$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f13ee75d-592a-304a-95df-f636e06e0abc.roa File: f13ee75d-592a-304a-95df-f636e06e0abc.roa (raw, json) Hash identifier: sS7WkrO/IBFSoyWgTTwhGExtcGF+JVn6WFVOdZlR/Xs= Subject key identifier: C1:4A:24:94:2E:3D:F5:B3:54:1C:8E:AC:4F:EC:30:0E:6D:E7:B0:7B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52E9B1966A478812F1DF3860 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f13ee75d-592a-304a-95df-f636e06e0abc.roa Signing time: Fri 26 Sep 2025 15:14:51 +0000 ROA not before: Fri 26 Sep 2025 15:14:51 +0000 ROA not after: Thu 25 Dec 2025 16:14:51 +0000 asID: 8069 IP address blocks: 20.153.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:e9:b1:96:6a:47:88:12:f1:df:38:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 15:14:51 2025 GMT Not After : Dec 25 16:14:51 2025 GMT Subject: CN=4f20f49c-f183-45c7-bf28-d926cc6da322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:66:35:69:a4:cc:45:22:68:a9:42:d8:b5:48: a5:d2:2d:87:84:ce:21:33:25:8b:92:c4:f1:16:e1: e6:89:c3:3a:60:5c:f1:ac:83:34:bb:cc:57:5b:c7: 08:04:e3:0b:12:e3:26:4e:06:e5:1c:04:85:95:7d: b6:4d:61:25:75:a8:a9:4d:49:a6:c4:1b:49:2e:01: 2b:25:1f:4d:13:02:dd:ff:af:b0:ce:5d:1d:19:81: ae:62:95:13:28:14:2b:fe:35:df:e7:9d:b2:b4:03: 4f:89:6a:4b:78:58:c5:23:37:38:03:9c:1c:aa:36: 7d:71:eb:d6:ae:53:52:76:dd:ac:dd:73:03:c2:cf: b5:aa:e2:67:82:66:e6:ff:30:e8:44:99:5c:e8:fc: 29:22:c3:e0:ee:4d:00:4c:be:61:34:e3:a6:80:7f: 20:5f:01:3d:69:83:77:3d:54:ad:31:f4:3f:1f:40: cc:87:33:ab:81:a5:ab:39:61:cf:3f:64:1b:8a:76: b9:a8:a7:ef:e5:cd:32:5c:ec:78:47:d9:57:1f:de: 30:c2:75:d5:b9:46:52:ac:9c:20:28:a0:ba:5f:e1: 93:61:34:30:85:4a:b9:ae:6e:16:08:cd:96:a4:0c: b0:aa:17:0b:77:91:19:af:70:57:98:f5:48:72:2a: 93:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4A:24:94:2E:3D:F5:B3:54:1C:8E:AC:4F:EC:30:0E:6D:E7:B0:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f13ee75d-592a-304a-95df-f636e06e0abc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:d2:f6:02:40:9f:de:3e:5e:1f:d7:44:65:be:94:a5:05:68: 95:5f:7d:60:d1:df:ef:f1:43:61:26:ac:19:fe:27:b1:41:9b: a3:07:1d:ab:d7:cc:24:20:b2:eb:ba:62:6d:be:ad:19:4c:a3: 7c:6c:b6:ee:2f:f3:16:8a:78:67:c9:43:f2:d3:3b:00:80:52: 91:24:f6:70:e1:8b:fd:0e:59:1f:a8:b9:90:f1:15:55:d4:c5: df:70:14:88:00:42:50:43:4a:87:89:57:6c:b3:c3:ce:a4:75: 86:15:c9:8a:0c:2c:f3:e4:f8:c9:87:c9:ca:e3:14:7d:08:a6: 60:e3:9f:52:70:2a:32:2f:8b:db:de:92:b4:36:13:21:76:4f: 4c:1e:1f:cd:5f:df:2e:26:a7:8c:c9:0a:0b:aa:1f:ea:60:73: 99:97:64:79:4a:0a:3e:9e:0b:3f:2d:4a:06:2f:67:b6:3a:cc: fa:f4:00:e7:40:68:fa:3e:79:2c:ab:c9:1c:4a:a9:b3:a5:43: 1a:c5:dd:61:1a:57:30:68:f9:55:21:58:0b:24:b9:51:e6:b5: 77:b3:3f:a4:26:f0:9a:55:be:2a:51:9a:df:ec:b9:5f:63:4a: b9:d0:b7:f6:6f:97:7e:b3:cb:0c:05:ac:f1:f7:b9:14:4c:3a: b9:55:18:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtS6bGWakeIEvHfOGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjE1MTQ1MVoXDTI1MTIyNTE2MTQ1MVowLzEtMCsGA1UEAxMk NGYyMGY0OWMtZjE4My00NWM3LWJmMjgtZDkyNmNjNmRhMzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGY1aaTMRSJoqULYtUil0i2HhM4hMyWLksTx FuHmicM6YFzxrIM0u8xXW8cIBOMLEuMmTgblHASFlX22TWEldaipTUmmxBtJLgEr JR9NEwLd/6+wzl0dGYGuYpUTKBQr/jXf552ytANPiWpLeFjFIzc4A5wcqjZ9cevW rlNSdt2s3XMDws+1quJngmbm/zDoRJlc6PwpIsPg7k0ATL5hNOOmgH8gXwE9aYN3 PVStMfQ/H0DMhzOrgaWrOWHPP2Qbina5qKfv5c0yXOx4R9lXH94wwnXVuUZSrJwg KKC6X+GTYTQwhUq5rm4WCM2WpAywqhcLd5EZr3BXmPVIciqT5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFKJJQuPfWzVByOrE/sMA5t57B7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjEzZWU3NWQtNTkyYS0z MDRhLTk1ZGYtZjYzNmUwNmUwYWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJljMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvS9gJAn94+Xh/XRGW+lKUFaJVffWDR3+/xQ2EmrBn+J7FBm6MHHavX zCQgsuu6Ym2+rRlMo3xstu4v8xaKeGfJQ/LTOwCAUpEk9nDhi/0OWR+ouZDxFVXU xd9wFIgAQlBDSoeJV2yzw86kdYYVyYoMLPPk+MmHycrjFH0IpmDjn1JwKjIvi9ve krQ2EyF2T0weH81f3y4mp4zJCguqH+pgc5mXZHlKCj6eCz8tSgYvZ7Y6zPr0AOdA aPo+eSyryRxKqbOlQxrF3WEaVzBo+VUhWAskuVHmtXezP6Qm8JpVvipRmt/suV9j SrnQt/Zvl36zywwFrPH3uRRMOrlVGDc= -----END CERTIFICATE-----Generated at Wed Nov 5 10:19:47 2025 by rpki-client