$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e2c7d3b3-8a76-312e-b43a-ff0dcc0d0444.roa File: e2c7d3b3-8a76-312e-b43a-ff0dcc0d0444.roa (raw, json) Hash identifier: +6FD1r3DljZLV/3PboIoZszs/+Wvv+lDgjNHUJ0f+2M= Subject key identifier: 5D:2B:13:03:AC:E4:6C:CE:86:EA:1F:78:39:11:81:73:CD:74:EA:79 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA39D384209A26BFF24210CC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e2c7d3b3-8a76-312e-b43a-ff0dcc0d0444.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:38:42:09:a2:6b:ff:24:21:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=328928d8-749f-45b6-8774-27793f1ece5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ef:d9:77:e8:d0:a7:f6:27:f1:c0:25:04:00: 05:ac:12:78:83:c0:c9:c6:fb:48:00:93:91:c4:e0: d9:73:6a:15:ba:83:b8:33:36:00:bc:e7:7f:9f:1a: 76:e4:40:05:7e:9c:82:d8:37:d9:d8:0a:a8:26:5d: f7:f1:e7:0f:04:3f:ac:66:26:e5:39:da:9b:ea:35: 9c:1a:c8:4d:7b:37:aa:06:cb:3f:3b:5b:99:4f:22: 29:15:51:ae:72:6f:c4:61:78:71:08:15:70:1c:f1: c0:1e:aa:95:40:bb:2d:2f:56:3a:54:0f:f5:83:45: a7:e4:ca:94:53:5f:69:45:53:47:e3:35:8a:68:73: 46:2f:a1:ba:c2:48:6c:be:0b:33:25:ee:ae:46:0b: d6:6a:02:69:90:d1:ff:87:df:6c:1c:79:f2:d2:2f: 0e:4a:e9:d7:19:d5:b7:ae:9a:68:a7:91:7c:00:4c: a0:5a:a5:5f:68:2e:ca:1a:66:1e:be:0c:65:87:27: 1d:9e:75:9d:f0:86:5e:3b:2f:8a:52:60:37:01:c9: b3:90:65:4b:f0:a5:14:b6:d0:3e:96:aa:0c:38:09: 02:8e:5f:40:f6:67:65:ba:b1:01:7c:d8:ff:f5:fb: 62:ef:06:08:2d:7e:fd:b9:b3:2a:08:c1:e7:13:33: 03:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2B:13:03:AC:E4:6C:CE:86:EA:1F:78:39:11:81:73:CD:74:EA:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e2c7d3b3-8a76-312e-b43a-ff0dcc0d0444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ea:60:06:c9:8a:d8:e4:6e:24:cc:a7:8e:86:17:27:e4:71: 22:18:f5:33:fc:b9:98:35:11:91:13:2a:8a:1f:0c:4d:76:db: 78:71:c2:9d:e0:a6:15:66:33:43:07:40:ea:52:cc:d3:13:22: 18:2b:fd:e3:03:f7:bc:b9:00:13:d4:b8:9b:37:95:50:55:28: 09:b7:f3:54:e5:2f:af:b4:5a:f1:76:7d:11:09:fa:a3:2a:06: 86:1d:1c:89:78:53:e5:26:ca:bb:a6:d2:16:08:f7:53:71:76: db:e6:6c:d0:47:66:b2:05:80:4a:67:3a:e7:c3:71:c5:cb:e6: 9b:b1:1f:25:16:ab:32:6d:2c:57:dc:5d:d5:04:aa:42:35:d6: cb:b5:2f:9e:cb:7a:f3:10:41:04:c9:be:13:93:3e:40:98:f5: c4:89:d2:48:36:da:0b:2c:b2:a1:21:7e:6d:cf:83:7c:65:55: ed:95:8a:7d:47:13:72:a6:d4:65:42:d9:4f:ae:b9:eb:e2:fb: 58:b9:c2:0d:7e:9d:9a:83:56:a0:0a:33:b3:9a:fa:ce:96:19: 4d:bf:c0:c6:ef:f6:b4:ef:77:1c:b5:28:ce:4b:3a:c0:73:d1: 3a:aa:cc:67:70:a5:a8:28:a5:ba:e2:0a:f4:79:36:28:6a:48: 95:72:50:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnThCCaJr/yQhDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MzI4OTI4ZDgtNzQ5Zi00NWI2LTg3NzQtMjc3OTNmMWVjZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue/Zd+jQp/Yn8cAlBAAFrBJ4g8DJxvtIAJOR xODZc2oVuoO4MzYAvOd/nxp25EAFfpyC2DfZ2AqoJl338ecPBD+sZiblOdqb6jWc GshNezeqBss/O1uZTyIpFVGucm/EYXhxCBVwHPHAHqqVQLstL1Y6VA/1g0Wn5MqU U19pRVNH4zWKaHNGL6G6wkhsvgszJe6uRgvWagJpkNH/h99sHHny0i8OSunXGdW3 rppop5F8AEygWqVfaC7KGmYevgxlhycdnnWd8IZeOy+KUmA3AcmzkGVL8KUUttA+ lqoMOAkCjl9A9mdlurEBfNj/9fti7wYILX79ubMqCMHnEzMDfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0rEwOs5GzOhuofeDkRgXPNdOp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTJjN2QzYjMtOGE3Ni0z MTJlLWI0M2EtZmYwZGNjMGQwNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJm+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfqYAbJitjkbiTMp46GFyfkcSIY9TP8uZg1EZETKoofDE1223hxwp3g phVmM0MHQOpSzNMTIhgr/eMD97y5ABPUuJs3lVBVKAm381TlL6+0WvF2fREJ+qMq BoYdHIl4U+Umyrum0hYI91NxdtvmbNBHZrIFgEpnOufDccXL5puxHyUWqzJtLFfc XdUEqkI11su1L57LevMQQQTJvhOTPkCY9cSJ0kg22gsssqEhfm3Pg3xlVe2Vin1H E3Km1GVC2U+uuevi+1i5wg1+nZqDVqAKM7Oa+s6WGU2/wMbv9rTvdxy1KM5LOsBz 0TqqzGdwpagopbriCvR5NihqSJVyUHU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:51 2025 by rpki-client