$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72697b93-e646-3a7c-af08-bda99f4f1b1f.roa File: 72697b93-e646-3a7c-af08-bda99f4f1b1f.roa (raw, json) Hash identifier: A0iwpcqJ2CQovQCF98Qtp4E+qHBlYB+bW7qVj3c+1tg= Subject key identifier: 74:9F:44:87:C4:F9:F2:1B:D3:D4:A9:AB:2E:D2:85:BD:EE:3E:63:06 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B153C12B4E63F5CED80410BA0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72697b93-e646-3a7c-af08-bda99f4f1b1f.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:12:b4:e6:3f:5c:ed:80:41:0b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=9946fd70-98e4-4446-9781-992182a699f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:74:2a:e3:fd:18:55:7e:c7:9d:dd:31:04:51: 20:22:04:31:58:5d:7e:58:65:74:54:7d:41:4c:63: fa:eb:36:76:fe:ca:86:72:87:c4:b1:b3:2e:51:77: 79:fc:57:64:cb:af:03:f6:68:59:66:04:21:db:93: 8f:4d:ba:92:97:b0:6d:48:8c:59:b7:2a:66:f0:b0: 78:d9:f4:39:76:90:72:7e:8f:4b:66:c9:49:49:c9: 21:73:02:99:1a:94:9e:58:05:50:25:fe:74:f3:70: 83:0e:ff:4f:ef:41:10:ae:d5:5f:20:90:99:9c:34: b2:46:66:48:b1:50:6a:73:e1:1e:3b:5d:84:51:dd: 2f:d4:8e:0a:f5:42:ef:35:ec:1f:24:2e:51:5b:67: 7a:fa:56:4b:59:42:f7:97:42:31:a8:a2:98:3f:71: 0c:df:00:42:98:72:8a:26:50:5c:cc:51:13:da:89: 3e:78:f5:3a:47:6f:a2:7e:20:6a:54:33:b8:c2:f5: 44:1a:a0:66:98:ee:6d:c2:f5:c9:e1:fd:f7:0f:f2: 0d:23:d4:25:1f:db:7d:4c:85:42:91:7b:fd:f9:38: 1a:1f:22:f2:e9:98:c1:f0:f9:f2:11:07:2c:af:bb: 3d:18:cf:ef:d2:8b:6c:69:55:37:f4:e3:8b:95:de: b3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9F:44:87:C4:F9:F2:1B:D3:D4:A9:AB:2E:D2:85:BD:EE:3E:63:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72697b93-e646-3a7c-af08-bda99f4f1b1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:aa:01:fc:1b:17:d4:9a:92:da:7f:3c:53:a1:c2:fa:bb:eb: 34:6c:95:20:5e:62:72:bf:99:5d:ca:02:21:19:66:e1:7a:94: e5:d2:a9:87:ad:3b:ac:45:ee:04:57:b4:83:a2:92:4e:82:fa: f6:ab:46:3c:fd:c8:66:8b:51:c5:68:a5:ae:57:19:3e:9f:01: 0d:d5:c0:0d:6f:e8:1b:99:5c:94:d1:1f:33:e8:ec:55:93:a4: 72:20:f4:86:66:19:c5:6e:56:0e:b2:b8:3d:d5:d7:97:cf:5c: cc:06:a6:e7:38:0e:1d:37:28:f0:55:66:87:6c:71:c0:5e:d2: 04:09:e0:9f:8f:23:d4:39:bb:92:b0:44:15:d3:04:56:72:9a: 46:6b:53:26:24:3d:0c:69:a7:9d:7a:02:80:4f:9d:a1:8b:01: 0a:fb:71:93:0c:27:a9:f5:7d:29:18:19:91:d3:02:43:0c:e8: 87:62:e2:1e:f1:05:19:12:da:b6:15:15:48:9b:17:63:f5:0c: e9:03:a4:1c:2c:49:54:a0:5c:52:89:bb:0a:2f:04:1a:1b:22: ff:52:77:01:44:bd:39:02:39:ca:38:76:54:e4:5c:d4:6e:33: 5b:a9:40:58:3d:f4:de:c8:6b:01:8f:24:58:af:f1:14:08:80: 83:b4:d0:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBK05j9c7YBBC6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk OTk0NmZkNzAtOThlNC00NDQ2LTk3ODEtOTkyMTgyYTY5OWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nQq4/0YVX7Hnd0xBFEgIgQxWF1+WGV0VH1B TGP66zZ2/sqGcofEsbMuUXd5/Fdky68D9mhZZgQh25OPTbqSl7BtSIxZtypm8LB4 2fQ5dpByfo9LZslJSckhcwKZGpSeWAVQJf5083CDDv9P70EQrtVfIJCZnDSyRmZI sVBqc+EeO12EUd0v1I4K9ULvNewfJC5RW2d6+lZLWUL3l0IxqKKYP3EM3wBCmHKK JlBczFET2ok+ePU6R2+ifiBqVDO4wvVEGqBmmO5twvXJ4f33D/INI9QlH9t9TIVC kXv9+TgaHyLy6ZjB8PnyEQcsr7s9GM/v0otsaVU39OOLld6znwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSfRIfE+fIb09Spqy7Shb3uPmMGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzI2OTdiOTMtZTY0Ni0z YTdjLWFmMDgtYmRhOTlmNGYxYjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICqAfwbF9Saktp/PFOhwvq76zRslSBeYnK/mV3KAiEZZuF6lOXSqYet O6xF7gRXtIOikk6C+varRjz9yGaLUcVopa5XGT6fAQ3VwA1v6BuZXJTRHzPo7FWT pHIg9IZmGcVuVg6yuD3V15fPXMwGpuc4Dh03KPBVZodsccBe0gQJ4J+PI9Q5u5Kw RBXTBFZymkZrUyYkPQxpp516AoBPnaGLAQr7cZMMJ6n1fSkYGZHTAkMM6Idi4h7x BRkS2rYVFUibF2P1DOkDpBwsSVSgXFKJuwovBBobIv9SdwFEvTkCOco4dlTkXNRu M1upQFg99N7IawGPJFiv8RQIgIO00IQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:27 2025 by rpki-client