$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa File: 9682b18d-084f-339c-8a00-ef1f480f78c1.roa (raw, json) Hash identifier: vkpxY5fL92fVeWV8wENSJ6YAtY0LZ1CqYVoFc4UQmTE= Subject key identifier: B5:31:38:EC:3F:F8:40:B5:58:7C:45:C5:69:5E:C2:8A:B3:61:C9:63 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51AF0097D6180BE0831200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 20.153.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:af:00:97:d6:18:0b:e0:83:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=6339cf22-fd1d-4742-a8db-2894b4308c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e2:87:05:31:56:a1:fe:bb:34:47:c3:1b:f2: 05:4c:34:c8:14:de:dc:ab:2b:5e:f8:a5:5c:ef:cc: 5f:47:f2:e2:ea:80:8b:ca:64:cf:d7:32:bf:3d:e8: 6d:fc:8e:12:4c:e8:d1:23:c4:d1:ae:f4:a9:03:c6: 23:fc:02:7e:06:6d:75:ce:a1:15:8e:d9:8a:5e:c4: d4:df:0f:87:53:0f:cc:8b:7b:5a:e0:61:58:4e:70: f2:8a:ce:21:4f:e0:c8:2d:1a:f0:52:f1:36:13:ed: f1:29:29:8e:e9:13:23:9e:14:6b:86:c8:32:2f:38: af:c3:e3:72:12:89:e9:39:e7:8a:e1:4a:a5:50:b8: 27:25:87:9d:42:ae:48:3e:a3:5a:35:cd:12:e0:e8: 0b:f0:bd:18:b1:3e:a1:8e:73:5c:71:92:3f:16:ce: 92:cf:0a:b4:4c:a2:f5:3d:87:1f:b3:2e:14:da:cf: c3:24:d2:f5:d0:af:4a:25:78:59:09:02:67:60:97: 62:d0:fc:b7:aa:87:b0:9f:3e:49:a0:2b:bd:98:26: 42:ea:a8:6a:f6:73:48:5e:0e:1a:ae:a4:0f:fc:9e: d1:d3:da:e3:12:f0:0f:6d:51:e8:cf:a4:cc:7c:eb: 4b:8c:f4:26:da:b6:b4:2c:8e:d9:9d:be:fb:62:0f: 59:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:31:38:EC:3F:F8:40:B5:58:7C:45:C5:69:5E:C2:8A:B3:61:C9:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a4:c8:14:e6:b5:7a:17:cc:e6:d7:c8:e3:2d:ea:d2:0c:1e: 4f:a6:74:54:93:c2:3c:8c:d4:71:96:e9:31:16:b0:32:95:7f: af:24:4b:13:a6:e0:15:d5:96:c6:f7:aa:d8:b0:b6:b6:27:9f: a6:77:5c:f8:4e:fc:8d:14:df:95:a6:64:ca:64:0e:d3:41:46: cc:0d:2c:5e:01:bc:4c:15:b0:06:ab:fd:26:af:4b:a3:0c:c8: 9d:ea:c4:8c:44:e7:6a:ee:0b:64:db:10:01:e7:9f:b6:d6:61: e2:75:e9:14:80:e5:0a:9a:56:d7:77:d3:ce:ad:69:70:78:0e: 77:56:42:98:99:6b:e5:04:9b:ec:45:15:da:20:ce:c7:f1:63: 50:b5:38:6a:d1:a3:94:6b:3d:7e:7e:4f:a5:01:a5:e9:d3:27: 8c:f5:24:4c:10:0e:67:8a:8b:af:38:66:8a:67:df:36:39:cb: 0e:88:59:11:a5:51:81:b2:95:dc:f1:20:e9:03:83:da:5c:4c: eb:3e:ac:4f:1b:e4:c1:84:65:43:0d:94:8b:70:18:47:ac:27: 41:c0:df:e4:34:09:12:32:b1:6a:cb:b3:f4:58:7e:cf:57:14: 0a:65:f0:63:48:00:d7:4c:7d:8e:e1:0a:f3:7b:0e:fd:de:43: 70:8b:c5:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8Ua8Al9YYC+CDEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk NjMzOWNmMjItZmQxZC00NzQyLWE4ZGItMjg5NGI0MzA4YzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+KHBTFWof67NEfDG/IFTDTIFN7cqyte+KVc 78xfR/Li6oCLymTP1zK/Peht/I4STOjRI8TRrvSpA8Yj/AJ+Bm11zqEVjtmKXsTU 3w+HUw/Mi3ta4GFYTnDyis4hT+DILRrwUvE2E+3xKSmO6RMjnhRrhsgyLzivw+Ny EonpOeeK4UqlULgnJYedQq5IPqNaNc0S4OgL8L0YsT6hjnNccZI/Fs6Szwq0TKL1 PYcfsy4U2s/DJNL10K9KJXhZCQJnYJdi0Py3qoewnz5JoCu9mCZC6qhq9nNIXg4a rqQP/J7R09rjEvAPbVHoz6TMfOtLjPQm2ra0LI7Znb77Yg9ZuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUxOOw/+EC1WHxFxWlewoqzYcljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTY4MmIxOGQtMDg0Zi0z MzljLThhMDAtZWYxZjQ4MGY3OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2kyBTmtXoXzObXyOMt6tIMHk+mdFSTwjyM1HGW6TEWsDKVf68kSxOm 4BXVlsb3qtiwtrYnn6Z3XPhO/I0U35WmZMpkDtNBRswNLF4BvEwVsAar/SavS6MM yJ3qxIxE52ruC2TbEAHnn7bWYeJ16RSA5QqaVtd3086taXB4DndWQpiZa+UEm+xF FdogzsfxY1C1OGrRo5RrPX5+T6UBpenTJ4z1JEwQDmeKi684Zopn3zY5yw6IWRGl UYGyldzxIOkDg9pcTOs+rE8b5MGEZUMNlItwGEesJ0HA3+Q0CRIysWrLs/RYfs9X FApl8GNIANdMfY7hCvN7Dv3eQ3CLxYw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:36:28 2025 by rpki-client