$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2ee96852-3d60-318a-9c2e-44c4b9a37de6.roa File: 2ee96852-3d60-318a-9c2e-44c4b9a37de6.roa (raw, json) Hash identifier: Jg0vTHqmthlTLH9Q1jE/u+gvJ4g+uyjKXGz25QfCFiQ= Subject key identifier: 0C:E5:D4:02:30:C1:79:C9:A7:A7:3E:41:C2:81:88:08:10:25:4C:2F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A19FABD1EF9BA805C9331DBC8 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2ee96852-3d60-318a-9c2e-44c4b9a37de6.roa Signing time: Fri 06 Jun 2025 13:01:04 +0000 ROA not before: Fri 06 Jun 2025 13:01:04 +0000 ROA not after: Thu 04 Sep 2025 13:01:04 +0000 asID: 8069 IP address blocks: 20.153.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:19:fa:bd:1e:f9:ba:80:5c:93:31:db:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 6 13:01:04 2025 GMT Not After : Sep 4 13:01:04 2025 GMT Subject: CN=c90535f0-466b-4d83-99b0-35a4ad128558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:47:1b:ae:c3:31:f9:49:7d:e0:5a:ab:d9:73: 88:77:a5:e1:0d:78:b7:3d:4d:61:04:00:07:40:95: 1d:ad:70:05:df:d5:70:c2:5d:51:4f:92:23:cd:e1: 71:b8:92:d3:d5:65:52:27:e8:83:2d:0b:fe:95:e3: c0:50:81:8d:3e:9b:76:bf:73:75:76:a5:42:13:a1: 5e:d6:e6:d5:45:c3:00:bf:70:4d:9c:85:77:a8:79: 09:de:86:6c:94:4e:88:a7:48:3e:4c:9e:ff:91:23: 61:3d:5f:7d:7b:e6:ac:b2:c5:3e:d8:81:88:93:38: 9b:b4:0a:2d:75:e1:cb:1e:40:a2:12:79:08:61:c5: a1:8f:49:6f:c3:1d:50:9d:71:ed:4d:60:07:41:7d: c8:56:08:0c:c1:82:4b:92:f6:bc:65:1b:b8:37:3c: da:06:69:89:8e:3e:ee:48:8a:c2:6b:08:68:82:da: de:a9:32:61:4d:e4:ed:d0:6e:0f:3f:bf:7e:53:2b: 26:63:0a:3b:2a:2c:58:5a:52:09:54:22:3f:80:a4: 58:ae:d3:ec:27:5c:df:7c:99:2e:30:b6:4a:9e:b6: 87:90:b1:c2:3c:ff:04:bf:ad:65:b8:ef:28:0a:ca: 16:8e:03:9d:4c:ad:41:c6:52:74:33:9d:f0:b4:9a: f7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E5:D4:02:30:C1:79:C9:A7:A7:3E:41:C2:81:88:08:10:25:4C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2ee96852-3d60-318a-9c2e-44c4b9a37de6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:92:9b:17:17:53:bc:62:bd:7f:0f:7d:f3:c5:8e:d5:49:30: d7:03:20:c0:24:b4:62:2f:e0:8b:ed:7b:47:00:b6:8c:1e:90: 68:90:23:a3:a7:ed:01:e9:22:68:e5:c4:bb:7e:b7:f9:c8:9e: 4e:31:52:01:d5:b1:a2:12:7e:4d:84:91:5b:87:28:5e:81:f5: 4b:64:76:6c:84:df:22:b9:6f:cf:41:81:5c:ca:26:99:61:e6: 51:dc:10:e6:62:d5:24:cc:7f:e0:82:a5:2e:0e:d1:6a:84:3e: a7:ac:82:c4:38:f5:36:79:05:e9:4e:4c:3f:18:bd:86:4d:ca: a9:5e:5f:61:88:17:da:73:34:61:2a:c5:90:ed:56:18:e3:5b: 6d:e1:a9:f7:16:02:63:ed:1b:83:d3:f4:aa:6b:ae:54:e5:2c: 82:ed:83:41:d2:8c:c6:fc:66:f3:5b:98:45:bc:a5:d5:26:c6: d1:14:f0:04:b4:5c:39:37:37:1b:a8:f9:4f:05:1e:a2:ca:04: d1:b8:df:ea:89:5d:e4:be:fc:c0:0c:a6:a6:2f:f0:44:fd:31: 92:65:05:0c:61:d4:4d:cd:4e:62:91:b9:3a:cd:d5:d5:8f:c8: 45:88:8c:33:c7:c6:df:71:ae:04:0f:6e:a6:99:aa:ec:6c:54: 16:af:db:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoZ+r0e+bqAXJMx28gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNjEzMDEwNFoXDTI1MDkwNDEzMDEwNFowLzEtMCsGA1UEAxMk YzkwNTM1ZjAtNDY2Yi00ZDgzLTk5YjAtMzVhNGFkMTI4NTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0cbrsMx+Ul94Fqr2XOId6XhDXi3PU1hBAAH QJUdrXAF39Vwwl1RT5IjzeFxuJLT1WVSJ+iDLQv+lePAUIGNPpt2v3N1dqVCE6Fe 1ubVRcMAv3BNnIV3qHkJ3oZslE6Ip0g+TJ7/kSNhPV99e+asssU+2IGIkzibtAot deHLHkCiEnkIYcWhj0lvwx1QnXHtTWAHQX3IVggMwYJLkva8ZRu4NzzaBmmJjj7u SIrCawhogtreqTJhTeTt0G4PP79+UysmYwo7KixYWlIJVCI/gKRYrtPsJ1zffJku MLZKnraHkLHCPP8Ev61luO8oCsoWjgOdTK1BxlJ0M53wtJr3XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzl1AIwwXnJp6c+QcKBiAgQJUwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmVlOTY4NTItM2Q2MC0z MThhLTljMmUtNDRjNGI5YTM3ZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuSmxcXU7xivX8PffPFjtVJMNcDIMAktGIv4Ivte0cAtowekGiQI6On 7QHpImjlxLt+t/nInk4xUgHVsaISfk2EkVuHKF6B9UtkdmyE3yK5b89BgVzKJplh 5lHcEOZi1STMf+CCpS4O0WqEPqesgsQ49TZ5BelOTD8YvYZNyqleX2GIF9pzNGEq xZDtVhjjW23hqfcWAmPtG4PT9KprrlTlLILtg0HSjMb8ZvNbmEW8pdUmxtEU8AS0 XDk3Nxuo+U8FHqLKBNG43+qJXeS+/MAMpqYv8ET9MZJlBQxh1E3NTmKRuTrN1dWP yEWIjDPHxt9xrgQPbqaZquxsVBav20A= -----END CERTIFICATE-----Generated at Sun Jun 15 16:02:05 2025 by rpki-client