$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c349633-601c-3ce2-8871-3815903a32e1.roa File: 5c349633-601c-3ce2-8871-3815903a32e1.roa (raw, json) Hash identifier: X1ZhYooabqIBKvaSDainEsdvD4xHr+9yZU/Ns3TOg20= Subject key identifier: 03:D7:FF:C0:34:3B:90:EA:82:56:29:57:F6:98:2E:BE:A0:F9:F6:C6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849FE5AB4A071F26E2BE17F8180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c349633-601c-3ce2-8871-3815903a32e1.roa Signing time: Tue 27 May 2025 15:31:54 +0000 ROA not before: Tue 27 May 2025 15:31:54 +0000 ROA not after: Mon 25 Aug 2025 15:31:54 +0000 asID: 8069 IP address blocks: 20.153.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:5a:b4:a0:71:f2:6e:2b:e1:7f:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 27 15:31:54 2025 GMT Not After : Aug 25 15:31:54 2025 GMT Subject: CN=dbe661c9-4b55-492b-a339-3496f552af31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:66:33:73:be:3e:e0:23:a6:72:3a:c1:41: aa:eb:9c:7c:5c:62:41:7b:bb:fd:41:af:c2:7a:40: 56:f0:b6:e5:d0:46:9f:db:8b:23:57:89:00:c7:a6: 69:79:94:3d:d1:f9:19:28:65:fd:8f:87:c0:ba:80: c2:80:e3:bf:30:c4:b0:73:d5:26:da:a4:e4:de:86: e0:d1:65:e2:09:21:83:33:e5:f9:95:2f:3c:8d:d2: 09:d9:f8:ab:fc:50:7e:32:bd:51:6c:c0:30:28:47: 3b:f4:02:dd:17:5d:b2:af:34:18:8c:56:14:be:94: 7c:94:54:fc:9d:88:5e:56:05:01:be:23:ab:64:ca: db:9b:87:8c:48:62:5a:5d:3b:33:a3:8c:fb:bb:c8: 05:fd:58:c6:57:06:e9:93:71:85:56:87:b9:52:88: a8:de:2e:6f:5a:ed:ef:0d:eb:1a:15:61:a8:3b:e8: 6e:61:85:5e:69:15:48:69:fb:16:8a:f0:0a:10:0e: 5f:e1:2f:f7:3b:dd:ca:3e:c4:65:72:ba:69:16:d8: 29:23:83:34:5c:1b:11:4f:f5:ab:6c:ec:5d:64:0a: 35:db:aa:8d:20:79:57:3f:31:58:b9:17:82:a9:9f: 25:69:9f:c8:43:e3:ed:f7:8d:24:82:95:0f:d4:9d: 44:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D7:FF:C0:34:3B:90:EA:82:56:29:57:F6:98:2E:BE:A0:F9:F6:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5c349633-601c-3ce2-8871-3815903a32e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:3a:90:05:89:db:36:c6:08:bf:ef:f4:5d:b3:d8:b1:50:ef: 4a:24:de:af:87:a4:60:e3:52:30:4e:49:36:1f:5e:3b:a2:bc: df:86:73:68:ac:ce:72:16:ad:ed:43:c0:b3:ef:1d:ed:01:3a: ed:c3:1a:8f:41:73:ac:30:46:12:bb:f8:2a:7d:81:96:34:50: 6a:fb:b9:ea:98:5b:db:ba:31:16:48:09:85:13:64:f6:cd:3e: 66:ae:68:c2:08:b8:3b:a5:97:74:e2:88:38:5b:98:a7:7f:dd: 54:f2:13:23:6c:7f:30:2b:f0:4f:da:23:a9:b2:58:6d:24:fc: a0:f9:6a:8b:9a:86:f2:9c:0f:89:64:14:e2:6b:5a:72:9f:a5: ea:d0:99:80:bb:41:a2:63:06:4e:b7:0e:17:bc:94:92:0c:07: 52:bf:93:50:0b:77:ad:d1:25:20:96:fc:aa:0a:6f:53:5e:cb: 37:7d:82:de:07:a0:c8:b7:36:f9:a8:2b:f4:5d:fd:9a:d4:e6: 30:fa:6a:01:0b:dc:59:62:0b:e3:35:7c:92:d4:a0:99:7c:ca: c9:54:0a:fc:f3:d5:2d:40:8b:e1:39:f6:21:65:88:66:12:1b: f0:05:32:bf:cb:cc:03:61:d9:e7:cb:2b:6c:b7:e8:6d:51:f7: 72:01:ed:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+WrSgcfJuK+F/gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUyNzE1MzE1NFoXDTI1MDgyNTE1MzE1NFowLzEtMCsGA1UEAxMk ZGJlNjYxYzktNGI1NS00OTJiLWEzMzktMzQ5NmY1NTJhZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwadmM3O+PuAjpnI6wUGq65x8XGJBe7v9Qa/C ekBW8Lbl0Eaf24sjV4kAx6ZpeZQ90fkZKGX9j4fAuoDCgOO/MMSwc9Um2qTk3obg 0WXiCSGDM+X5lS88jdIJ2fir/FB+Mr1RbMAwKEc79ALdF12yrzQYjFYUvpR8lFT8 nYheVgUBviOrZMrbm4eMSGJaXTszo4z7u8gF/VjGVwbpk3GFVoe5Uoio3i5vWu3v DesaFWGoO+huYYVeaRVIafsWivAKEA5f4S/3O93KPsRlcrppFtgpI4M0XBsRT/Wr bOxdZAo126qNIHlXPzFYuReCqZ8laZ/IQ+Pt940kgpUP1J1EfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPX/8A0O5DqglYpV/aYLr6g+fbGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWMzNDk2MzMtNjAxYy0z Y2UyLTg4NzEtMzgxNTkwM2EzMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ86kAWJ2zbGCL/v9F2z2LFQ70ok3q+HpGDjUjBOSTYfXjuivN+Gc2is znIWre1DwLPvHe0BOu3DGo9Bc6wwRhK7+Cp9gZY0UGr7ueqYW9u6MRZICYUTZPbN PmauaMIIuDull3TiiDhbmKd/3VTyEyNsfzAr8E/aI6myWG0k/KD5aouahvKcD4lk FOJrWnKfperQmYC7QaJjBk63Dhe8lJIMB1K/k1ALd63RJSCW/KoKb1Neyzd9gt4H oMi3NvmoK/Rd/ZrU5jD6agEL3FliC+M1fJLUoJl8yslUCvzz1S1Ai+E59iFliGYS G/AFMr/LzANh2efLK2y36G1R93IB7dw= -----END CERTIFICATE-----Generated at Sun Jun 15 17:50:10 2025 by rpki-client