$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16593986-f3e0-304f-86f1-14b7a09e9c5c.roa File: 16593986-f3e0-304f-86f1-14b7a09e9c5c.roa (raw, json) Hash identifier: BrVspa1D0qxW8uGKjxmPPHPPjtM3eO1xRYVkGDpKEMU= Subject key identifier: 75:13:1C:59:EE:00:23:10:37:59:79:FF:BA:AC:45:84:5E:D9:87:F9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A15CA935CAE91C24094C3AAC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16593986-f3e0-304f-86f1-14b7a09e9c5c.roa Signing time: Thu 05 Jun 2025 01:00:51 +0000 ROA not before: Thu 05 Jun 2025 01:00:51 +0000 ROA not after: Wed 03 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.153.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:ca:93:5c:ae:91:c2:40:94:c3:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 5 01:00:51 2025 GMT Not After : Sep 3 01:00:51 2025 GMT Subject: CN=5d998b9b-08c6-41ea-9a49-7f4b8c7764f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:23:4c:07:14:ee:c6:ed:ac:33:f2:5a:45:23: 1f:5e:e3:80:fa:e0:b4:6e:f2:d1:04:45:5d:07:dc: d7:41:eb:a0:86:13:85:c0:a6:f8:55:2a:9c:82:41: 65:30:0b:38:d4:7d:6c:e6:6b:4f:fc:17:63:b1:3f: be:29:62:58:5e:3a:aa:d8:78:3a:17:0c:be:4d:fe: 2c:49:cf:0e:48:1e:60:bb:8e:a3:bf:16:19:3f:eb: 25:66:30:25:1c:ec:50:b0:09:69:ac:c7:bc:8c:76: ad:3a:7e:fa:85:16:2f:ac:15:bf:7f:a8:d0:8b:87: c9:7c:54:70:60:3c:79:6e:38:75:7a:03:92:d9:c7: 7b:b9:a9:ee:bd:d0:f3:e0:f8:c4:13:99:61:aa:1b: f3:01:69:7d:db:c9:3e:68:fe:a7:61:ce:77:07:f8: ca:15:df:20:d3:fc:b2:4f:72:ad:84:5e:f6:56:6e: c1:25:00:9a:f7:81:93:ab:18:c2:67:78:ed:18:31: f4:70:44:c5:6e:17:1f:60:ed:76:2b:7a:27:c8:ea: fb:d5:36:43:a0:c5:e8:00:6d:e9:0f:d7:d9:fc:75: 00:79:b9:90:15:fd:83:aa:37:6d:4e:41:97:04:40: 7e:9a:6f:09:50:36:22:51:42:ce:51:f8:4b:7d:57: 48:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:13:1C:59:EE:00:23:10:37:59:79:FF:BA:AC:45:84:5E:D9:87:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16593986-f3e0-304f-86f1-14b7a09e9c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e8:b5:f3:27:0b:42:f5:1b:16:e0:5d:f6:17:bc:ab:ba:24: 6f:b6:a3:a5:e5:f0:80:f8:16:f6:16:13:07:76:d6:7b:90:0a: ed:07:0c:8b:66:57:23:97:e5:8f:a1:72:5f:c8:5a:96:03:33: 40:d6:8e:09:a2:0e:0f:24:ed:54:47:73:d4:71:39:bd:0f:74: d7:56:c8:44:d5:b7:f8:04:57:d4:28:c2:86:1d:45:b6:cb:66: 89:bb:09:2c:32:3d:41:4d:4f:29:c0:c1:2c:45:06:91:fa:e3: 09:66:ce:5a:78:33:98:9b:52:68:bb:56:62:5f:c5:79:66:01: ff:dd:1f:b1:55:8e:ba:73:d8:3a:84:81:97:d0:7c:0e:46:e1: f3:27:f9:6c:f8:af:77:5e:68:d5:14:ad:4d:06:61:a7:58:77: 63:e6:70:a1:f8:55:7b:a5:49:1e:0b:8f:54:a8:37:6b:ec:63: 4f:42:fe:8f:26:6a:84:14:5e:fa:e7:9f:26:17:7f:aa:5b:b1: bb:4c:14:d9:16:fc:1a:7a:3c:58:0f:2d:70:be:7a:77:b4:3f: 40:a1:f4:08:fa:d5:7b:77:75:8e:f0:89:ab:06:e8:8f:c6:47: d0:c0:fc:a9:a1:c3:cc:e0:44:16:e6:64:98:37:78:95:b6:64: ad:46:36:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoVypNcrpHCQJTDqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNTAxMDA1MVoXDTI1MDkwMzAxMDA1MVowLzEtMCsGA1UEAxMk NWQ5OThiOWItMDhjNi00MWVhLTlhNDktN2Y0YjhjNzc2NGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSNMBxTuxu2sM/JaRSMfXuOA+uC0bvLRBEVd B9zXQeughhOFwKb4VSqcgkFlMAs41H1s5mtP/BdjsT++KWJYXjqq2Hg6Fwy+Tf4s Sc8OSB5gu46jvxYZP+slZjAlHOxQsAlprMe8jHatOn76hRYvrBW/f6jQi4fJfFRw YDx5bjh1egOS2cd7uanuvdDz4PjEE5lhqhvzAWl928k+aP6nYc53B/jKFd8g0/yy T3KthF72Vm7BJQCa94GTqxjCZ3jtGDH0cETFbhcfYO12K3onyOr71TZDoMXoAG3p D9fZ/HUAebmQFf2DqjdtTkGXBEB+mm8JUDYiUULOUfhLfVdIlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUTHFnuACMQN1l5/7qsRYRe2Yf5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTY1OTM5ODYtZjNlMC0z MDRmLTg2ZjEtMTRiN2EwOWU5YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPotfMnC0L1GxbgXfYXvKu6JG+2o6Xl8ID4FvYWEwd21nuQCu0HDItm VyOX5Y+hcl/IWpYDM0DWjgmiDg8k7VRHc9RxOb0PdNdWyETVt/gEV9QowoYdRbbL Zom7CSwyPUFNTynAwSxFBpH64wlmzlp4M5ibUmi7VmJfxXlmAf/dH7FVjrpz2DqE gZfQfA5G4fMn+Wz4r3deaNUUrU0GYadYd2PmcKH4VXulSR4Lj1SoN2vsY09C/o8m aoQUXvrnnyYXf6pbsbtMFNkW/Bp6PFgPLXC+ene0P0Ch9Aj61Xt3dY7wiasG6I/G R9DA/Kmhw8zgRBbmZJg3eJW2ZK1GNh8= -----END CERTIFICATE-----Generated at Sun Jun 15 15:30:42 2025 by rpki-client