$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ae5e9b-00e9-3dfb-81c3-8d46e0b7e000.roa File: 49ae5e9b-00e9-3dfb-81c3-8d46e0b7e000.roa (raw, json) Hash identifier: yCbhoBe/+meeOI5PY7pzEvQC1l0F35zBlflA2t//i9c= Subject key identifier: 95:6E:2E:8C:47:7C:4C:AC:1C:5C:61:8F:D0:06:5F:42:B4:C9:F2:C9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849E34C3CC3B44B4DBCFCA297C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ae5e9b-00e9-3dfb-81c3-8d46e0b7e000.roa Signing time: Sat 17 May 2025 22:55:56 +0000 ROA not before: Sat 17 May 2025 22:55:56 +0000 ROA not after: Fri 15 Aug 2025 22:55:56 +0000 asID: 8069 IP address blocks: 20.153.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:4c:3c:c3:b4:4b:4d:bc:fc:a2:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 17 22:55:56 2025 GMT Not After : Aug 15 22:55:56 2025 GMT Subject: CN=77e31f4a-4214-4e1b-8ed1-288d6b53f640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9f:f4:77:7d:20:21:47:75:ed:69:b9:d2:0e: 71:ab:4c:87:c9:7b:ce:8a:64:2c:c0:4c:19:38:b5: 0d:a8:a6:bc:36:31:12:81:02:e7:c8:f8:40:bf:37: 10:d3:db:a5:45:2e:b1:f9:89:93:0f:fb:cf:6e:f8: d7:f4:e8:1a:59:47:c3:51:5e:5c:40:5c:47:78:23: c6:45:ab:88:9c:ef:bf:63:e6:c6:24:56:b2:4a:47: 74:ef:ff:0c:05:88:6b:7c:a5:7b:f7:73:c4:65:96: 4f:9e:53:7e:06:c7:7e:15:62:19:f9:d6:62:4f:36: 38:0d:10:7d:c4:1a:c5:44:ff:64:bb:41:76:8c:c6: 90:ab:ea:fc:80:cd:3b:6f:b7:09:58:e5:05:68:a1: b3:a9:e3:2c:2f:97:3c:c2:1f:19:9d:55:7f:cf:3d: 7c:4c:89:41:02:9f:0c:15:5e:f6:da:38:6a:e6:f4: 2a:7a:0a:07:5f:f5:ae:84:86:9f:cf:5c:5b:7c:36: 11:e1:4f:5e:d5:65:99:bd:0d:a7:c0:2d:50:9e:eb: f8:c3:ef:cf:1b:d9:3b:2e:9b:e4:90:7b:d1:15:ff: ca:b5:60:f0:68:8a:59:c3:f7:2e:2a:0b:ab:8a:5a: bf:0a:cf:b1:80:e3:86:b3:19:6b:4d:a0:40:52:52: 71:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6E:2E:8C:47:7C:4C:AC:1C:5C:61:8F:D0:06:5F:42:B4:C9:F2:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ae5e9b-00e9-3dfb-81c3-8d46e0b7e000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:62:17:81:f5:f4:d0:f6:ef:9a:29:58:de:bf:2c:0b:d9:6e: c0:73:e3:b5:67:d5:aa:c2:84:57:50:6e:5b:e2:77:6a:37:9f: a9:11:97:5d:e5:a8:b2:26:65:8a:f6:c1:d0:93:af:8c:9e:c7: a0:dd:62:c5:52:7c:c0:f5:c0:bf:22:bd:7e:fa:9f:68:da:a5: f8:7f:d4:f9:62:71:22:b5:de:83:91:75:8a:93:63:58:dc:6a: 59:76:4a:18:11:f3:c6:0c:b0:7e:15:0d:9c:01:68:17:d6:75: 3a:95:c1:0a:5b:06:6c:43:84:4e:58:8e:c0:89:35:0a:72:b2: 07:68:50:cc:ed:f8:97:51:66:b5:9a:20:d4:d7:df:df:6e:ac: ee:eb:a6:8e:ba:99:00:de:4e:cc:c7:9b:fb:a6:df:4e:c7:24: 9d:4d:5b:bc:db:19:ae:df:fd:0a:0b:d7:be:44:c6:7a:1d:c9: e1:d9:67:56:1e:7b:c0:5e:3f:81:d3:ce:59:0e:48:61:68:8b: ef:89:a0:50:2c:a7:90:d8:7c:e8:f8:be:9a:d5:2c:8d:d3:36: 81:72:0d:2f:e4:48:e6:57:9b:ea:ca:42:04:a4:ad:0d:3d:24: 45:69:de:29:3f:86:65:fe:14:3a:7f:b8:65:49:8c:19:33:d8: 37:ea:33:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnjTDzDtEtNvPyil8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNzIyNTU1NloXDTI1MDgxNTIyNTU1NlowLzEtMCsGA1UEAxMk NzdlMzFmNGEtNDIxNC00ZTFiLThlZDEtMjg4ZDZiNTNmNjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5/0d30gIUd17Wm50g5xq0yHyXvOimQswEwZ OLUNqKa8NjESgQLnyPhAvzcQ09ulRS6x+YmTD/vPbvjX9OgaWUfDUV5cQFxHeCPG RauInO+/Y+bGJFaySkd07/8MBYhrfKV793PEZZZPnlN+Bsd+FWIZ+dZiTzY4DRB9 xBrFRP9ku0F2jMaQq+r8gM07b7cJWOUFaKGzqeMsL5c8wh8ZnVV/zz18TIlBAp8M FV722jhq5vQqegoHX/WuhIafz1xbfDYR4U9e1WWZvQ2nwC1Qnuv4w+/PG9k7Lpvk kHvRFf/KtWDwaIpZw/cuKgurilq/Cs+xgOOGsxlrTaBAUlJxkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVuLoxHfEysHFxhj9AGX0K0yfLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDlhZTVlOWItMDBlOS0z ZGZiLTgxYzMtOGQ0NmUwYjdlMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdiF4H19ND275opWN6/LAvZbsBz47Vn1arChFdQblvid2o3n6kRl13l qLImZYr2wdCTr4yex6DdYsVSfMD1wL8ivX76n2japfh/1PlicSK13oORdYqTY1jc all2ShgR88YMsH4VDZwBaBfWdTqVwQpbBmxDhE5YjsCJNQpysgdoUMzt+JdRZrWa INTX399urO7rpo66mQDeTszHm/um307HJJ1NW7zbGa7f/QoL175ExnodyeHZZ1Ye e8BeP4HTzlkOSGFoi++JoFAsp5DYfOj4vprVLI3TNoFyDS/kSOZXm+rKQgSkrQ09 JEVp3ik/hmX+FDp/uGVJjBkz2DfqM6c= -----END CERTIFICATE-----Generated at Sun Jun 15 15:30:38 2025 by rpki-client