$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b42a036-18bc-3943-a55e-20be9e9bf9dc.roa File: 3b42a036-18bc-3943-a55e-20be9e9bf9dc.roa (raw, json) Hash identifier: UG3ggecB8DDBgkVvVk+hxZOUtP3DEJ9djplLYb6kHPY= Subject key identifier: 35:BD:B5:6D:7C:D3:A6:BD:24:7E:FD:77:B3:D6:BD:7B:F6:4A:DF:CC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A2591C75274FAA32715CDB8A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b42a036-18bc-3943-a55e-20be9e9bf9dc.roa Signing time: Tue 10 Jun 2025 16:39:24 +0000 ROA not before: Tue 10 Jun 2025 16:39:24 +0000 ROA not after: Mon 08 Sep 2025 16:39:24 +0000 asID: 8069 IP address blocks: 20.153.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:25:91:c7:52:74:fa:a3:27:15:cd:b8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 10 16:39:24 2025 GMT Not After : Sep 8 16:39:24 2025 GMT Subject: CN=32282f17-4a58-48a7-bb6f-3ed472e7e47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6e:6c:c3:f1:5c:f0:dc:13:3b:5c:e0:06:48: d0:5e:a1:d4:5d:a8:76:62:dc:25:c7:14:a0:d6:05: 42:2b:43:89:17:2a:1e:13:78:75:76:16:67:33:ed: cc:1c:00:c5:53:2a:54:05:ac:01:2c:6b:f2:78:ca: dc:d8:83:61:2f:97:7e:9f:71:62:04:84:b0:d5:79: b8:4f:6b:55:ea:b9:cb:09:86:c4:9f:48:a7:99:01: 0a:09:5b:ce:54:33:e8:17:aa:dd:79:fb:30:ca:07: ed:53:38:a2:ef:98:b9:b2:88:ec:4d:c4:d2:0a:b2: de:7f:58:05:32:b2:5f:97:44:68:8d:d7:48:1b:c1: 27:e3:53:87:7d:98:39:3b:a0:3e:24:a9:ce:1c:e5: d4:2c:f1:b3:0d:61:4d:a4:70:38:71:26:ad:39:40: f8:6d:00:69:d9:6c:f2:47:29:21:10:82:0a:31:95: dd:fa:d4:9a:6f:f4:e3:f0:4b:11:14:98:90:a7:2d: aa:f4:71:68:09:c6:37:c5:42:16:6e:8f:55:f7:19: 18:bb:00:df:bd:71:2e:e5:28:67:aa:e2:02:8c:3f: 59:14:ec:ca:d9:e6:b8:e4:80:0c:ee:8e:4d:c0:e4: de:2d:0e:a3:30:b3:a6:9b:f0:98:00:a4:ea:cc:2e: b3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BD:B5:6D:7C:D3:A6:BD:24:7E:FD:77:B3:D6:BD:7B:F6:4A:DF:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b42a036-18bc-3943-a55e-20be9e9bf9dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b3:d1:d5:97:f4:2a:bd:80:04:3f:db:4f:f6:ba:b8:2e:94: b3:eb:28:0a:69:59:70:5c:9f:2d:a7:24:95:81:7c:93:8f:f9: e7:13:98:66:77:0a:5b:6a:03:cb:f7:0e:9d:cf:61:2d:78:ca: b4:50:59:94:f2:df:16:25:c3:18:00:5b:69:37:a5:35:d4:ef: 11:d6:e2:15:67:e9:de:05:88:49:86:e5:59:8f:93:a7:d8:84: 81:82:b6:e3:86:15:96:65:35:67:36:7a:25:8a:b6:b8:c1:74: 24:60:2a:a2:14:b0:47:ac:6d:1f:8e:60:b5:e7:ee:16:45:fe: 19:2a:7f:49:1b:12:f4:ba:b3:14:76:1e:88:d3:83:27:62:ea: 95:eb:49:9c:05:8d:5d:92:d7:48:04:84:a5:82:1e:a4:37:9b: fe:77:6f:d3:67:39:d5:d9:fd:80:38:8e:98:fc:2d:eb:2f:fa: db:a7:52:f0:a6:ff:5d:ef:ac:48:11:d3:67:2e:cd:1f:b9:15: db:ae:86:4e:34:80:7e:55:02:f0:40:28:42:d0:7b:9e:e7:ea: a3:72:11:15:af:c5:65:b5:a0:82:66:55:69:21:71:5c:90:ea: 44:f1:08:b7:76:48:da:a5:a1:57:fb:1d:4b:d2:74:4f:88:a2: cd:e9:46:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEolkcdSdPqjJxXNuKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMDE2MzkyNFoXDTI1MDkwODE2MzkyNFowLzEtMCsGA1UEAxMk MzIyODJmMTctNGE1OC00OGE3LWJiNmYtM2VkNDcyZTdlNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW5sw/Fc8NwTO1zgBkjQXqHUXah2YtwlxxSg 1gVCK0OJFyoeE3h1dhZnM+3MHADFUypUBawBLGvyeMrc2INhL5d+n3FiBISw1Xm4 T2tV6rnLCYbEn0inmQEKCVvOVDPoF6rdefswygftUzii75i5sojsTcTSCrLef1gF MrJfl0RojddIG8En41OHfZg5O6A+JKnOHOXULPGzDWFNpHA4cSatOUD4bQBp2Wzy RykhEIIKMZXd+tSab/Tj8EsRFJiQpy2q9HFoCcY3xUIWbo9V9xkYuwDfvXEu5Shn quICjD9ZFOzK2ea45IAM7o5NwOTeLQ6jMLOmm/CYAKTqzC6zGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDW9tW1806a9JH79d7PWvXv2St/MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2I0MmEwMzYtMThiYy0z OTQzLWE1NWUtMjBiZTllOWJmOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6z0dWX9Cq9gAQ/20/2urgulLPrKAppWXBcny2nJJWBfJOP+ecTmGZ3 CltqA8v3Dp3PYS14yrRQWZTy3xYlwxgAW2k3pTXU7xHW4hVn6d4FiEmG5VmPk6fY hIGCtuOGFZZlNWc2eiWKtrjBdCRgKqIUsEesbR+OYLXn7hZF/hkqf0kbEvS6sxR2 HojTgydi6pXrSZwFjV2S10gEhKWCHqQ3m/53b9NnOdXZ/YA4jpj8Lesv+tunUvCm /13vrEgR02cuzR+5Fduuhk40gH5VAvBAKELQe57n6qNyERWvxWW1oIJmVWkhcVyQ 6kTxCLd2SNqloVf7HUvSdE+Ios3pRss= -----END CERTIFICATE-----Generated at Sun Jun 15 15:58:48 2025 by rpki-client