$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa File: 34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa (raw, json) Hash identifier: L2MECv+TFOf3xPkg/IsQLAK1PXOleGdCr3xKZdKiGzM= Subject key identifier: 56:D7:AD:6F:2B:7C:B1:43:36:8D:1F:84:03:38:5F:07:9E:88:A5:BA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849BF3FA7160714FD4D535BFE80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.153.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a7:16:07:14:fd:4d:53:5b:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=b3c5a057-f08e-4e35-98bb-7c1bf47b1858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:85:b2:1c:18:5d:5a:d2:89:32:38:55:06: 11:ac:d4:43:5a:88:88:90:18:d6:5d:c6:6f:4b:32: 90:be:83:95:2c:c6:99:72:64:c9:49:c1:54:50:af: 2e:c6:0d:f0:ec:0e:8b:fe:bf:eb:95:ba:54:23:f1: 8e:d8:8d:a2:53:da:b6:b6:e0:16:dd:98:51:20:82: 9c:f1:91:80:da:bc:1b:ed:93:99:70:6f:70:de:47: 13:34:62:6d:51:eb:1f:71:2d:65:91:5b:72:22:7b: 14:55:20:ed:60:e4:fd:23:90:60:c8:c1:4f:e4:1d: 1e:75:d2:67:e6:7e:38:0f:3a:d2:b1:a7:a5:f5:d7: 3e:5f:5f:14:f0:89:04:27:e8:e5:98:80:b1:2b:fc: c8:26:d5:23:fe:03:d1:6a:eb:4a:e3:14:61:ce:a7: 0c:ef:01:6e:40:22:8c:df:fc:8f:d7:f1:64:57:c6: 1f:b6:fe:90:58:a6:61:c5:f5:4a:d6:f7:bb:06:32: 44:53:ae:09:a3:ef:f1:cd:3f:e1:2a:34:50:0e:13: 74:03:00:c2:55:9c:4a:c7:ca:be:18:ca:12:d8:7a: 32:0d:9b:1c:51:f3:39:a5:39:25:6e:23:1b:81:a7: ae:0f:96:34:e0:e7:4d:33:4b:d4:b9:76:51:54:a7: 5e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D7:AD:6F:2B:7C:B1:43:36:8D:1F:84:03:38:5F:07:9E:88:A5:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/34ea68bc-c6cd-32e3-8222-a3ea9d658366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:41:2e:44:be:d9:07:04:a7:d9:73:b0:92:3a:20:15:7a:89: 9e:69:35:18:ad:d2:f8:cd:15:f5:09:ef:2a:fa:4e:56:c3:35: 42:97:70:5c:77:ef:57:85:7e:30:41:f0:81:31:65:77:94:a2: f6:72:ba:83:01:d4:d9:89:dd:4b:e9:2d:71:e4:37:1a:2c:b6: ce:5c:4c:73:28:05:9b:60:f3:66:7b:f2:19:06:7f:50:bc:b9: 82:0a:83:35:07:92:c1:2f:b8:ee:80:f7:94:c4:9c:bc:29:1b: c1:fc:b4:c3:89:e8:ad:a3:04:f5:21:d2:84:e8:d5:ab:de:d1: 3e:1e:d6:c3:4a:b4:dd:58:b7:2a:ab:48:00:fd:a8:c6:d6:43: 4f:62:40:e1:82:90:d0:77:4f:7e:d6:fb:5f:3b:6a:47:72:60: 99:44:00:d9:1f:5f:f7:fe:40:15:74:5f:9e:14:62:ae:a9:b9: fe:58:0a:fe:a3:3e:5a:9d:e3:e1:ef:8e:0d:e8:d2:a2:86:f0: ae:8a:52:65:7b:e3:4f:2e:83:ad:6b:bf:17:54:a3:b1:cc:44: 13:05:19:a3:6a:28:1b:ae:63:31:ea:5f:09:4d:1e:4e:38:f4: fb:4e:f8:6c:84:65:ca:f4:ca:28:46:03:f2:3f:80:b7:b8:7a: ce:1b:5e:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6cWBxT9TVNb/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YjNjNWEwNTctZjA4ZS00ZTM1LTk4YmItN2MxYmY0N2IxODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubWFshwYXVrSiTI4VQYRrNRDWoiIkBjWXcZv SzKQvoOVLMaZcmTJScFUUK8uxg3w7A6L/r/rlbpUI/GO2I2iU9q2tuAW3ZhRIIKc 8ZGA2rwb7ZOZcG9w3kcTNGJtUesfcS1lkVtyInsUVSDtYOT9I5BgyMFP5B0eddJn 5n44DzrSsael9dc+X18U8IkEJ+jlmICxK/zIJtUj/gPRautK4xRhzqcM7wFuQCKM 3/yP1/FkV8Yftv6QWKZhxfVK1ve7BjJEU64Jo+/xzT/hKjRQDhN0AwDCVZxKx8q+ GMoS2HoyDZscUfM5pTklbiMbgaeuD5Y04OdNM0vUuXZRVKdeEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbXrW8rfLFDNo0fhAM4XweeiKW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzRlYTY4YmMtYzZjZC0z MmUzLTgyMjItYTNlYTlkNjU4MzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZBLkS+2QcEp9lzsJI6IBV6iZ5pNRit0vjNFfUJ7yr6TlbDNUKXcFx3 71eFfjBB8IExZXeUovZyuoMB1NmJ3UvpLXHkNxosts5cTHMoBZtg82Z78hkGf1C8 uYIKgzUHksEvuO6A95TEnLwpG8H8tMOJ6K2jBPUh0oTo1ave0T4e1sNKtN1Ytyqr SAD9qMbWQ09iQOGCkNB3T37W+187akdyYJlEANkfX/f+QBV0X54UYq6puf5YCv6j Plqd4+Hvjg3o0qKG8K6KUmV7408ug61rvxdUo7HMRBMFGaNqKBuuYzHqXwlNHk44 9PtO+GyEZcr0yihGA/I/gLe4es4bXsg= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:49 2025 by rpki-client