$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ccaf5cd-7a33-3126-99b5-c064ee0d6453.roa File: 4ccaf5cd-7a33-3126-99b5-c064ee0d6453.roa (raw, json) Hash identifier: H4RRNLXi31VPziobSPaUX/3vBJNL1MtjQTX/3QepK5s= Subject key identifier: CA:BE:90:5E:30:82:5C:8D:C9:C5:C6:19:CF:39:A9:2F:AD:72:A1:2F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B52E99FE6D04D236D5AFF37C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ccaf5cd-7a33-3126-99b5-c064ee0d6453.roa Signing time: Fri 26 Sep 2025 15:14:43 +0000 ROA not before: Fri 26 Sep 2025 15:14:43 +0000 ROA not after: Thu 25 Dec 2025 16:14:43 +0000 asID: 8069 IP address blocks: 20.153.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:e9:9f:e6:d0:4d:23:6d:5a:ff:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 26 15:14:43 2025 GMT Not After : Dec 25 16:14:43 2025 GMT Subject: CN=c2bd89c6-36a4-4274-88d9-89e3a86dbdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:50:7d:38:ce:2d:f0:e0:89:ca:41:87:2f:55: 98:6a:be:13:72:98:cd:9a:d9:9a:5d:9a:fd:b6:e7: f3:d1:16:47:66:ad:ed:5e:36:c2:28:ba:41:2b:5f: a7:6b:1e:38:c7:10:d1:a4:b2:c2:6b:d4:80:4e:b4: c7:10:8a:82:97:9d:59:44:e0:52:2d:ea:43:13:b0: 70:e7:8f:e3:d7:38:55:82:f9:99:2e:a1:b1:b6:6e: f9:f8:21:88:1c:e7:53:ae:94:72:f1:3a:8e:5c:12: d9:61:77:dd:63:d7:fc:69:73:dd:24:bf:d4:17:39: da:97:31:62:00:d2:de:cc:91:fe:a7:bf:4e:27:3f: 67:d5:18:80:df:ad:f9:ea:8e:7b:52:fe:92:27:e4: 98:f6:7e:95:07:67:70:16:32:a9:68:22:1e:3e:bc: e8:d5:f6:e3:0b:1b:bb:fc:df:64:d5:c7:b3:ab:fb: 80:f0:ce:9c:54:75:f2:e9:e2:65:4b:cb:3b:2d:cb: 33:fd:1a:94:6e:13:c8:40:67:32:6a:53:9a:0c:1e: 57:31:51:37:3b:7c:58:cd:72:5c:00:bd:b9:d6:a3: f8:89:e4:cc:9b:56:b9:a7:88:fe:67:5e:e1:2f:6f: 44:e7:42:4a:9d:89:92:5c:69:8f:d1:3d:56:bb:2c: 68:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BE:90:5E:30:82:5C:8D:C9:C5:C6:19:CF:39:A9:2F:AD:72:A1:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ccaf5cd-7a33-3126-99b5-c064ee0d6453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:12:0b:33:eb:2c:f2:de:ac:a9:68:31:4d:6f:23:d8:76:17: 45:75:2c:00:9f:7d:83:50:31:d6:8f:9f:1f:af:22:85:e4:3e: 8c:e7:9c:1b:5e:b1:f6:cf:d8:4a:fd:4b:b8:5f:64:b3:0c:bb: c4:9f:fb:53:c8:6b:9d:13:fc:c0:92:42:96:bc:ff:9b:71:86: b3:bd:42:c2:5c:0c:2d:a1:f5:bc:cc:cf:4c:ba:01:79:b5:d4: e0:17:c3:5b:80:71:a4:ba:e4:7a:b5:96:d3:10:18:89:04:d2: d8:a3:89:0c:04:97:08:04:30:ba:3c:67:1d:a0:6a:9d:cd:17: 33:c0:23:5f:26:c0:a0:6a:c3:26:42:18:83:01:6f:cd:94:5c: 67:9d:91:56:4d:20:d6:c7:5a:e1:28:a0:88:3c:8d:f6:44:27: d0:91:7e:84:b1:15:af:d4:e9:25:c4:ab:ad:cf:07:e4:cc:1d: 2f:56:5a:c9:be:8e:ad:2d:15:11:84:d1:e1:1a:f7:39:05:2f: fd:81:0d:10:b7:28:02:85:43:a1:25:fb:71:a9:e3:c6:68:9b: fe:18:05:5d:10:ff:84:f3:36:26:17:0c:1a:67:ab:f2:10:c5: 7f:fd:64:36:bb:53:b5:1d:1b:30:0a:36:75:ca:17:b1:27:da: df:1e:5e:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtS6Z/m0E0jbVr/N8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkyNjE1MTQ0M1oXDTI1MTIyNTE2MTQ0M1owLzEtMCsGA1UEAxMk YzJiZDg5YzYtMzZhNC00Mjc0LTg4ZDktODllM2E4NmRiZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFB9OM4t8OCJykGHL1WYar4TcpjNmtmaXZr9 tufz0RZHZq3tXjbCKLpBK1+nax44xxDRpLLCa9SATrTHEIqCl51ZROBSLepDE7Bw 54/j1zhVgvmZLqGxtm75+CGIHOdTrpRy8TqOXBLZYXfdY9f8aXPdJL/UFznalzFi ANLezJH+p79OJz9n1RiA36356o57Uv6SJ+SY9n6VB2dwFjKpaCIePrzo1fbjCxu7 /N9k1cezq/uA8M6cVHXy6eJlS8s7Lcsz/RqUbhPIQGcyalOaDB5XMVE3O3xYzXJc AL251qP4ieTMm1a5p4j+Z17hL29E50JKnYmSXGmP0T1WuyxorwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMq+kF4wglyNycXGGc85qS+tcqEvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGNjYWY1Y2QtN2EzMy0z MTI2LTk5YjUtYzA2NGVlMGQ2NDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJksMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGESCzPrLPLerKloMU1vI9h2F0V1LACffYNQMdaPnx+vIoXkPoznnBte sfbP2Er9S7hfZLMMu8Sf+1PIa50T/MCSQpa8/5txhrO9QsJcDC2h9bzMz0y6AXm1 1OAXw1uAcaS65Hq1ltMQGIkE0tijiQwElwgEMLo8Zx2gap3NFzPAI18mwKBqwyZC GIMBb82UXGedkVZNINbHWuEooIg8jfZEJ9CRfoSxFa/U6SXEq63PB+TMHS9WWsm+ jq0tFRGE0eEa9zkFL/2BDRC3KAKFQ6El+3Gp48Zom/4YBV0Q/4TzNiYXDBpnq/IQ xX/9ZDa7U7UdGzAKNnXKF7En2t8eXo0= -----END CERTIFICATE-----Generated at Mon Oct 20 23:15:13 2025 by rpki-client