$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32f19b1d-0a2b-358c-b6fd-0d0c78b82b13.roa File: 32f19b1d-0a2b-358c-b6fd-0d0c78b82b13.roa (raw, json) Hash identifier: qfBW0ZaauWLzhyboxVC0xbYNJyN3D73FUlVJlbphS0k= Subject key identifier: 80:39:48:1B:28:D9:81:48:9B:F8:D5:6E:11:1A:D0:8F:45:FE:BF:10 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F89A85282B53CE3337D191100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32f19b1d-0a2b-358c-b6fd-0d0c78b82b13.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 8069 IP address blocks: 20.153.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:52:82:b5:3c:e3:33:7d:19:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=540e6410-b046-43f7-86c4-09015246b136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b4:d7:7f:0b:79:fe:44:98:ab:fc:77:2f:94: e0:1c:7c:db:c8:8e:8e:9a:46:54:db:ad:fb:51:a6: 59:08:1c:bf:70:04:e1:af:88:fb:43:ca:17:32:0b: 3a:c9:bc:02:fe:66:4c:a7:63:30:dc:99:72:2b:6b: 9b:24:37:f0:ed:b0:f6:14:6c:fa:7d:58:c3:bd:b7: d1:a2:8a:c5:1a:0f:09:29:bb:f9:06:f3:49:0a:de: 6b:5f:b2:34:8c:20:94:c6:c1:1d:90:07:79:1e:f5: c8:6a:02:15:9b:1c:92:b6:81:c8:35:7e:64:8c:a7: fd:3e:a7:d6:3b:90:97:6e:d6:cd:79:86:d5:68:7a: 4d:d0:a3:ce:5a:cb:aa:44:b6:2a:d8:01:e7:c3:0a: 46:54:e4:50:ea:59:08:34:82:79:f7:c5:ac:40:3c: c7:9d:f0:db:d2:62:b9:c2:5b:ee:7a:2d:7c:78:e6: 02:9b:ce:d7:e8:8d:34:fe:7d:01:8a:88:0d:75:33: 23:7e:a0:f2:b7:e6:cc:b0:28:7e:92:59:71:6c:96: 05:3f:76:ca:a5:63:8b:d7:41:1c:fb:00:04:34:c8: c6:a9:03:e4:2d:15:8f:0a:40:ee:52:af:45:aa:18: ba:78:d0:1e:f6:f1:ca:be:06:b8:86:ce:3a:ef:87: 4e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:39:48:1B:28:D9:81:48:9B:F8:D5:6E:11:1A:D0:8F:45:FE:BF:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32f19b1d-0a2b-358c-b6fd-0d0c78b82b13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:94:57:56:90:57:4c:9e:8e:1f:6a:eb:01:41:68:27:7b:61: b1:47:bd:97:9e:d8:b3:76:25:f0:2a:b5:cb:c4:ca:e2:1f:9e: 11:eb:19:71:ac:77:d6:5f:f4:1f:12:3f:37:a3:f6:d9:19:1c: de:0e:02:bb:08:94:ec:4d:e2:5f:8f:b2:ee:9f:4c:89:db:5c: 57:21:c4:06:2b:e5:5f:ff:65:90:04:ae:8c:f7:e5:56:6e:2b: 59:4b:f9:e2:d2:ad:22:7a:9f:ee:f1:03:d8:d7:70:d1:4e:dc: 17:ec:97:b9:21:a3:49:a9:b0:6a:e1:c4:c4:cc:41:a4:59:f9: 55:d6:9e:7e:44:18:3e:de:5e:95:ca:55:fd:55:bf:fa:68:90: dd:ab:ad:17:ce:c9:eb:41:05:41:a4:74:56:4c:a2:4c:03:92: d9:d5:87:46:25:7c:3d:ea:bf:bd:62:20:48:6e:32:01:37:ae: 88:8d:78:b2:44:6d:6f:b4:78:0a:e0:c9:99:aa:8f:1a:a4:d2: ae:37:fd:58:fe:c5:01:6d:78:ab:2d:4c:63:20:0b:f0:96:ad: 45:83:b3:1f:11:ac:86:20:61:2b:aa:9c:e7:8b:4c:37:d7:49: da:6e:8b:53:7b:3c:c8:7e:55:bb:6f:ec:24:88:bc:40:4b:fa: db:cd:31:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqFKCtTzjM30ZEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk NTQwZTY0MTAtYjA0Ni00M2Y3LTg2YzQtMDkwMTUyNDZiMTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7TXfwt5/kSYq/x3L5TgHHzbyI6OmkZU2637 UaZZCBy/cAThr4j7Q8oXMgs6ybwC/mZMp2Mw3JlyK2ubJDfw7bD2FGz6fVjDvbfR oorFGg8JKbv5BvNJCt5rX7I0jCCUxsEdkAd5HvXIagIVmxyStoHINX5kjKf9PqfW O5CXbtbNeYbVaHpN0KPOWsuqRLYq2AHnwwpGVORQ6lkINIJ598WsQDzHnfDb0mK5 wlvuei18eOYCm87X6I00/n0BiogNdTMjfqDyt+bMsCh+kllxbJYFP3bKpWOL10Ec +wAENMjGqQPkLRWPCkDuUq9Fqhi6eNAe9vHKvga4hs4674dOaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIA5SBso2YFIm/jVbhEa0I9F/r8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzJmMTliMWQtMGEyYi0z NThjLWI2ZmQtMGQwYzc4YjgyYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaUV1aQV0yejh9q6wFBaCd7YbFHvZee2LN2JfAqtcvEyuIfnhHrGXGs d9Zf9B8SPzej9tkZHN4OArsIlOxN4l+Psu6fTInbXFchxAYr5V//ZZAEroz35VZu K1lL+eLSrSJ6n+7xA9jXcNFO3Bfsl7kho0mpsGrhxMTMQaRZ+VXWnn5EGD7eXpXK Vf1Vv/pokN2rrRfOyetBBUGkdFZMokwDktnVh0YlfD3qv71iIEhuMgE3roiNeLJE bW+0eArgyZmqjxqk0q43/Vj+xQFteKstTGMgC/CWrUWDsx8RrIYgYSuqnOeLTDfX Sdpui1N7PMh+Vbtv7CSIvEBL+tvNMR4= -----END CERTIFICATE-----Generated at Mon Oct 26 00:25:53 2026 by rpki-client