$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f75d8ad8-b7b5-3eed-b306-06679405db65.roa File: f75d8ad8-b7b5-3eed-b306-06679405db65.roa (raw, json) Hash identifier: R5ZeQ96Fvpm75M4b3n7yWdfDJoO6UUiN/6jxQY5jg6g= Subject key identifier: 37:85:25:46:50:27:7A:13:3C:A2:10:73:CE:E2:C7:D0:4F:AE:EC:50 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BBFA5BA255F3D0E0ACE315400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f75d8ad8-b7b5-3eed-b306-06679405db65.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ba:25:5f:3d:0e:0a:ce:31:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=2f29499b-6370-45de-b996-83488318fd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:62:fd:5e:dc:6a:c5:5d:94:ea:7f:e1:04:60: 65:7f:62:12:29:94:4d:7a:bb:9c:b5:de:f7:d9:cb: a7:f7:3a:ba:da:b4:ea:bc:09:54:50:ce:11:8e:03: ce:d0:74:87:c6:d0:88:3f:3d:ba:d9:1b:b0:41:61: 6e:f5:1c:98:c5:fb:08:bc:cd:f0:9f:d2:21:2b:61: 05:30:f5:c1:f7:ff:9b:35:ad:e3:83:05:73:ba:2f: 12:ad:e0:a6:1f:5d:4e:3e:83:44:3f:96:82:c5:87: 24:82:bb:b7:9a:f0:da:4d:f7:9e:db:a0:66:89:32: a6:08:71:c0:6d:9e:81:57:8f:c3:31:65:5c:3f:85: c0:1b:9a:3c:d2:b3:ec:28:71:72:3e:ad:fc:76:82: 50:85:6a:1d:81:cd:92:de:f5:b5:cc:ff:7b:de:4d: fa:28:ae:c9:14:9c:b6:de:fa:f1:a3:c2:18:d6:98: 5e:78:a7:e1:df:94:e8:8a:c8:cc:ca:a9:bc:e8:5c: 1c:e5:aa:91:46:11:97:48:65:83:a1:cb:70:fa:32: 96:e0:3e:a6:ef:51:84:e2:bd:f1:0c:16:23:a1:d1: e4:79:e5:71:80:b9:d7:4b:95:48:64:30:ef:8d:e5: 35:b9:ed:94:c9:84:af:e5:d3:fb:c3:db:60:8d:df: 64:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:85:25:46:50:27:7A:13:3C:A2:10:73:CE:E2:C7:D0:4F:AE:EC:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f75d8ad8-b7b5-3eed-b306-06679405db65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f1:68:44:b8:15:83:42:bf:eb:8b:d9:14:e9:c1:5f:6e:84: 48:63:b5:6c:e9:c4:7e:22:b8:3f:3f:20:65:b1:a4:78:5d:7e: 48:24:ee:db:cb:c1:8c:75:2e:2c:11:5e:25:96:be:51:4e:50: 39:a1:af:a4:e9:17:18:1a:26:12:7a:ee:2d:fd:d2:b2:04:82: 25:8b:dc:20:cd:75:d2:32:d0:17:3b:6b:f0:67:4a:b0:6d:43: 7e:1c:20:83:5a:ac:b9:37:b3:ab:a7:7f:f1:0c:ed:38:64:78: 73:a3:7a:3e:69:29:74:22:5c:69:82:de:bb:5b:8c:a7:2c:ae: 61:c7:2b:ca:bd:2a:de:b7:18:32:13:ae:1e:81:2e:35:fc:e6: a1:88:14:a8:d1:2e:f0:84:a0:d3:82:68:10:c8:43:7c:6a:21: 7b:4a:87:05:31:59:5a:d6:3f:07:e8:a3:39:b8:53:2c:00:17: 5b:2e:4c:08:83:e1:fa:67:d0:dc:6f:02:b6:c7:50:1b:55:9d: 50:5e:48:2e:c3:1d:2b:b7:93:21:35:63:3a:78:be:1f:ac:0d: 3c:80:83:e9:cc:12:c0:42:36:a6:ca:f2:12:03:1d:29:b7:8d: b9:1a:f3:ed:a8:23:24:dc:2f:c1:3f:c6:ad:68:24:30:66:a1: 7d:b8:c5:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbolXz0OCs4xVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MmYyOTQ5OWItNjM3MC00NWRlLWI5OTYtODM0ODgzMThmZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWL9XtxqxV2U6n/hBGBlf2ISKZRNeructd73 2cun9zq62rTqvAlUUM4RjgPO0HSHxtCIPz262RuwQWFu9RyYxfsIvM3wn9IhK2EF MPXB9/+bNa3jgwVzui8SreCmH11OPoNEP5aCxYckgru3mvDaTfee26BmiTKmCHHA bZ6BV4/DMWVcP4XAG5o80rPsKHFyPq38doJQhWodgc2S3vW1zP973k36KK7JFJy2 3vrxo8IY1pheeKfh35ToisjMyqm86Fwc5aqRRhGXSGWDoctw+jKW4D6m71GE4r3x DBYjodHkeeVxgLnXS5VIZDDvjeU1ue2UyYSv5dP7w9tgjd9k0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeFJUZQJ3oTPKIQc87ix9BPruxQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjc1ZDhhZDgtYjdiNS0z ZWVkLWIzMDYtMDY2Nzk0MDVkYjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITxaES4FYNCv+uL2RTpwV9uhEhjtWzpxH4iuD8/IGWxpHhdfkgk7tvL wYx1LiwRXiWWvlFOUDmhr6TpFxgaJhJ67i390rIEgiWL3CDNddIy0Bc7a/BnSrBt Q34cIINarLk3s6unf/EM7ThkeHOjej5pKXQiXGmC3rtbjKcsrmHHK8q9Kt63GDIT rh6BLjX85qGIFKjRLvCEoNOCaBDIQ3xqIXtKhwUxWVrWPwfoozm4UywAF1suTAiD 4fpn0NxvArbHUBtVnVBeSC7DHSu3kyE1Yzp4vh+sDTyAg+nMEsBCNqbK8hIDHSm3 jbka8+2oIyTcL8E/xq1oJDBmoX24xbQ= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:03 2025 by rpki-client