$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa File: 4e67d494-acab-3047-896e-83e082ee4263.roa (raw, json) Hash identifier: XITKVhN6/+jr5cyD3JU4owhbKfVMyfGu6Z7vMCqjnYc= Subject key identifier: 08:20:5F:87:D3:08:FC:7F:2D:03:1B:18:71:5E:F8:16:3A:6E:B5:AC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849D1654FF702BF0EB475B6CB80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 8069 IP address blocks: 20.157.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:4f:f7:02:bf:0e:b4:75:b6:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=6fd2ca59-b37c-45a8-a6f7-d088a81d2265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0d:8c:a5:27:7a:b5:db:be:d1:de:99:11:b9: 53:a7:6f:68:44:2b:f3:b4:8b:b7:79:ae:94:7f:de: 0e:08:2e:b6:6d:1d:a1:c3:55:e2:fe:41:83:02:4c: 7e:9d:89:0c:28:d7:cb:c5:fc:8a:9b:63:85:a8:62: 8b:f8:97:56:b2:4f:d0:44:20:fd:19:a8:78:4c:c4: 6d:a7:a5:2b:36:a2:10:a8:f6:89:b0:81:e0:f2:1f: eb:28:94:e4:7c:02:20:a0:02:fe:89:7a:3e:c8:3b: b5:8f:2f:c5:f9:e7:e7:e8:7a:e4:9c:a9:19:34:14: 87:e4:80:97:0f:4d:cf:af:2a:ff:ba:70:ca:5d:5f: 26:70:9c:cf:cb:c3:4e:1f:7d:d9:03:49:0a:de:26: dd:a4:a8:77:9c:a0:3a:80:7c:a8:47:4b:a1:be:9d: 3c:ea:e5:96:26:52:c0:20:32:12:bf:63:e7:72:d7: 11:8d:cd:9f:d1:d5:10:4a:20:58:e7:a8:e8:7c:3f: d5:e2:b6:61:2e:a6:c9:3e:c0:3d:50:46:6e:33:aa: 5d:71:7b:27:4e:61:01:ea:af:8d:37:84:07:95:91: ca:17:b3:8b:9d:51:2a:8e:6b:e9:6b:02:fe:97:16: 63:86:3a:c2:a0:ac:63:0c:38:f6:3f:24:e5:34:e0: bc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:20:5F:87:D3:08:FC:7F:2D:03:1B:18:71:5E:F8:16:3A:6E:B5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:7a:83:fa:ef:c9:c1:32:ca:47:af:3f:16:48:43:36:88:dd: 31:52:e0:ac:cc:2e:69:ec:88:c7:4d:b5:cc:07:83:6d:b6:4c: 2d:05:84:29:bf:4b:c0:26:fe:0c:08:1f:3e:15:d3:30:8d:45: 23:e6:be:80:ef:5e:62:55:0b:7a:81:9e:72:62:b7:2a:94:c8: 82:5b:ea:27:ef:f8:b3:ea:97:6f:a1:81:23:e4:8f:94:6f:d2: 25:e9:2d:7c:c2:26:68:71:4e:05:a7:1c:96:8a:4e:bc:27:cd: 79:e0:36:eb:20:ab:71:85:6b:e6:c8:ce:a2:bc:b6:37:78:d1: 44:d9:5e:65:ee:a2:da:c0:eb:f2:ba:d5:cc:ca:23:20:ca:3b: 38:4f:a5:9f:20:21:13:ca:cc:51:47:46:80:f8:bf:f1:bd:64: 61:79:82:e3:6c:7d:27:d6:ec:18:25:66:fd:10:88:c6:2d:83: a5:0a:7f:8d:8d:ff:f1:7a:b1:e4:2c:99:b7:cc:13:b9:91:60: 64:1d:a0:27:43:d7:6d:ae:e1:46:3f:4d:4c:a8:17:e3:5b:c2: a4:43:e7:51:bf:40:55:ed:30:af:00:b7:69:37:70:2b:c8:16: a9:95:42:53:aa:56:11:a9:08:85:90:69:d2:3d:bf:72:e2:f7: 94:39:c1:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZU/3Ar8OtHW2y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NmZkMmNhNTktYjM3Yy00NWE4LWE2ZjctZDA4OGE4MWQyMjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog2MpSd6tdu+0d6ZEblTp29oRCvztIu3ea6U f94OCC62bR2hw1Xi/kGDAkx+nYkMKNfLxfyKm2OFqGKL+JdWsk/QRCD9Gah4TMRt p6UrNqIQqPaJsIHg8h/rKJTkfAIgoAL+iXo+yDu1jy/F+efn6HrknKkZNBSH5ICX D03Pryr/unDKXV8mcJzPy8NOH33ZA0kK3ibdpKh3nKA6gHyoR0uhvp086uWWJlLA IDISv2PnctcRjc2f0dUQSiBY56jofD/V4rZhLqbJPsA9UEZuM6pdcXsnTmEB6q+N N4QHlZHKF7OLnVEqjmvpawL+lxZjhjrCoKxjDDj2PyTlNOC87QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAggX4fTCPx/LQMbGHFe+BY6brWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGU2N2Q0OTQtYWNhYi0z MDQ3LTg5NmUtODNlMDgyZWU0MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV6g/rvycEyykevPxZIQzaI3TFS4KzMLmnsiMdNtcwHg222TC0FhCm/ S8Am/gwIHz4V0zCNRSPmvoDvXmJVC3qBnnJityqUyIJb6ifv+LPql2+hgSPkj5Rv 0iXpLXzCJmhxTgWnHJaKTrwnzXngNusgq3GFa+bIzqK8tjd40UTZXmXuotrA6/K6 1czKIyDKOzhPpZ8gIRPKzFFHRoD4v/G9ZGF5guNsfSfW7BglZv0QiMYtg6UKf42N //F6seQsmbfME7mRYGQdoCdD122u4UY/TUyoF+NbwqRD51G/QFXtMK8At2k3cCvI FqmVQlOqVhGpCIWQadI9v3Li95Q5wUI= -----END CERTIFICATE-----Generated at Sun Jun 15 15:36:10 2025 by rpki-client