$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32f19b1d-0a2b-358c-b6fd-0d0c78b82b13.roa File: 32f19b1d-0a2b-358c-b6fd-0d0c78b82b13.roa (raw, json) Hash identifier: sHC2sgiCiE9IFj8bLuPfF9pQ1MMCY9Zxcy4EjZXGVC4= Subject key identifier: 68:5B:18:96:6B:8F:4B:75:AD:C9:D1:D8:F1:09:00:6F:C4:69:AA:DE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BA39CF087F9EA822A22CA1120 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32f19b1d-0a2b-358c-b6fd-0d0c78b82b13.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f0:87:f9:ea:82:2a:22:ca:11:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=59a2c013-80f5-4c56-b030-a78485cdefef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:3d:7e:57:a0:72:84:6d:c7:f1:ea:8e:e8: c9:9e:eb:56:b2:d5:80:2c:2e:0c:2f:72:ef:33:b4: aa:99:7a:05:d2:2b:9c:e7:2d:0f:3e:43:84:25:06: 53:d7:14:8c:70:1b:26:7c:c4:96:42:f6:46:56:e3: 36:50:57:6a:47:23:8c:ad:64:44:1d:57:1b:61:97: 2e:1d:8d:1f:ce:18:78:bb:60:b1:fc:59:12:85:8a: 59:1d:74:21:ba:e4:62:21:83:66:c5:29:3b:25:c7: 6b:78:3a:6c:aa:c9:47:ac:69:c4:4d:a1:4b:26:f1: 48:29:be:2f:10:ed:5f:d1:8b:c1:d9:46:08:5e:11: 87:2f:ee:9c:45:c7:bb:1e:b5:33:85:76:06:b4:81: cf:0e:a2:27:a3:ba:76:6c:2f:78:a5:ff:32:9b:7f: 06:5b:79:52:6f:9b:99:29:a9:69:6a:1b:a9:6a:88: d4:12:91:9c:b7:a9:57:40:97:d8:57:c9:9c:26:c4: a9:b7:2d:a5:49:a2:bf:95:83:88:26:66:64:82:9d: 75:16:65:26:35:0e:70:0f:ff:f5:cb:54:87:7d:58: 47:08:2e:d4:24:cd:c5:98:7f:06:6e:2d:ef:c9:2f: 33:f5:34:2f:42:10:db:7a:a2:0a:3e:2e:61:35:b3: 09:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5B:18:96:6B:8F:4B:75:AD:C9:D1:D8:F1:09:00:6F:C4:69:AA:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32f19b1d-0a2b-358c-b6fd-0d0c78b82b13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:be:c5:1b:3b:0d:86:a1:31:a0:26:28:1f:b9:23:77:1a:cd: 1e:33:5f:ee:b7:5c:7e:75:95:ab:31:dd:70:b8:01:c7:3e:9e: a5:27:14:3e:04:c2:6f:66:d2:ac:ea:b9:72:7d:c1:cd:bf:7e: 69:f5:14:97:44:9b:48:1f:54:1b:06:60:3e:7d:0e:cc:2b:77: 68:a2:50:05:f3:46:bb:31:07:b9:51:18:43:59:4f:70:9e:95: 98:fa:da:8d:17:df:2c:70:14:3a:42:4e:6b:42:90:b3:21:6f: f6:2c:72:82:cb:06:89:11:68:43:d4:a2:f7:5e:ae:8b:71:7f: 69:b2:e8:8a:97:46:2d:8d:fc:ca:bb:46:e0:0d:bd:7f:35:45: ba:c2:01:82:9c:12:73:ac:c7:1e:58:f7:3e:6a:68:e9:19:b8: c9:f9:a3:eb:e7:ab:81:ee:eb:41:ea:c6:65:68:fe:e1:71:b2: 31:e3:4b:b8:87:ec:6f:18:f1:38:76:60:ee:3f:66:a8:fa:f4: df:ce:1d:a7:b2:c5:5e:a9:4e:be:3d:55:b4:27:67:ce:b5:25: 7c:65:6e:9b:ec:7f:30:ee:a5:cb:ba:17:dd:d3:b8:ce:48:f3: 3b:ca:7e:b9:e9:eb:16:c0:c8:ed:ac:92:e6:4d:bd:a1:ff:d5: ad:cb:d1:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPCH+eqCKiLKESAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NTlhMmMwMTMtODBmNS00YzU2LWIwMzAtYTc4NDg1Y2RlZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDQ9flegcoRtx/HqjujJnutWstWALC4ML3Lv M7SqmXoF0iuc5y0PPkOEJQZT1xSMcBsmfMSWQvZGVuM2UFdqRyOMrWREHVcbYZcu HY0fzhh4u2Cx/FkShYpZHXQhuuRiIYNmxSk7JcdreDpsqslHrGnETaFLJvFIKb4v EO1f0YvB2UYIXhGHL+6cRce7HrUzhXYGtIHPDqIno7p2bC94pf8ym38GW3lSb5uZ KalpahupaojUEpGct6lXQJfYV8mcJsSpty2lSaK/lYOIJmZkgp11FmUmNQ5wD//1 y1SHfVhHCC7UJM3FmH8Gbi3vyS8z9TQvQhDbeqIKPi5hNbMJhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhbGJZrj0t1rcnR2PEJAG/EaareMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzJmMTliMWQtMGEyYi0z NThjLWI2ZmQtMGQwYzc4YjgyYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm+xRs7DYahMaAmKB+5I3cazR4zX+63XH51lasx3XC4Acc+nqUnFD4E wm9m0qzquXJ9wc2/fmn1FJdEm0gfVBsGYD59Dswrd2iiUAXzRrsxB7lRGENZT3Ce lZj62o0X3yxwFDpCTmtCkLMhb/YscoLLBokRaEPUovderotxf2my6IqXRi2N/Mq7 RuANvX81RbrCAYKcEnOsxx5Y9z5qaOkZuMn5o+vnq4Hu60HqxmVo/uFxsjHjS7iH 7G8Y8Th2YO4/Zqj69N/OHaeyxV6pTr49VbQnZ861JXxlbpvsfzDupcu6F93TuM5I 8zvKfrnp6xbAyO2skuZNvaH/1a3L0bI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:01:04 2025 by rpki-client