$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04800cc4-d33c-33e3-9c3c-e1efab77c60b.roa File: 04800cc4-d33c-33e3-9c3c-e1efab77c60b.roa (raw, json) Hash identifier: YKSgyxW0WPLPFg2NBIILzfs/nu0x4su3IS0iJF0Usng= Subject key identifier: 33:BE:3B:8E:EE:8E:DE:1D:82:86:AE:B0:E8:D4:61:02:89:56:E1:0D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849818F2E7AD3AC564197FFF780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04800cc4-d33c-33e3-9c3c-e1efab77c60b.roa Signing time: Sat 12 Apr 2025 22:41:36 +0000 ROA not before: Sat 12 Apr 2025 22:41:36 +0000 ROA not after: Fri 11 Jul 2025 22:41:36 +0000 asID: 8069 IP address blocks: 20.153.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:8f:2e:7a:d3:ac:56:41:97:ff:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 12 22:41:36 2025 GMT Not After : Jul 11 22:41:36 2025 GMT Subject: CN=6f7ec6a2-a919-4474-99dc-fd81fe9609f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:b5:ec:c1:0b:52:fa:30:6f:14:ab:83:10: 41:77:57:af:79:e2:aa:df:30:11:06:ac:47:44:7d: 06:96:ec:c5:80:76:7b:78:55:2f:cb:56:b2:d3:1a: ef:d0:67:d0:27:c4:1b:f9:c5:4e:54:d0:cb:57:6c: e0:1a:60:fd:43:7d:7f:a4:59:2e:b3:9e:50:bf:50: cb:fb:8c:bf:22:ca:34:57:4d:95:94:c9:5e:31:23: b4:54:39:31:3c:e5:d3:e1:65:80:4b:9f:2d:20:85: b9:a2:50:26:20:1f:78:a1:f3:ea:65:cf:4d:d5:bc: 17:88:0a:3c:5d:e2:3d:dc:91:f7:d6:3b:df:26:d4: 5a:46:32:cb:f2:e0:39:fd:ca:b3:35:93:93:77:30: 8a:52:48:e9:58:98:35:90:fa:40:d6:e7:0b:fa:84: ef:55:1c:a8:e8:2f:77:47:df:bb:f8:e3:78:88:27: e9:62:27:1c:a1:57:8f:28:92:09:65:b3:ec:39:e1: 39:63:db:5e:0f:eb:69:d1:58:12:ac:cc:b8:d9:fc: 0a:fd:66:6d:0b:03:4b:2f:82:3e:d8:44:12:01:00: 60:60:85:5e:10:3b:07:8d:5d:e4:2f:46:e7:a9:bc: a1:37:31:6f:99:48:17:3d:5d:f6:54:03:c0:77:e9: b4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BE:3B:8E:EE:8E:DE:1D:82:86:AE:B0:E8:D4:61:02:89:56:E1:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04800cc4-d33c-33e3-9c3c-e1efab77c60b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b1:eb:b5:18:80:7e:00:cb:18:b4:5f:d9:de:63:0c:fe:ba: 5e:21:59:43:7d:35:12:83:bb:f1:a7:00:19:af:e0:aa:ff:ad: a9:65:94:c6:35:05:0c:fd:fa:d6:c8:94:f8:89:76:16:6e:a8: 28:74:af:f0:27:46:6e:09:ac:92:8f:ba:5f:b1:1b:1a:e5:bd: e8:91:88:6d:6f:e6:77:cd:e6:59:6a:42:95:28:0d:c3:1c:30: 6a:ee:10:0d:4c:44:81:8a:96:c8:30:8b:c8:a0:dd:dd:0e:58: 9a:b6:42:92:fa:87:9c:8c:67:66:7f:7e:cc:76:42:03:6b:17: d0:e0:e5:3c:e1:5d:de:d4:b2:34:61:f0:c4:39:89:f0:19:46: 34:92:8c:e0:c2:a5:ea:9d:d5:ce:db:8f:94:c5:67:c2:b4:7d: 97:1e:27:ca:76:28:a1:8a:26:0b:77:c5:41:08:bd:76:e1:8c: c1:b6:58:31:8f:fc:7f:29:71:61:1e:4d:b5:20:f7:f1:c1:a0: 52:1f:11:51:7a:93:0a:bd:bc:86:eb:bc:a3:59:ec:86:f3:88: db:b6:7a:54:29:d3:56:19:28:2b:92:e4:6a:13:fb:71:f1:a1: 66:d1:21:3a:48:66:73:82:af:62:ec:b9:16:e7:84:14:3a:7c: 47:d1:72:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmBjy5606xWQZf/94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxMjIyNDEzNloXDTI1MDcxMTIyNDEzNlowLzEtMCsGA1UEAxMk NmY3ZWM2YTItYTkxOS00NDc0LTk5ZGMtZmQ4MWZlOTYwOWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM217MELUvowbxSrgxBBd1eveeKq3zARBqxH RH0GluzFgHZ7eFUvy1ay0xrv0GfQJ8Qb+cVOVNDLV2zgGmD9Q31/pFkus55Qv1DL +4y/Iso0V02VlMleMSO0VDkxPOXT4WWAS58tIIW5olAmIB94ofPqZc9N1bwXiAo8 XeI93JH31jvfJtRaRjLL8uA5/cqzNZOTdzCKUkjpWJg1kPpA1ucL+oTvVRyo6C93 R9+7+ON4iCfpYiccoVePKJIJZbPsOeE5Y9teD+tp0VgSrMy42fwK/WZtCwNLL4I+ 2EQSAQBgYIVeEDsHjV3kL0bnqbyhNzFvmUgXPV32VAPAd+m0mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDO+O47ujt4dgoausOjUYQKJVuENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDQ4MDBjYzQtZDMzYy0z M2UzLTljM2MtZTFlZmFiNzdjNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWx67UYgH4Ayxi0X9neYwz+ul4hWUN9NRKDu/GnABmv4Kr/ralllMY1 BQz9+tbIlPiJdhZuqCh0r/AnRm4JrJKPul+xGxrlveiRiG1v5nfN5llqQpUoDcMc MGruEA1MRIGKlsgwi8ig3d0OWJq2QpL6h5yMZ2Z/fsx2QgNrF9Dg5TzhXd7UsjRh 8MQ5ifAZRjSSjODCpeqd1c7bj5TFZ8K0fZceJ8p2KKGKJgt3xUEIvXbhjMG2WDGP /H8pcWEeTbUg9/HBoFIfEVF6kwq9vIbrvKNZ7IbziNu2elQp01YZKCuS5GoT+3Hx oWbRITpIZnOCr2LsuRbnhBQ6fEfRcvI= -----END CERTIFICATE-----Generated at Sun Jun 15 15:21:03 2025 by rpki-client