$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa File: 5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa (raw, json) Hash identifier: wk4f8eApHRV6csFCoJU1Ceua1MCSrxZIyzaQOJ20mTk= Subject key identifier: 2F:3E:AF:C6:0B:ED:99:F2:92:79:38:CE:DF:7D:0B:CA:59:93:2D:84 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A15CA93E6671C1F1525FBFB00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa Signing time: Thu 05 Jun 2025 01:00:51 +0000 ROA not before: Thu 05 Jun 2025 01:00:51 +0000 ROA not after: Wed 03 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.153.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:ca:93:e6:67:1c:1f:15:25:fb:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 5 01:00:51 2025 GMT Not After : Sep 3 01:00:51 2025 GMT Subject: CN=efb32fb3-50bc-4404-910a-8b4d8b805b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:74:92:fb:e5:51:34:d7:4b:3e:4b:f3:17: 14:46:9f:57:48:fe:f8:39:cf:bc:a1:74:d1:92:40: d4:03:09:ad:21:2b:be:fc:44:70:3a:ee:8b:d3:12: 96:c9:c0:cf:87:ae:4d:fb:47:7d:d2:01:c0:05:d9: 8d:bf:10:34:4f:a6:51:c3:48:d5:8d:e3:86:61:ae: 71:7b:2a:8b:e1:c8:09:c9:cc:1c:c6:aa:b0:76:44: 32:4e:78:32:ac:af:9d:48:4d:af:50:4c:34:dd:ef: b4:41:44:aa:af:b1:a1:db:f7:4c:0a:6a:a2:63:76: 0b:b4:22:15:be:47:0d:e2:3c:db:4a:dd:71:1d:43: e8:0c:80:3c:7e:18:a7:54:4a:a2:d0:e1:b8:43:c7: b9:fb:b3:8a:74:96:70:93:01:a3:6b:50:ce:07:5f: e4:d8:65:82:30:db:0a:a2:88:2d:30:45:46:69:48: 16:65:b2:3c:55:26:73:ac:a2:7d:ce:9c:81:27:67: f8:23:4b:6a:f3:2f:aa:64:c1:e4:67:34:92:1e:7d: 18:f4:8c:90:cb:08:2b:0b:10:16:76:42:a1:00:42: 17:71:5b:fe:4a:8f:92:09:7a:8e:8f:f5:95:9d:67: 09:58:b4:cc:48:af:46:88:ea:b2:8c:51:6b:71:c4: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3E:AF:C6:0B:ED:99:F2:92:79:38:CE:DF:7D:0B:CA:59:93:2D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:9b:7f:b1:9e:19:e9:9b:cf:ca:05:77:8f:34:0a:f8:69:48: 6f:ea:32:2f:ac:89:1c:c9:fc:4a:18:42:b9:9d:75:42:5f:27: cf:1c:7b:bb:ff:7a:93:84:5f:0a:26:29:b1:1b:12:1e:6b:a1: 5a:0e:3a:14:cd:f9:0e:7e:54:96:66:e1:71:eb:de:57:28:23: e4:72:0f:92:72:38:da:c6:42:61:5e:ea:4d:4f:92:18:2d:80: 0c:9a:e2:43:0e:15:60:19:33:01:9a:26:8f:08:e5:92:9d:e8: 4b:4d:a2:14:46:a0:3f:bb:e6:2c:cc:7d:0f:b6:5b:a1:24:8a: d1:6c:fd:93:14:04:9d:ab:ed:5d:99:b6:68:19:ca:57:56:26: cd:56:c8:af:47:e5:6c:7a:21:e9:d3:cb:cc:5d:d9:5f:d2:cd: 66:c2:18:6c:d9:c3:70:ef:7f:c7:e6:8e:6c:06:e9:25:8b:f9: af:8f:c6:eb:b4:04:0b:40:3d:8b:21:18:fa:74:de:72:45:03: 70:53:af:5e:a8:e8:0a:2e:35:b9:bb:f7:e5:15:4c:c1:a9:a7: 52:72:3e:71:90:31:27:14:84:cf:c4:c3:9d:98:49:3d:0a:4a: 1a:d5:33:2e:b3:a8:d3:2f:1e:66:0b:ca:d8:16:db:58:68:58: 9e:3e:35:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoVypPmZxwfFSX7+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNTAxMDA1MVoXDTI1MDkwMzAxMDA1MVowLzEtMCsGA1UEAxMk ZWZiMzJmYjMtNTBiYy00NDA0LTkxMGEtOGI0ZDhiODA1Yjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOJ0kvvlUTTXSz5L8xcURp9XSP74Oc+8oXTR kkDUAwmtISu+/ERwOu6L0xKWycDPh65N+0d90gHABdmNvxA0T6ZRw0jVjeOGYa5x eyqL4cgJycwcxqqwdkQyTngyrK+dSE2vUEw03e+0QUSqr7Gh2/dMCmqiY3YLtCIV vkcN4jzbSt1xHUPoDIA8fhinVEqi0OG4Q8e5+7OKdJZwkwGja1DOB1/k2GWCMNsK oogtMEVGaUgWZbI8VSZzrKJ9zpyBJ2f4I0tq8y+qZMHkZzSSHn0Y9IyQywgrCxAW dkKhAEIXcVv+So+SCXqOj/WVnWcJWLTMSK9GiOqyjFFrccS0RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8+r8YL7Znyknk4zt99C8pZky2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWZiNTJkN2MtNzVkOC0z ZjhiLWIwMzMtNjVhNTM3NmM0MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWbf7GeGembz8oFd480CvhpSG/qMi+siRzJ/EoYQrmddUJfJ88ce7v/ epOEXwomKbEbEh5roVoOOhTN+Q5+VJZm4XHr3lcoI+RyD5JyONrGQmFe6k1Pkhgt gAya4kMOFWAZMwGaJo8I5ZKd6EtNohRGoD+75izMfQ+2W6EkitFs/ZMUBJ2r7V2Z tmgZyldWJs1WyK9H5Wx6IenTy8xd2V/SzWbCGGzZw3Dvf8fmjmwG6SWL+a+Pxuu0 BAtAPYshGPp03nJFA3BTr16o6AouNbm79+UVTMGpp1JyPnGQMScUhM/Ew52YST0K ShrVMy6zqNMvHmYLytgW21hoWJ4+NVQ= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:58 2025 by rpki-client