$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32f19b1d-0a2b-358c-b6fd-0d0c78b82b13.roa File: 32f19b1d-0a2b-358c-b6fd-0d0c78b82b13.roa (raw, json) Hash identifier: hFvBw+AUD7VObZisvHbiyJV2Uc04hnbETh84zdtkpnQ= Subject key identifier: 8D:44:7A:95:5A:C7:AC:1B:0F:01:63:5B:1C:77:9A:EC:E2:4F:BE:5B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AC2E1204E8C825E1CE0C74200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32f19b1d-0a2b-358c-b6fd-0d0c78b82b13.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 8069 IP address blocks: 20.153.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:20:4e:8c:82:5e:1c:e0:c7:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=8883969e-fab9-4408-bc24-def21b04b746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:ef:87:10:cb:07:b2:76:ee:c3:0f:c9:75: 6e:03:1b:20:83:8d:22:7f:33:14:5f:f9:93:fc:18: b8:15:de:10:32:da:95:17:ab:c6:52:1b:6e:47:7d: 3e:d6:b5:fd:33:a3:d2:31:ac:43:a6:69:29:50:7b: 97:6c:f5:6c:1b:7d:ed:f2:77:14:5a:ec:8b:c9:0f: 7f:13:af:f4:f2:7b:25:db:f1:59:e2:76:78:98:47: 1a:84:07:23:5d:72:5e:3b:53:d1:13:ba:d5:fc:24: 25:cd:61:c1:e0:33:6a:5c:55:5a:72:b2:be:3e:08: b2:37:8e:9d:9c:6a:43:f4:b7:b6:a1:92:14:83:80: e5:4e:65:ff:92:b6:26:18:a8:d4:0f:23:36:1f:cc: ed:31:0d:ba:e0:c2:d8:05:9a:60:34:34:53:2f:55: 12:25:79:ac:ab:b6:34:07:9a:a5:5c:02:86:6b:50: 73:b4:a2:58:ef:ec:ff:52:7a:bf:cb:d9:0e:9b:3d: 84:e2:54:fc:f1:3d:93:f9:60:22:57:4c:af:1c:7a: e8:57:47:2b:a6:f8:eb:33:74:40:f2:9e:5e:6c:ea: 24:76:75:0e:16:7e:67:dd:b7:4f:7f:7c:35:96:2c: 94:bc:18:fa:8a:d1:52:8d:a0:4e:01:1c:bf:84:06: f9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:44:7A:95:5A:C7:AC:1B:0F:01:63:5B:1C:77:9A:EC:E2:4F:BE:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32f19b1d-0a2b-358c-b6fd-0d0c78b82b13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:c8:99:cf:a4:2f:ec:43:6d:15:68:af:35:4f:a9:8d:79:9d: 52:5a:64:4b:bd:f6:aa:ff:29:d8:1f:39:7d:42:95:22:81:3c: 4d:8e:3b:49:b5:e4:d0:e8:94:ba:61:a9:56:0e:27:f8:49:b0: d9:cb:a5:1b:84:31:70:cc:ad:04:c8:35:89:7f:24:11:12:bc: 77:6d:72:b1:bc:92:f5:7b:cd:9f:45:a0:a2:d0:11:2e:38:cd: 76:4a:fa:8e:34:74:6e:9f:2a:2a:94:91:e4:6d:14:93:f1:15: 76:9b:39:29:60:0a:43:70:2f:30:ca:25:0b:59:da:12:0b:60: ef:ec:9b:1e:02:b1:8a:cf:d3:e5:5c:a1:fd:cb:90:68:58:4b: 55:bd:65:65:f2:a5:d9:9f:a1:30:6f:28:75:83:3d:ee:dd:60: c3:0c:8f:8b:f8:d0:4c:ac:76:85:95:20:b6:42:e3:10:4a:f3: d9:06:e7:d5:90:a7:fd:44:fb:64:02:09:24:5d:87:cf:20:ea: bd:57:dc:1a:01:3d:83:d4:08:59:55:47:9e:71:3b:66:2a:86: 88:79:4f:7d:07:65:1f:f5:23:92:cb:37:aa:51:4b:64:83:87: a3:12:4f:a8:b6:ad:36:2a:7c:8f:13:78:22:67:bf:ea:6a:f3: bb:2f:cd:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4SBOjIJeHODHQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ODg4Mzk2OWUtZmFiOS00NDA4LWJjMjQtZGVmMjFiMDRiNzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdPvhxDLB7J27sMPyXVuAxsgg40ifzMUX/mT /Bi4Fd4QMtqVF6vGUhtuR30+1rX9M6PSMaxDpmkpUHuXbPVsG33t8ncUWuyLyQ9/ E6/08nsl2/FZ4nZ4mEcahAcjXXJeO1PRE7rV/CQlzWHB4DNqXFVacrK+PgiyN46d nGpD9Le2oZIUg4DlTmX/krYmGKjUDyM2H8ztMQ264MLYBZpgNDRTL1USJXmsq7Y0 B5qlXAKGa1BztKJY7+z/Unq/y9kOmz2E4lT88T2T+WAiV0yvHHroV0crpvjrM3RA 8p5ebOokdnUOFn5n3bdPf3w1liyUvBj6itFSjaBOARy/hAb5hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1EepVax6wbDwFjWxx3muziT75bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzJmMTliMWQtMGEyYi0z NThjLWI2ZmQtMGQwYzc4YjgyYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILImc+kL+xDbRVorzVPqY15nVJaZEu99qr/KdgfOX1ClSKBPE2OO0m1 5NDolLphqVYOJ/hJsNnLpRuEMXDMrQTINYl/JBESvHdtcrG8kvV7zZ9FoKLQES44 zXZK+o40dG6fKiqUkeRtFJPxFXabOSlgCkNwLzDKJQtZ2hILYO/smx4CsYrP0+Vc of3LkGhYS1W9ZWXypdmfoTBvKHWDPe7dYMMMj4v40EysdoWVILZC4xBK89kG59WQ p/1E+2QCCSRdh88g6r1X3BoBPYPUCFlVR55xO2Yqhoh5T30HZR/1I5LLN6pRS2SD h6MST6i2rTYqfI8TeCJnv+pq87svzaA= -----END CERTIFICATE-----Generated at Sun Aug 24 08:38:54 2025 by rpki-client