$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3eef707b-8fc4-3ee2-b4b2-5ce43ae2d1c0.roa File: 3eef707b-8fc4-3ee2-b4b2-5ce43ae2d1c0.roa (raw, json) Hash identifier: r0DnjBEsycLvVMTeJX2Wgbsm61yWU94BMJaQPQBy6Ng= Subject key identifier: 44:5A:65:81:3F:71:52:AC:63:8A:58:1E:A5:D4:2F:60:24:DC:3F:9D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849E34C355D089D14AE6804823A Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3eef707b-8fc4-3ee2-b4b2-5ce43ae2d1c0.roa Signing time: Sat 17 May 2025 22:55:52 +0000 ROA not before: Sat 17 May 2025 22:55:52 +0000 ROA not after: Fri 15 Aug 2025 22:55:52 +0000 asID: 8069 IP address blocks: 20.153.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:4c:35:5d:08:9d:14:ae:68:04:82:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 17 22:55:52 2025 GMT Not After : Aug 15 22:55:52 2025 GMT Subject: CN=c26046fb-846f-48fa-b96b-3bf8265a1cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2e:ea:44:59:2c:df:24:39:a9:bb:e1:6a:b3: a7:37:1b:04:81:09:73:e9:a2:f3:93:40:40:88:0c: c9:fa:94:88:fb:70:99:02:24:8e:b0:3e:cc:94:2f: 57:7a:e7:c0:bc:a0:6b:f6:76:f1:8d:46:ff:39:35: a6:1c:f2:92:bc:bd:b6:47:15:94:f1:6a:56:e8:7b: d6:a5:ad:34:b4:43:53:e4:ab:0a:d3:74:30:da:b8: 8f:f7:d9:66:df:c3:eb:52:5b:da:13:a8:13:a3:9d: 09:59:77:aa:81:94:2a:d1:65:d3:e4:6f:e5:84:8c: 9f:45:f2:5e:32:1f:71:88:ef:bd:35:a4:de:f2:31: f3:4d:a4:1d:1a:1d:cc:e9:63:57:fd:2a:3a:a7:29: eb:2c:c2:2a:93:d9:38:83:64:7f:de:e4:ca:ca:ca: 3d:52:a1:e6:ec:c6:c3:b8:52:0a:fc:58:02:81:2d: a9:46:58:01:85:94:a0:a9:9b:69:e8:89:ed:70:d4: 8f:34:b5:8d:1d:ea:be:e2:dd:83:f4:ca:21:91:44: 01:46:52:18:78:69:53:e0:7d:14:78:9e:36:d5:6f: 2d:f6:6b:cd:77:0f:d6:13:61:dd:bb:7c:c9:43:71: 5f:52:df:0b:02:5c:78:4c:b5:69:01:88:f2:83:71: e8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5A:65:81:3F:71:52:AC:63:8A:58:1E:A5:D4:2F:60:24:DC:3F:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3eef707b-8fc4-3ee2-b4b2-5ce43ae2d1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:63:66:06:ba:dd:d9:76:d1:c7:0c:df:35:3e:68:49:b2:95: 7b:db:ff:28:08:c0:cf:a6:f6:31:66:a5:e8:06:9b:c6:42:71: a0:d9:fc:0c:08:7a:d9:12:d9:63:30:c9:72:1e:91:4d:e2:b8: 52:43:fe:09:59:52:7a:9d:c7:01:41:4a:8f:ff:16:f6:66:61: b4:c2:cf:46:a8:b7:95:7c:5b:bd:01:6d:36:f9:08:be:3a:8a: ed:47:56:f2:d1:ce:49:c0:8a:02:c3:3b:8a:8d:6e:4e:43:e3: 37:f6:6e:34:af:e6:c3:4d:63:fb:b7:ea:82:42:75:f0:a7:14: c1:79:cc:86:b2:32:37:ba:bd:ad:a1:76:90:ca:b3:2c:d4:84: d1:c1:ee:94:be:08:da:8b:a6:80:ae:22:ef:7e:6a:d7:e5:7c: 08:ae:cb:a6:22:63:1f:99:87:49:04:1e:3e:94:8a:c7:a0:69: a7:c7:76:cf:f0:e9:5d:8d:18:b2:00:08:13:5a:59:74:61:a9: f1:81:5e:63:1d:fc:ca:23:32:50:0d:b9:98:a3:cf:74:2d:2d: ce:5b:74:75:86:cd:98:05:12:f5:69:56:7d:59:a7:07:41:a1: 41:5a:af:19:7c:b5:b4:4d:0b:5b:38:71:e7:98:c2:66:ab:39: 55:d8:f8:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnjTDVdCJ0UrmgEgjowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNzIyNTU1MloXDTI1MDgxNTIyNTU1MlowLzEtMCsGA1UEAxMk YzI2MDQ2ZmItODQ2Zi00OGZhLWI5NmItM2JmODI2NWExY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy7qRFks3yQ5qbvharOnNxsEgQlz6aLzk0BA iAzJ+pSI+3CZAiSOsD7MlC9XeufAvKBr9nbxjUb/OTWmHPKSvL22RxWU8WpW6HvW pa00tENT5KsK03Qw2riP99lm38PrUlvaE6gTo50JWXeqgZQq0WXT5G/lhIyfRfJe Mh9xiO+9NaTe8jHzTaQdGh3M6WNX/So6pynrLMIqk9k4g2R/3uTKyso9UqHm7MbD uFIK/FgCgS2pRlgBhZSgqZtp6IntcNSPNLWNHeq+4t2D9MohkUQBRlIYeGlT4H0U eJ421W8t9mvNdw/WE2Hdu3zJQ3FfUt8LAlx4TLVpAYjyg3HoHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERaZYE/cVKsY4pYHqXUL2Ak3D+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2VlZjcwN2ItOGZjNC0z ZWUyLWI0YjItNWNlNDNhZTJkMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJjZga63dl20ccM3zU+aEmylXvb/ygIwM+m9jFmpegGm8ZCcaDZ/AwI etkS2WMwyXIekU3iuFJD/glZUnqdxwFBSo//FvZmYbTCz0aot5V8W70BbTb5CL46 iu1HVvLRzknAigLDO4qNbk5D4zf2bjSv5sNNY/u36oJCdfCnFMF5zIayMje6va2h dpDKsyzUhNHB7pS+CNqLpoCuIu9+atflfAiuy6YiYx+Zh0kEHj6UisegaafHds/w 6V2NGLIACBNaWXRhqfGBXmMd/MojMlANuZijz3QtLc5bdHWGzZgFEvVpVn1ZpwdB oUFarxl8tbRNC1s4ceeYwmarOVXY+II= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:49 2025 by rpki-client