$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/287659a3-4e2a-3743-b4b5-973d707c8517.roa File: 287659a3-4e2a-3743-b4b5-973d707c8517.roa (raw, json) Hash identifier: 6nX2cRd10XZMazlN8NYv2NIDvxv6+wVy4Za+pKL9RYU= Subject key identifier: A1:6C:9D:8A:C9:AA:BE:37:08:47:25:52:64:CE:A1:A3:AF:8B:C8:E6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A2591CE0BA951E98DACECE180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/287659a3-4e2a-3743-b4b5-973d707c8517.roa Signing time: Tue 10 Jun 2025 16:39:27 +0000 ROA not before: Tue 10 Jun 2025 16:39:27 +0000 ROA not after: Mon 08 Sep 2025 16:39:27 +0000 asID: 8069 IP address blocks: 20.153.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:25:91:ce:0b:a9:51:e9:8d:ac:ec:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 10 16:39:27 2025 GMT Not After : Sep 8 16:39:27 2025 GMT Subject: CN=e32329c6-30d3-49ab-85f9-f2a88d8deaab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:10:20:59:03:c0:6c:a1:26:9f:49:a8:66:78: d1:12:0e:9b:1b:b5:60:62:2c:67:8e:05:5a:8a:46: a8:df:cb:95:ec:5a:61:0a:16:fe:3b:c2:96:05:ce: 37:76:2f:eb:30:be:14:9a:b3:80:88:87:c5:c5:7b: f8:c2:38:d5:21:4b:de:f1:67:56:6d:cd:02:71:06: 69:93:b6:78:b2:78:8a:8c:d2:1d:b8:c4:8c:d4:b6: 1d:08:46:30:48:52:5b:16:9d:2b:ac:d4:62:7a:ff: 06:09:12:24:4a:f4:c0:19:78:b8:6c:06:dd:4d:d4: ff:f9:e3:8f:73:96:c4:a2:5e:6b:1f:c8:75:e6:8b: 68:9b:ab:df:ee:69:89:48:cf:af:eb:d7:76:88:ea: c3:85:7a:87:da:94:6d:e5:ae:b4:25:37:f1:1a:fc: fc:45:84:14:d8:72:9c:2d:7b:f3:f3:8b:9d:c2:98: d8:34:bf:1c:c0:93:46:0e:63:50:92:93:d0:64:52: bf:4c:ca:75:05:33:49:eb:c9:cf:59:bb:f0:ce:06: e5:18:28:7f:0f:4b:56:11:46:e7:c1:8d:29:4f:bf: 55:b6:c4:20:69:f0:3b:f8:a5:99:db:9d:75:d2:6a: df:1e:7e:87:1d:c0:05:aa:1c:ec:42:33:46:06:6b: 1b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6C:9D:8A:C9:AA:BE:37:08:47:25:52:64:CE:A1:A3:AF:8B:C8:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/287659a3-4e2a-3743-b4b5-973d707c8517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:b9:90:b8:8e:61:f1:e3:90:4f:39:74:8b:67:6c:76:c5:a2: 43:24:80:dc:52:fc:f2:62:95:0a:3c:81:61:52:93:7e:3e:1d: 40:d4:ca:9d:0c:4d:86:ba:fc:d7:1d:13:d3:02:de:9f:d9:2d: ac:b7:e3:71:c0:84:d0:c9:95:f8:fb:85:80:4e:c7:66:d0:43: 15:22:78:c4:4f:23:3c:17:d7:80:e2:fc:d4:9e:a2:37:bc:ff: 8a:34:1e:3a:3e:ec:16:db:40:9b:ba:32:8f:76:28:3b:f2:00: 24:7b:81:de:e9:95:67:f6:1a:69:35:db:53:96:4b:08:67:d6: d4:04:01:e3:89:26:d8:d2:c9:58:e9:bd:ca:90:1e:80:55:86: ca:6e:d1:38:ec:21:75:d5:8d:08:4d:56:69:e3:6e:86:76:e1: 50:3e:e7:96:79:09:9f:1b:16:14:0a:fa:9c:36:b0:bf:26:9c: a6:7e:e7:39:ae:7d:44:f4:30:66:68:be:37:f9:a4:c4:e2:17: f7:bb:ff:58:bb:42:22:14:80:99:e3:7d:58:dd:36:53:d3:75: 38:c3:e8:42:fa:22:00:4c:44:39:df:bf:53:1d:ec:d7:ec:13: c2:78:56:d7:16:ee:63:bb:3e:04:35:6a:46:80:35:a1:19:52: 7b:dc:6b:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEolkc4LqVHpjazs4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMDE2MzkyN1oXDTI1MDkwODE2MzkyN1owLzEtMCsGA1UEAxMk ZTMyMzI5YzYtMzBkMy00OWFiLTg1ZjktZjJhODhkOGRlYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhAgWQPAbKEmn0moZnjREg6bG7VgYixnjgVa ikao38uV7FphChb+O8KWBc43di/rML4UmrOAiIfFxXv4wjjVIUve8WdWbc0CcQZp k7Z4sniKjNIduMSM1LYdCEYwSFJbFp0rrNRiev8GCRIkSvTAGXi4bAbdTdT/+eOP c5bEol5rH8h15otom6vf7mmJSM+v69d2iOrDhXqH2pRt5a60JTfxGvz8RYQU2HKc LXvz84udwpjYNL8cwJNGDmNQkpPQZFK/TMp1BTNJ68nPWbvwzgblGCh/D0tWEUbn wY0pT79VtsQgafA7+KWZ25110mrfHn6HHcAFqhzsQjNGBmsb1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFsnYrJqr43CEclUmTOoaOvi8jmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjg3NjU5YTMtNGUyYS0z NzQzLWI0YjUtOTczZDcwN2M4NTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJn6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu5kLiOYfHjkE85dItnbHbFokMkgNxS/PJilQo8gWFSk34+HUDUyp0M TYa6/NcdE9MC3p/ZLay343HAhNDJlfj7hYBOx2bQQxUieMRPIzwX14Di/NSeoje8 /4o0Hjo+7BbbQJu6Mo92KDvyACR7gd7plWf2Gmk121OWSwhn1tQEAeOJJtjSyVjp vcqQHoBVhspu0TjsIXXVjQhNVmnjboZ24VA+55Z5CZ8bFhQK+pw2sL8mnKZ+5zmu fUT0MGZovjf5pMTiF/e7/1i7QiIUgJnjfVjdNlPTdTjD6EL6IgBMRDnfv1Md7Nfs E8J4VtcW7mO7PgQ1akaANaEZUnvca0g= -----END CERTIFICATE-----Generated at Mon Jun 16 05:20:27 2025 by rpki-client