$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa File: 16646b1c-7273-3e1a-9ca3-efedf58284e9.roa (raw, json) Hash identifier: GcCJ7rJBhCLM26JPEMhiGBHj2JE4XaQi9I7oN+8MSdE= Subject key identifier: 52:84:7A:3C:F0:B8:7D:A6:F7:B6:6F:4A:E3:AD:76:B7:BA:8D:07:A4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A15CA927C40E3A75C9808F800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa Signing time: Thu 05 Jun 2025 01:00:51 +0000 ROA not before: Thu 05 Jun 2025 01:00:51 +0000 ROA not after: Wed 03 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.153.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:ca:92:7c:40:e3:a7:5c:98:08:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 5 01:00:51 2025 GMT Not After : Sep 3 01:00:51 2025 GMT Subject: CN=4c00769d-0904-41f1-ad3c-557cd76a8aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:83:3d:4f:01:95:01:d1:d9:61:a4:31:68:9a: 04:6d:39:89:f2:22:46:5d:b4:ee:64:09:1b:a1:ae: 16:99:e0:d8:0e:5b:ce:c6:2e:8c:de:fc:29:b9:dd: 62:99:bd:9c:16:62:e9:e5:96:75:67:2c:74:ea:fb: de:3e:fa:c1:31:d1:36:08:43:7a:1b:f6:7e:6a:08: 98:6b:2a:52:e2:20:8f:c1:c8:db:21:7b:44:49:86: 9f:d7:63:a4:45:10:11:3c:22:c4:87:de:78:1d:51: f8:6c:ec:d0:cd:61:b4:5f:32:09:48:2a:ec:c6:33: f5:e5:e4:33:5c:e4:a1:7b:c1:0a:fc:77:c0:41:8f: 50:d2:62:ae:35:ba:34:94:11:16:71:b0:58:42:62: 6a:8e:fc:d2:61:ea:df:7b:19:de:28:6e:4f:c8:42: 5d:94:62:e1:d1:c4:7a:40:51:a0:c2:af:40:5c:a1: ff:5d:9a:c3:63:8c:1a:86:80:58:55:c0:6e:f8:a5: 96:3c:df:87:2e:d9:da:f2:fb:de:5a:e2:64:9b:6f: c5:18:87:41:ae:7c:99:f3:1f:ed:c5:dc:10:98:34: c4:65:b6:54:b0:4a:05:ab:c4:39:4e:77:a9:c7:b7: 46:a7:1d:32:a5:5a:3a:97:67:26:84:f3:a1:2f:4f: 55:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:84:7A:3C:F0:B8:7D:A6:F7:B6:6F:4A:E3:AD:76:B7:BA:8D:07:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:06:69:f5:88:52:e6:c0:ba:cc:8b:13:85:c0:a2:89:a3:9c: 30:8f:8a:b3:57:e6:6c:a4:fa:df:e3:b6:9f:5c:03:82:61:e5: d2:bd:df:c1:1d:67:c7:b4:78:70:3e:ee:f7:49:88:14:d1:ff: 93:d4:19:72:eb:d0:6e:97:79:a6:a3:27:19:a8:5e:78:f5:c2: b3:6c:49:a0:b2:04:b0:32:81:4e:40:95:d5:6d:46:48:cb:f1: cb:44:2c:04:0b:a7:72:ac:ce:68:b1:66:b8:a6:7d:17:47:0f: 62:30:d1:2c:35:c0:ef:68:56:98:11:57:28:24:00:e1:b1:75: 2a:5f:09:66:b3:9a:e3:f6:79:95:8d:ae:38:4c:47:4b:a8:6a: 89:5d:9e:99:64:16:e6:15:07:b1:ab:bf:9d:ac:f4:81:89:c5: 9f:58:73:43:5a:32:4c:17:95:9f:7c:5d:fe:33:27:68:23:47: 8b:c4:f2:48:b2:a8:b2:8c:02:1a:4d:d8:d1:0e:9e:26:63:bc: bf:de:dd:33:36:18:65:49:cb:e9:4a:46:65:a8:39:ba:92:17: 18:40:cf:8f:54:15:19:0d:0f:a5:da:a6:df:a3:b3:46:e8:80: 4c:a1:70:40:49:54:a7:0d:98:eb:dc:f6:de:b2:2c:a6:22:bb: 33:05:81:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoVypJ8QOOnXJgI+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNTAxMDA1MVoXDTI1MDkwMzAxMDA1MVowLzEtMCsGA1UEAxMk NGMwMDc2OWQtMDkwNC00MWYxLWFkM2MtNTU3Y2Q3NmE4YWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4M9TwGVAdHZYaQxaJoEbTmJ8iJGXbTuZAkb oa4WmeDYDlvOxi6M3vwpud1imb2cFmLp5ZZ1Zyx06vvePvrBMdE2CEN6G/Z+agiY aypS4iCPwcjbIXtESYaf12OkRRARPCLEh954HVH4bOzQzWG0XzIJSCrsxjP15eQz XOShe8EK/HfAQY9Q0mKuNbo0lBEWcbBYQmJqjvzSYerfexneKG5PyEJdlGLh0cR6 QFGgwq9AXKH/XZrDY4wahoBYVcBu+KWWPN+HLtna8vveWuJkm2/FGIdBrnyZ8x/t xdwQmDTEZbZUsEoFq8Q5Tnepx7dGpx0ypVo6l2cmhPOhL09VBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKEejzwuH2m97ZvSuOtdre6jQekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTY2NDZiMWMtNzI3My0z ZTFhLTljYTMtZWZlZGY1ODI4NGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0GafWIUubAusyLE4XAoomjnDCPirNX5myk+t/jtp9cA4Jh5dK938Ed Z8e0eHA+7vdJiBTR/5PUGXLr0G6XeaajJxmoXnj1wrNsSaCyBLAygU5AldVtRkjL 8ctELAQLp3KszmixZrimfRdHD2Iw0Sw1wO9oVpgRVygkAOGxdSpfCWazmuP2eZWN rjhMR0uoaoldnplkFuYVB7Grv52s9IGJxZ9Yc0NaMkwXlZ98Xf4zJ2gjR4vE8kiy qLKMAhpN2NEOniZjvL/e3TM2GGVJy+lKRmWoObqSFxhAz49UFRkND6Xapt+js0bo gEyhcEBJVKcNmOvc9t6yLKYiuzMFgXg= -----END CERTIFICATE-----Generated at Sun Jun 15 17:24:32 2025 by rpki-client