$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa File: 34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa (raw, json) Hash identifier: Xl2YCraM5jD0LZwjdFBstJOPUC7gnDm+MUe5S0aAVpg= Subject key identifier: 77:56:01:F3:8F:9B:3D:56:FE:A8:00:85:29:15:A7:6B:4F:15:D6:E3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B7F525CB7ECDEECD434EFAB80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.153.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:5c:b7:ec:de:ec:d4:34:ef:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=1a70f65c-e033-418d-bf77-fed2b8b47ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cf:f6:b5:81:3c:f8:6b:80:5d:b5:a1:b6:33: d0:90:72:6c:e2:ce:f7:ff:04:94:2c:13:d2:45:40: a7:42:1d:85:c6:5f:6d:92:41:1d:49:aa:56:a4:37: 38:3c:f5:4e:e8:66:9a:46:f1:76:a4:62:6c:e7:ab: b1:55:50:ed:3c:0f:64:08:65:1c:12:d3:d1:33:c6: e6:b9:25:7b:0b:1d:66:ae:10:07:2c:11:64:10:69: c2:04:74:56:e4:5b:4c:3e:f5:9e:65:33:ce:4b:f1: d9:7e:10:6e:a8:10:3d:a1:82:fa:60:43:56:a5:5b: 1b:36:d6:4c:64:67:74:65:b2:90:e4:d1:ba:40:f2: de:05:53:28:57:e0:e1:d8:10:e6:1b:81:14:b2:73: 5b:3e:69:1c:a1:b4:d7:5b:69:0f:47:f8:1c:07:17: 3c:24:f6:81:7f:5a:d7:d1:11:6d:55:32:f6:a4:1d: 67:ac:80:87:b7:09:7d:c2:65:a1:47:e7:fd:ea:6a: f6:49:cc:2c:bb:29:7d:2b:2b:13:07:99:82:a6:47: c0:11:46:5d:82:97:7a:ca:74:56:08:81:5e:23:22: f0:0d:12:94:4a:a8:98:a2:1b:4a:32:b3:ee:a2:b2: 8e:9d:37:6f:09:8e:18:04:2a:3b:54:19:d1:3c:ae: 78:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:56:01:F3:8F:9B:3D:56:FE:A8:00:85:29:15:A7:6B:4F:15:D6:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:2a:ce:b8:30:b0:f7:c1:e4:50:80:07:21:77:f1:c6:91:97: c8:3d:d8:83:c7:f4:05:a3:3c:18:11:54:8c:cb:ab:28:59:2d: 7b:fd:6d:f1:3f:66:8e:05:d7:40:38:b0:60:05:3d:74:f8:3c: 52:1d:12:d5:b4:cb:f9:83:96:ca:65:f7:2a:4b:35:09:28:a1: 72:f8:4c:11:71:17:91:c4:b6:b9:47:d4:f4:94:8b:f7:0a:a7: 35:10:69:dd:d7:a8:92:31:f5:70:7e:04:5f:7e:a1:c4:9b:e9: fd:af:eb:05:ff:fe:f3:06:7e:01:22:f5:44:70:00:3c:31:ed: d5:b8:1b:af:1e:2b:dc:33:9d:73:31:c1:1a:45:03:d5:85:db: c0:1e:f0:aa:f1:67:cc:9a:08:dc:1e:46:b9:99:d5:e0:23:fa: ec:a3:17:b2:61:dd:95:d7:75:f9:c2:d2:f5:47:30:a4:3b:5f: da:a1:df:4a:f2:1f:3c:15:ed:21:69:ba:17:80:2e:d4:58:10: 1e:57:43:c3:fe:4a:fd:c6:c5:55:7a:a2:ed:1d:b9:ca:c1:82: 35:86:c0:7f:f6:a4:e9:3b:2e:39:a0:c7:7c:55:87:ed:4c:2a: 3a:f0:a5:68:c6:94:7b:5c:ff:b3:56:3a:6b:77:07:7c:68:06: 7f:2e:4b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Uly37N7s1DTvq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MWE3MGY2NWMtZTAzMy00MThkLWJmNzctZmVkMmI4YjQ3YWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M/2tYE8+GuAXbWhtjPQkHJs4s73/wSULBPS RUCnQh2Fxl9tkkEdSapWpDc4PPVO6GaaRvF2pGJs56uxVVDtPA9kCGUcEtPRM8bm uSV7Cx1mrhAHLBFkEGnCBHRW5FtMPvWeZTPOS/HZfhBuqBA9oYL6YENWpVsbNtZM ZGd0ZbKQ5NG6QPLeBVMoV+Dh2BDmG4EUsnNbPmkcobTXW2kPR/gcBxc8JPaBf1rX 0RFtVTL2pB1nrICHtwl9wmWhR+f96mr2Scwsuyl9KysTB5mCpkfAEUZdgpd6ynRW CIFeIyLwDRKUSqiYohtKMrPuorKOnTdvCY4YBCo7VBnRPK54SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdWAfOPmz1W/qgAhSkVp2tPFdbjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzRlYTY4YmMtYzZjZC0z MmUzLTgyMjItYTNlYTlkNjU4MzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUqzrgwsPfB5FCAByF38caRl8g92IPH9AWjPBgRVIzLqyhZLXv9bfE/ Zo4F10A4sGAFPXT4PFIdEtW0y/mDlspl9ypLNQkooXL4TBFxF5HEtrlH1PSUi/cK pzUQad3XqJIx9XB+BF9+ocSb6f2v6wX//vMGfgEi9URwADwx7dW4G68eK9wznXMx wRpFA9WF28Ae8KrxZ8yaCNweRrmZ1eAj+uyjF7Jh3ZXXdfnC0vVHMKQ7X9qh30ry HzwV7SFpuheALtRYEB5XQ8P+Sv3GxVV6ou0ducrBgjWGwH/2pOk7Ljmgx3xVh+1M KjrwpWjGlHtc/7NWOmt3B3xoBn8uS1o= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:15 2025 by rpki-client