$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa File: 6986273c-343b-39c2-9dd1-bb8ca363c568.roa (raw, json) Hash identifier: +sv8/Ov1WH79J2hP/k+2Dg0Xq3uUjKbp6UkzCmUMjhs= Subject key identifier: D8:8A:1F:BC:F6:63:EE:79:AF:8B:98:04:8F:8A:67:9C:A8:CC:DA:60 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A15CA945F49EF654305773D80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa Signing time: Thu 05 Jun 2025 01:00:51 +0000 ROA not before: Thu 05 Jun 2025 01:00:51 +0000 ROA not after: Wed 03 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 40.87.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:ca:94:5f:49:ef:65:43:05:77:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 5 01:00:51 2025 GMT Not After : Sep 3 01:00:51 2025 GMT Subject: CN=9f774af9-db76-445f-b774-02f657720775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:06:69:e0:d2:1a:2f:c4:af:db:d3:c4:df:ce: f4:15:b8:52:d4:b3:b6:3a:de:60:83:3a:06:3e:4c: ce:6d:61:04:99:3e:bb:a1:bd:bb:d3:40:b8:30:a2: cd:60:ca:68:e4:4e:df:55:1f:05:57:37:2e:c9:98: 17:b8:3c:61:71:89:8d:ef:c7:4a:3c:e0:ec:ae:1e: f7:fb:c2:f0:4f:c7:c0:8e:a9:15:9d:b1:64:83:e7: ae:f0:bf:21:ed:28:1c:c0:49:ab:c7:cf:8c:e3:b4: 76:8a:11:02:62:4b:8c:8f:0e:ac:51:7f:6a:42:d5: 59:46:f0:0f:19:18:7a:ca:39:ba:d8:ba:b3:16:e6: 2f:cd:c3:83:e1:09:f6:8c:46:04:b4:04:db:ac:a8: 93:6d:70:8c:7d:0c:14:22:2b:eb:5d:a0:4b:de:3c: 0c:31:b5:ea:eb:74:e8:89:b9:79:1f:d2:f6:99:1d: 23:24:c3:c5:45:a2:bc:01:b7:f1:a2:27:a9:ea:6b: 2b:0b:96:22:f0:62:0a:cc:88:ee:d0:d1:7f:ad:58: 09:53:ab:01:ba:51:1e:4d:ac:70:4f:b1:ce:35:3a: c8:f0:04:d8:09:01:51:73:a9:a8:bb:fb:f1:29:ba: c1:62:a0:9c:bf:0d:af:f2:50:68:0d:2c:0b:fd:81: 05:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8A:1F:BC:F6:63:EE:79:AF:8B:98:04:8F:8A:67:9C:A8:CC:DA:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.87.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:5e:b3:70:75:00:72:d5:9f:46:21:74:8f:78:3e:ca:22:92: e6:06:d0:70:5a:08:46:9a:44:fe:08:66:86:3b:89:d1:5e:8e: 74:fa:f1:d8:26:a8:23:20:b3:b3:4a:9e:2b:98:c3:0a:37:0f: ca:7c:e3:26:3d:2c:fb:6b:67:7a:94:c6:8f:fc:48:91:20:e7: f4:61:7d:b9:9b:9a:f8:45:01:60:d0:6e:11:09:09:47:2b:5b: 32:ec:9c:da:a8:62:39:e0:8b:02:01:15:95:0b:7c:72:0e:71: 84:e2:db:12:5b:8b:14:59:a3:65:4d:02:11:b7:05:7d:0f:4f: 63:53:0b:c1:0f:0d:e4:29:ee:b1:ca:b7:c8:7c:43:46:16:90: 3d:d8:e8:83:d2:a0:4e:8d:6e:df:9a:82:53:97:35:38:9f:e3: 98:4b:71:f4:4a:96:39:51:8d:f3:79:4e:47:12:4c:c7:3f:aa: eb:77:d2:73:44:e3:b0:dc:53:b1:08:91:d2:09:ea:8d:ed:a2: 99:14:d7:d5:86:31:e5:2e:46:5b:43:27:25:03:a2:8b:6c:cf: 98:74:0f:8a:9d:8f:da:df:38:93:53:bc:db:82:0d:2a:c6:57: 40:b6:6d:dd:0e:de:da:46:3c:a2:4b:89:24:9c:e5:28:52:8d: 4e:45:49:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoVypRfSe9lQwV3PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNTAxMDA1MVoXDTI1MDkwMzAxMDA1MVowLzEtMCsGA1UEAxMk OWY3NzRhZjktZGI3Ni00NDVmLWI3NzQtMDJmNjU3NzIwNzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQZp4NIaL8Sv29PE3870FbhS1LO2Ot5ggzoG PkzObWEEmT67ob2700C4MKLNYMpo5E7fVR8FVzcuyZgXuDxhcYmN78dKPODsrh73 +8LwT8fAjqkVnbFkg+eu8L8h7SgcwEmrx8+M47R2ihECYkuMjw6sUX9qQtVZRvAP GRh6yjm62LqzFuYvzcOD4Qn2jEYEtATbrKiTbXCMfQwUIivrXaBL3jwMMbXq63To ibl5H9L2mR0jJMPFRaK8Abfxoiep6msrC5Yi8GIKzIju0NF/rVgJU6sBulEeTaxw T7HONTrI8ATYCQFRc6mou/vxKbrBYqCcvw2v8lBoDSwL/YEFnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiKH7z2Y+55r4uYBI+KZ5yozNpgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjk4NjI3M2MtMzQzYi0z OWMyLTlkZDEtYmI4Y2EzNjNjNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKFcnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRes3B1AHLVn0YhdI94PsoikuYG0HBaCEaaRP4IZoY7idFejnT68dgm qCMgs7NKniuYwwo3D8p84yY9LPtrZ3qUxo/8SJEg5/RhfbmbmvhFAWDQbhEJCUcr WzLsnNqoYjngiwIBFZULfHIOcYTi2xJbixRZo2VNAhG3BX0PT2NTC8EPDeQp7rHK t8h8Q0YWkD3Y6IPSoE6Nbt+aglOXNTif45hLcfRKljlRjfN5TkcSTMc/qut30nNE 47DcU7EIkdIJ6o3topkU19WGMeUuRltDJyUDootsz5h0D4qdj9rfOJNTvNuCDSrG V0C2bd0O3tpGPKJLiSSc5ShSjU5FSQ8= -----END CERTIFICATE-----Generated at Sun Jun 15 16:23:06 2025 by rpki-client