$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa File: 49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa (raw, json) Hash identifier: KOAS2abGos89Ly+C3HH4YoKAYu+p3yJPRFC8eNCV+Ck= Subject key identifier: 28:AF:67:6D:FA:17:E7:5F:EA:03:9B:A0:1E:ED:1B:DA:17:AB:5E:D6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584954476C20885B492E89E3CA80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa Signing time: Thu 27 Mar 2025 17:25:38 +0000 ROA not before: Thu 27 Mar 2025 17:25:38 +0000 ROA not after: Wed 25 Jun 2025 17:25:38 +0000 asID: 8069 IP address blocks: 20.153.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:54:47:6c:20:88:5b:49:2e:89:e3:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 27 17:25:38 2025 GMT Not After : Jun 25 17:25:38 2025 GMT Subject: CN=79055d65-1c6d-4a73-912b-38e8623cca45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6d:70:65:58:39:ce:06:5e:c1:f1:27:0a:de: 2f:9e:8b:49:01:d8:5d:bb:f3:32:68:99:f4:35:3f: d1:da:a4:d6:d5:9c:7b:b2:34:20:b4:3b:c4:c6:e9: c0:04:17:77:2c:99:3c:82:de:54:4e:58:7c:bb:04: 3e:6f:23:a7:13:eb:93:bd:61:74:7f:23:98:8c:d1: 0f:4b:b9:34:a7:ce:e9:4d:44:df:8a:3c:ce:6b:01: 74:3e:c0:9a:59:7c:07:fc:6d:3f:db:4b:bb:44:17: 83:e2:88:93:01:7c:aa:57:06:72:39:c9:ee:e3:51: cb:81:4d:9c:88:eb:c4:bb:ee:e2:c6:1c:fd:62:42: 76:48:68:07:bd:db:7f:e1:7c:b4:8b:0e:7d:e4:19: 0c:b6:08:a9:b2:52:f4:5c:77:fb:2a:8d:36:22:43: e1:bd:57:63:2b:2b:17:69:d4:ac:ec:f4:ef:23:3c: c8:9b:5e:0c:df:62:56:5b:d2:82:8c:53:fd:e5:62: 59:b1:fc:b3:44:e2:36:17:68:19:8e:cc:02:c7:ea: 0a:36:df:c7:23:c1:96:65:85:e0:c2:f1:31:fd:28: 2b:b3:d1:ea:db:95:cd:42:5a:a4:ff:6d:b6:e6:cb: f0:6f:7c:0e:28:f9:a0:58:a4:ce:e8:45:2a:37:c5: 32:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AF:67:6D:FA:17:E7:5F:EA:03:9B:A0:1E:ED:1B:DA:17:AB:5E:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:54:5d:05:c7:e1:32:81:2e:08:5b:65:ac:de:fc:66:12:f3: 80:0d:e4:51:c8:a3:53:55:0e:e7:65:95:41:41:9b:2b:ad:de: 64:dc:af:af:c5:2e:14:02:d5:80:66:86:d1:3b:e0:8b:4e:80: ce:db:5e:30:71:5e:95:28:94:8d:ce:9e:c2:c4:69:64:09:39: a0:30:cf:41:2e:29:3f:61:ae:f0:bf:77:c6:44:0c:6f:f1:45: 33:90:83:46:ad:73:94:f6:48:05:61:a8:c4:25:84:8e:83:a4: b1:f2:98:b8:e8:16:70:6a:12:e3:ac:48:da:8b:71:ee:62:94: 0e:82:5c:2d:86:77:65:2b:17:30:01:e1:12:3b:4a:2c:1d:6e: eb:fe:f9:67:ff:e7:7e:b1:79:05:34:16:4c:1e:78:ce:da:71: 17:42:65:cf:cb:34:08:db:5d:11:d7:98:8e:e0:1a:6d:64:55: ca:04:10:92:39:82:d8:52:58:93:da:5f:7b:c1:fb:50:c6:0e: 20:d2:a5:34:03:8c:9a:e3:39:b2:8d:3f:c1:57:7b:b5:c2:e3: ee:9e:89:f8:8e:9a:a2:ca:33:de:f2:8d:6e:51:5f:16:5e:1d: 61:19:b1:9a:9c:f9:56:12:ef:cd:dd:f1:ff:5e:00:3d:5a:34: 31:2d:14:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElUR2wgiFtJLonjyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyNzE3MjUzOFoXDTI1MDYyNTE3MjUzOFowLzEtMCsGA1UEAxMk NzkwNTVkNjUtMWM2ZC00YTczLTkxMmItMzhlODYyM2NjYTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr21wZVg5zgZewfEnCt4vnotJAdhdu/MyaJn0 NT/R2qTW1Zx7sjQgtDvExunABBd3LJk8gt5UTlh8uwQ+byOnE+uTvWF0fyOYjNEP S7k0p87pTUTfijzOawF0PsCaWXwH/G0/20u7RBeD4oiTAXyqVwZyOcnu41HLgU2c iOvEu+7ixhz9YkJ2SGgHvdt/4Xy0iw595BkMtgipslL0XHf7Ko02IkPhvVdjKysX adSs7PTvIzzIm14M32JWW9KCjFP95WJZsfyzROI2F2gZjswCx+oKNt/HI8GWZYXg wvEx/Sgrs9Hq25XNQlqk/2225svwb3wOKPmgWKTO6EUqN8Uy2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCivZ236F+df6gOboB7tG9oXq17WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDllZjJlMmMtNzdlZi0z N2M5LWIzMjctMjRlOGVlMjBlZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFUXQXH4TKBLghbZaze/GYS84AN5FHIo1NVDudllUFBmyut3mTcr6/F LhQC1YBmhtE74ItOgM7bXjBxXpUolI3OnsLEaWQJOaAwz0EuKT9hrvC/d8ZEDG/x RTOQg0atc5T2SAVhqMQlhI6DpLHymLjoFnBqEuOsSNqLce5ilA6CXC2Gd2UrFzAB 4RI7Siwdbuv++Wf/536xeQU0FkweeM7acRdCZc/LNAjbXRHXmI7gGm1kVcoEEJI5 gthSWJPaX3vB+1DGDiDSpTQDjJrjObKNP8FXe7XC4+6eifiOmqLKM97yjW5RXxZe HWEZsZqc+VYS783d8f9eAD1aNDEtFLk= -----END CERTIFICATE-----Generated at Sun Apr 27 06:38:15 2025 by rpki-client