$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823301fc-cddb-3a97-977d-56de970cf5fa.roa File: 823301fc-cddb-3a97-977d-56de970cf5fa.roa (raw, json) Hash identifier: qA0nuinDD9IdtuhOjReJKFjKdpMcdNfbWMiVjIo6GkE= Subject key identifier: 99:CC:5E:3E:61:D2:18:DE:79:51:B3:BA:B6:38:77:B1:F4:25:55:0D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51AF1FFBD679767C8F3908 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823301fc-cddb-3a97-977d-56de970cf5fa.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:af:1f:fb:d6:79:76:7c:8f:39:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=957631f6-b5d6-4b7a-98a0-f7ee649e8205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c6:27:5e:56:ec:e4:a7:5f:f1:b6:ef:b9:11: 85:f2:0d:25:49:96:e0:ba:e7:df:20:6b:11:52:25: f2:19:4d:14:15:0c:97:f2:f9:4a:08:1b:08:de:00: e6:21:31:3a:04:a4:d8:b2:8f:9f:54:ff:20:ac:3f: 8e:97:12:83:24:5e:bb:37:b0:93:94:ae:40:88:b9: 70:fa:e7:c4:ee:6d:3d:20:f7:0a:19:ff:60:43:37: bc:1e:f9:84:3e:ab:37:94:74:09:5d:5f:45:b3:ed: eb:51:5f:5b:3c:d3:14:4d:34:36:87:2d:b5:31:e0: 71:82:01:d2:ba:0e:e5:a4:44:b9:0c:bd:b0:39:64: 63:12:d5:03:1b:6b:49:61:da:e6:d7:66:c0:d1:f0: dd:9d:6c:4b:36:70:7b:d7:20:c5:9b:61:ef:77:cf: 74:d0:ee:77:2b:41:e3:81:a1:b2:2a:2d:16:b3:7d: 93:ad:e3:aa:e8:97:85:5f:7c:b2:75:6d:80:03:44: ad:e3:41:53:84:dd:b8:82:5e:24:74:8e:07:64:bb: a7:0d:88:54:e2:30:09:b9:26:e2:3b:ea:84:1c:21: 0a:fb:5d:79:0f:df:b8:cf:96:76:4c:ee:0f:8a:0e: 6d:fb:29:d4:79:63:3f:a5:9d:df:d1:68:5d:6d:71: 88:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CC:5E:3E:61:D2:18:DE:79:51:B3:BA:B6:38:77:B1:F4:25:55:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823301fc-cddb-3a97-977d-56de970cf5fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:75:f2:8e:53:ce:ed:da:23:2f:83:83:04:96:b3:83:62:28: 4a:13:89:22:14:e6:78:11:03:2d:17:12:72:51:8c:cd:ee:f6: 06:a6:30:be:b7:5f:7e:c7:a4:ae:ba:da:a6:78:dd:40:db:03: ee:78:f7:e9:a0:34:16:a3:c5:01:8a:18:89:c6:43:76:f5:44: 40:53:ba:30:bc:73:4e:c7:99:c1:c0:83:cd:3b:c5:2b:71:41: 86:56:8e:23:d7:29:ac:80:ec:7a:22:f8:de:c1:c6:1e:58:ce: d6:9d:d7:d6:3a:88:eb:1a:e5:de:59:20:5a:35:aa:b4:fd:19: e9:d9:0a:86:0e:3c:5a:6a:f8:1a:3e:10:45:07:28:b6:d6:f2: cc:c7:9e:33:e0:61:b4:33:e0:f7:11:e8:97:b6:d6:6e:c6:4e: 48:8f:bc:b4:fa:a0:40:16:b3:a7:1d:cd:ce:44:2f:16:55:8c: 0d:f1:bd:53:7d:88:54:b4:24:a9:be:a5:02:23:08:11:88:da: f9:ec:81:7f:7b:56:56:60:c9:e8:1c:9e:bd:31:ea:03:28:63: 10:f7:4a:2a:4a:44:4e:bb:12:63:f0:de:90:0e:19:b2:66:8a: 96:19:17:19:2b:d5:6c:99:73:e6:ff:a0:9a:63:b0:71:eb:03: 1a:09:3a:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8Ua8f+9Z5dnyPOQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk OTU3NjMxZjYtYjVkNi00YjdhLTk4YTAtZjdlZTY0OWU4MjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cYnXlbs5Kdf8bbvuRGF8g0lSZbguuffIGsR UiXyGU0UFQyX8vlKCBsI3gDmITE6BKTYso+fVP8grD+OlxKDJF67N7CTlK5AiLlw +ufE7m09IPcKGf9gQze8HvmEPqs3lHQJXV9Fs+3rUV9bPNMUTTQ2hy21MeBxggHS ug7lpES5DL2wOWRjEtUDG2tJYdrm12bA0fDdnWxLNnB71yDFm2Hvd8900O53K0Hj gaGyKi0Ws32TreOq6JeFX3yydW2AA0St40FThN24gl4kdI4HZLunDYhU4jAJuSbi O+qEHCEK+115D9+4z5Z2TO4Pig5t+ynUeWM/pZ3f0WhdbXGI2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnMXj5h0hjeeVGzurY4d7H0JVUNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODIzMzAxZmMtY2RkYi0z YTk3LTk3N2QtNTZkZTk3MGNmNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF18o5Tzu3aIy+DgwSWs4NiKEoTiSIU5ngRAy0XEnJRjM3u9gamML63 X37HpK662qZ43UDbA+549+mgNBajxQGKGInGQ3b1REBTujC8c07HmcHAg807xStx QYZWjiPXKayA7Hoi+N7Bxh5Yztad19Y6iOsa5d5ZIFo1qrT9GenZCoYOPFpq+Bo+ EEUHKLbW8szHnjPgYbQz4PcR6Je21m7GTkiPvLT6oEAWs6cdzc5ELxZVjA3xvVN9 iFS0JKm+pQIjCBGI2vnsgX97VlZgyegcnr0x6gMoYxD3SipKRE67EmPw3pAOGbJm ipYZFxkr1WyZc+b/oJpjsHHrAxoJOoI= -----END CERTIFICATE-----Generated at Mon Oct 20 21:10:20 2025 by rpki-client