$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/582c9230-96ab-3e98-b9e4-388350b12133.roa File: 582c9230-96ab-3e98-b9e4-388350b12133.roa (raw, json) Hash identifier: Q38rC1zExVkXgenoBgk5IAuZ/Z04bRR1v8otFRM1hfs= Subject key identifier: A6:05:0F:78:E4:F9:D9:54:A0:6B:F3:BB:11:41:87:99:C5:84:B4:B1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849E34C382817E8C128736AEB00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/582c9230-96ab-3e98-b9e4-388350b12133.roa Signing time: Sat 17 May 2025 22:55:54 +0000 ROA not before: Sat 17 May 2025 22:55:54 +0000 ROA not after: Fri 15 Aug 2025 22:55:54 +0000 asID: 8069 IP address blocks: 20.153.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:4c:38:28:17:e8:c1:28:73:6a:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 17 22:55:54 2025 GMT Not After : Aug 15 22:55:54 2025 GMT Subject: CN=2482f292-b7ab-4512-9a7c-90303fa01171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:66:cf:04:7b:44:3d:23:a3:66:2b:68:88: ff:5b:07:24:6e:f5:05:db:b9:08:06:32:5d:cc:d5: f4:5a:01:81:79:6b:2d:21:28:3f:c8:3f:77:5e:48: 27:68:ff:d3:46:ab:37:79:b7:87:61:c4:9d:a3:22: 91:21:e5:4f:03:94:0e:a8:68:5d:bd:94:a4:65:1e: 93:f8:a5:2f:22:38:4e:a0:e0:6c:aa:e3:16:3d:f0: 2b:a8:e1:bd:6e:3a:50:46:3e:be:8e:a5:5e:ca:df: 73:1a:7e:92:75:17:8e:ec:29:0c:30:ce:4d:65:ea: 97:a5:b0:c0:f6:08:6c:ec:be:75:a3:db:db:f2:a1: cf:8a:fb:1d:f9:6c:57:67:55:47:6d:20:5d:d2:da: 5c:83:ed:a4:a6:af:3a:11:dc:ec:4b:94:4c:68:19: 4b:f6:29:8c:16:dd:e2:7e:c0:32:9f:ce:8f:b3:a7: 03:c5:54:96:21:10:08:d6:05:05:ec:5c:5d:b2:d8: b2:ff:0c:3d:0a:f8:a7:dd:58:cd:fe:35:b2:10:10: 79:23:c2:0d:ef:79:b6:90:01:68:b7:bf:b3:6e:ae: d3:4f:c7:9d:a3:2d:15:f6:0d:0a:27:9e:3d:9f:34: a7:be:64:4c:90:80:ee:44:84:10:4c:dc:f0:85:3d: 6b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:05:0F:78:E4:F9:D9:54:A0:6B:F3:BB:11:41:87:99:C5:84:B4:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/582c9230-96ab-3e98-b9e4-388350b12133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:41:b9:33:10:7c:e4:21:0e:58:f7:56:40:b0:f0:f5:55:e8: 10:63:22:3d:8e:93:51:07:cc:8d:44:4f:7b:ba:5e:28:80:5f: 2d:64:98:58:6b:53:7c:cf:70:65:18:96:6a:d4:c6:2a:49:07: 93:59:a4:58:ea:4c:a2:d4:2f:2c:6f:ad:18:a5:62:7a:b1:a9: 5f:e5:53:2d:91:b8:6d:83:80:2b:28:6c:09:cd:8a:ba:08:b9: 0a:4f:2c:a1:15:e0:00:4e:48:91:e3:ea:19:53:60:8a:ac:39: 45:e4:11:81:5b:83:14:e3:af:a3:d3:64:be:ba:f2:cb:e4:cb: 7c:28:c0:e4:21:39:dc:a6:f5:86:7c:d2:28:6c:05:6b:2e:e7: c2:85:b7:2a:f9:bd:67:06:35:e3:1f:b3:eb:b9:87:a2:fb:cc: f0:77:4f:f0:08:f2:77:06:34:af:39:38:92:e3:e5:0d:97:d0: 63:69:ba:a2:59:d1:b8:0a:41:eb:ad:d0:e9:64:dc:b4:e4:8b: d4:d6:f4:b7:d1:a6:5c:56:ff:52:d4:68:47:b2:60:bf:07:a5: 05:1b:cf:52:40:b6:f6:92:e8:9b:3c:02:f3:18:24:46:c3:2b: 92:d5:03:fe:4b:41:fc:42:bf:70:20:ac:7a:a4:4d:db:83:40: f8:6e:28:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnjTDgoF+jBKHNq6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNzIyNTU1NFoXDTI1MDgxNTIyNTU1NFowLzEtMCsGA1UEAxMk MjQ4MmYyOTItYjdhYi00NTEyLTlhN2MtOTAzMDNmYTAxMTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx5mzwR7RD0jo2YraIj/WwckbvUF27kIBjJd zNX0WgGBeWstISg/yD93XkgnaP/TRqs3ebeHYcSdoyKRIeVPA5QOqGhdvZSkZR6T +KUvIjhOoOBsquMWPfArqOG9bjpQRj6+jqVeyt9zGn6SdReO7CkMMM5NZeqXpbDA 9ghs7L51o9vb8qHPivsd+WxXZ1VHbSBd0tpcg+2kpq86EdzsS5RMaBlL9imMFt3i fsAyn86Ps6cDxVSWIRAI1gUF7Fxdstiy/ww9Cvin3VjN/jWyEBB5I8IN73m2kAFo t7+zbq7TT8edoy0V9g0KJ549nzSnvmRMkIDuRIQQTNzwhT1r3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYFD3jk+dlUoGvzuxFBh5nFhLSxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTgyYzkyMzAtOTZhYi0z ZTk4LWI5ZTQtMzg4MzUwYjEyMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVBuTMQfOQhDlj3VkCw8PVV6BBjIj2Ok1EHzI1ET3u6XiiAXy1kmFhr U3zPcGUYlmrUxipJB5NZpFjqTKLULyxvrRilYnqxqV/lUy2RuG2DgCsobAnNiroI uQpPLKEV4ABOSJHj6hlTYIqsOUXkEYFbgxTjr6PTZL668svky3wowOQhOdym9YZ8 0ihsBWsu58KFtyr5vWcGNeMfs+u5h6L7zPB3T/AI8ncGNK85OJLj5Q2X0GNpuqJZ 0bgKQeut0Olk3LTki9TW9LfRplxW/1LUaEeyYL8HpQUbz1JAtvaS6Js8AvMYJEbD K5LVA/5LQfxCv3AgrHqkTduDQPhuKDE= -----END CERTIFICATE-----Generated at Sun Jun 15 17:34:52 2025 by rpki-client