb:2e:40:0a:2b:d2: af:11:45:fc:30:e1:3c:35:53:77:e6:c0:fc:17:84:d3:ca:01: cf:8d:76:d5:d9:29:f1:4e:f1:0a:bc:57:58:aa:06:23:1e:ff: bd:ff:bd:10:0d:61:12:cf:97:da:43:ec:bf:a6:54:5f:62:3a: 3d:a5:fc:7a:cb:69:fe:88:74:5f:1b:e5:24:6d:b5:17:3b:bd: 18:de:a2:dd:98:73:0b:cc:6a:46:f0:04:81:2e:8a:b1:67:f2: d9:0f:84:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRhddP44E56trsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MTI2ZGQ4Y2UtYjJiZi00M2Y3LWFhZTYtZWI0NmU2Njk2ZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyDOHEXmXybXglW1LiLy4v6TNWMf5eMIj7rV OUMteWPgOJWgI6mejnDzGYdlaDIdTbJwHHg2D6YjD3OYPLiTKT0BPiJgcZmXcfIZ 66InZB0cAJZ7MM3Kj37e8WvyGzwgqX7r52+MxjnETVx3LV+bNkEcDC5KyPuiyyNM Zu/mOm9lMqACRmfCR+qxATO+NuQP2Ub0M7cuPh9rr6J73gyzudO/qJmy0RradNAo UiqS8C/rSXXj+R+I1k9hqY6S6CmJmW6apLNRec4DfpUMp5xIBy8gXNJIWLmXx2DF 4FHz0VoQTkv4ykde9ZB5cbsCZ28fSjV8bWKbgqO523jKurNzrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoM5cAm0gqM9r+dKV6sjsPhVxzoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGFkMGQzOTItMmM3Yy0z MjZlLTg1ZDUtMTkwMWNlYTBkMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJm3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7Jk3DA2p3k30ZhtCveEfYi4B1AQ43ujrIkzmuXhC2RjThxTCycgc1J 4k7jpPqZsUo2te8GQFQfGiPbvHtYmvl4LMyrbONlJSbKagVb1GojHb3FgVhHzNWF N9vbIQFxqBvi1hbakRAj46i9gbZV81eNEatVS+shja7Nc8ULYow34WS2PgEBDaGF qOTr+TZaT21FYPGVW9GHj4fb+fsuQAor0q8RRfww4Tw1U3fmwPwXhNPKAc+NdtXZ KfFO8Qq8V1iqBiMe/73/vRANYRLPl9pD7L+mVF9iOj2l/HrLaf6IdF8b5SRttRc7 vRjeot2YcwvMakbwBIEuirFn8tkPhDo= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:42 2025 by rpki-client