$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44e165bb-a59b-3f83-a408-caf7462b0f54.roa File: 44e165bb-a59b-3f83-a408-caf7462b0f54.roa (raw, json) Hash identifier: VoaXG+GRM/YaiA9aReaVd0h+YCmfK1S9CaqOY3LAs9I= Subject key identifier: FE:30:48:F6:63:D1:F6:3D:D5:95:2B:F8:11:C6:12:D2:31:E4:78:AD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A189564936DD905044623A950 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44e165bb-a59b-3f83-a408-caf7462b0f54.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.153.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:64:93:6d:d9:05:04:46:23:a9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=a1c7f7a8-9784-461e-8071-02019208ab0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d4:53:18:14:25:47:b1:55:fd:32:b4:e5:a7: dc:2b:4d:f6:e6:6c:6b:9f:be:9a:2a:49:c9:ce:b0: 79:ac:8a:ef:c8:e2:7f:4d:02:61:ed:5e:86:f7:35: ae:15:1f:2f:c5:b5:ee:67:a1:68:5e:f1:a3:a5:6f: a4:46:f4:4e:cd:a9:aa:6a:08:59:63:2c:df:9b:de: 02:5e:f6:28:96:7f:31:d7:51:95:c0:d8:a4:e8:88: 41:f4:13:4e:e7:51:01:50:94:8c:0b:d2:01:50:9d: 21:46:dc:19:91:10:55:57:47:fe:2a:20:7b:e2:09: c6:01:f5:cb:ce:29:4a:33:43:74:13:8c:49:5e:7a: 50:48:02:58:73:16:a6:c6:55:d8:4f:77:48:05:26: 0b:c6:0a:da:5c:f8:f2:f9:00:e7:12:72:48:7f:77: 00:aa:6a:e7:4a:e7:9e:d6:bd:70:d8:fa:95:04:6d: 3c:00:28:19:a2:08:d5:3a:ee:27:63:eb:f6:15:df: fd:be:f8:bb:82:22:3a:cc:56:79:ee:7e:1c:ac:21: 27:c3:8c:64:35:1d:5f:7d:46:31:9e:d1:e3:7f:47: e4:ac:07:fa:e7:94:2e:22:db:1c:d9:ce:3a:64:50: a5:76:e9:16:d1:81:c1:9d:a1:9f:0a:ce:a6:b9:9f: 0b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:30:48:F6:63:D1:F6:3D:D5:95:2B:F8:11:C6:12:D2:31:E4:78:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/44e165bb-a59b-3f83-a408-caf7462b0f54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:24:f4:ec:48:f7:e6:74:61:66:f7:26:ae:e8:e3:9a:bc:9e: a0:50:1b:6a:96:01:37:c4:4d:36:96:51:d4:16:ab:f4:a1:80: 13:99:de:43:d2:38:89:f9:37:4d:08:ee:ea:08:b4:00:20:5d: 01:e7:89:2e:5a:43:2e:fd:17:7d:8d:20:4d:12:4a:ab:a7:f5: 0e:26:ec:f9:f8:b8:49:e0:90:f8:5a:7e:cb:b3:e8:bf:e9:ad: 1f:be:d0:43:ff:6a:18:be:e6:fc:8e:c7:cc:72:76:bb:b0:a6: d3:54:45:cd:61:62:2c:32:f9:c7:cc:ce:09:dc:bb:9d:3b:e3: 98:79:77:c3:97:38:e2:4f:89:14:99:a6:4c:fb:56:ef:57:ee: 47:d7:da:84:13:a5:e0:75:e4:d8:b3:37:6e:30:f7:56:ee:f3: 92:20:51:cd:3e:b3:0c:6d:ad:0d:b7:5c:a8:73:0b:e6:a9:61: dd:66:d4:d5:ed:9c:b0:dd:6c:91:20:b9:ec:1e:02:b4:f9:ed: 49:23:ba:f8:a2:f3:05:37:6f:18:38:c2:bc:a4:b5:78:81:e2: 77:27:4f:5d:b0:9f:9c:2f:32:bd:46:9c:a2:c9:22:b6:8b:d9: 14:72:93:2a:9b:50:74:d8:33:d3:d6:6d:79:86:2a:ec:e7:74: 16:a3:14:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlWSTbdkFBEYjqVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk YTFjN2Y3YTgtOTc4NC00NjFlLTgwNzEtMDIwMTkyMDhhYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotRTGBQlR7FV/TK05afcK0325mxrn76aKknJ zrB5rIrvyOJ/TQJh7V6G9zWuFR8vxbXuZ6FoXvGjpW+kRvROzamqaghZYyzfm94C XvYoln8x11GVwNik6IhB9BNO51EBUJSMC9IBUJ0hRtwZkRBVV0f+KiB74gnGAfXL zilKM0N0E4xJXnpQSAJYcxamxlXYT3dIBSYLxgraXPjy+QDnEnJIf3cAqmrnSuee 1r1w2PqVBG08ACgZogjVOu4nY+v2Fd/9vvi7giI6zFZ57n4crCEnw4xkNR1ffUYx ntHjf0fkrAf655QuItsc2c46ZFCldukW0YHBnaGfCs6muZ8L9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4wSPZj0fY91ZUr+BHGEtIx5HitMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDRlMTY1YmItYTU5Yi0z ZjgzLWE0MDgtY2FmNzQ2MmIwZjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEk9OxI9+Z0YWb3Jq7o45q8nqBQG2qWATfETTaWUdQWq/ShgBOZ3kPS OIn5N00I7uoItAAgXQHniS5aQy79F32NIE0SSqun9Q4m7Pn4uEngkPhafsuz6L/p rR++0EP/ahi+5vyOx8xydruwptNURc1hYiwy+cfMzgncu50745h5d8OXOOJPiRSZ pkz7Vu9X7kfX2oQTpeB15NizN24w91bu85IgUc0+swxtrQ23XKhzC+apYd1m1NXt nLDdbJEgueweArT57Ukjuvii8wU3bxg4wryktXiB4ncnT12wn5wvMr1GnKLJIraL 2RRykyqbUHTYM9PWbXmGKuzndBajFIU= -----END CERTIFICATE-----Generated at Sun Jun 15 15:31:15 2025 by rpki-client