$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6b415d84-087f-3bcd-a5fa-d4eef9dc40c8.roa File: 6b415d84-087f-3bcd-a5fa-d4eef9dc40c8.roa (raw, json) Hash identifier: 2hqse+QK1sClM1tL1aMMa5XqVccaUQmxFAdmyHzrQ4M= Subject key identifier: B0:04:2C:A2:90:95:3A:E2:49:47:08:B9:75:59:E1:69:8B:4B:ED:90 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849E34C45244674F783DE0BD700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6b415d84-087f-3bcd-a5fa-d4eef9dc40c8.roa Signing time: Sat 17 May 2025 22:56:00 +0000 ROA not before: Sat 17 May 2025 22:56:00 +0000 ROA not after: Fri 15 Aug 2025 22:56:00 +0000 asID: 8069 IP address blocks: 20.153.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:4c:45:24:46:74:f7:83:de:0b:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 17 22:56:00 2025 GMT Not After : Aug 15 22:56:00 2025 GMT Subject: CN=1f85a261-ddf5-493f-a9ae-d1bcd1d61721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:f2:fd:d2:e5:9b:30:dd:84:95:23:99:5e: 1d:10:8e:80:ef:62:8c:71:4b:61:f6:26:07:50:9f: d9:9e:1d:cf:87:15:e2:8d:11:42:bf:2f:e1:73:76: 01:67:ca:6b:f9:0f:9a:c5:55:b9:fe:1a:c7:0f:e7: af:26:23:6b:9d:42:96:d7:3d:86:65:41:36:36:5a: ca:b2:53:7a:0b:ae:b1:c2:35:1d:2b:4a:33:a2:8f: e7:fe:49:ec:02:37:a2:6d:4f:bb:c5:eb:70:4e:55: e7:13:86:58:d5:1e:57:49:c0:36:bf:97:d2:45:d7: 18:f3:27:d8:86:aa:2e:18:85:90:8b:57:53:d7:fc: 65:a5:af:c7:43:3c:36:fb:f8:e2:25:8b:49:6d:51: cd:fc:1b:78:d2:92:c0:78:eb:d9:d2:fc:02:30:89: 81:d3:37:d9:c1:48:8c:f9:a4:47:4f:0e:b7:fe:6f: 4e:56:4d:6d:16:00:bc:79:da:af:0f:a8:81:41:94: ef:4b:35:fd:fd:93:f6:2d:a3:52:37:7c:f3:be:ff: fe:c8:95:fd:c1:06:b8:46:1c:59:25:94:6f:fc:d7: c5:32:01:d7:58:d8:d8:c7:00:c2:a1:82:0c:6f:6e: 82:73:e9:8e:46:b5:8b:3d:09:ec:32:db:10:7a:38: 3d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:04:2C:A2:90:95:3A:E2:49:47:08:B9:75:59:E1:69:8B:4B:ED:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6b415d84-087f-3bcd-a5fa-d4eef9dc40c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:ac:9f:f6:73:fd:2d:7c:23:7d:86:46:4a:d9:67:53:66:f3: 91:ba:c1:e1:c0:06:d0:3b:4b:44:66:ca:ee:b8:9c:a3:26:a2: ed:99:c2:68:cf:6a:79:24:36:e8:d7:48:68:61:ee:cf:6d:50: 29:b1:71:03:46:40:f8:80:98:01:a8:51:5f:df:43:d5:34:92: 2f:ba:ae:b4:af:e7:25:11:65:ca:33:ee:07:00:e0:7d:d3:fa: 11:d1:ec:db:b1:ec:a3:20:d0:30:ef:43:92:5a:05:87:16:0d: 73:f2:f4:3b:33:6a:f2:c9:1e:7d:7b:da:e6:83:59:bf:ce:9e: 3f:a3:24:00:09:e9:27:19:0d:2d:d5:b0:53:ea:9a:40:65:ab: 27:b8:03:90:ad:31:e8:7c:d8:d7:b0:42:a3:ff:15:d9:9a:61: 9f:0b:20:6e:b1:c8:20:78:14:b7:df:50:4e:4c:57:b7:b4:b5: e9:32:61:f9:c0:92:6d:e1:b2:97:9a:db:7e:ab:19:01:dc:29: dd:d1:9e:a8:3e:a8:e6:b7:87:a4:f7:78:03:0a:ad:78:9a:06: 66:fd:b2:f0:e0:d4:3a:db:90:09:8e:23:34:c6:3f:b6:23:4b: 75:ff:5f:e6:45:8a:f8:ac:16:d5:f2:12:d7:5b:b1:29:ca:80: f2:d3:9a:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnjTEUkRnT3g94L1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNzIyNTYwMFoXDTI1MDgxNTIyNTYwMFowLzEtMCsGA1UEAxMk MWY4NWEyNjEtZGRmNS00OTNmLWE5YWUtZDFiY2QxZDYxNzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB3y/dLlmzDdhJUjmV4dEI6A72KMcUth9iYH UJ/Znh3PhxXijRFCvy/hc3YBZ8pr+Q+axVW5/hrHD+evJiNrnUKW1z2GZUE2NlrK slN6C66xwjUdK0ozoo/n/knsAjeibU+7xetwTlXnE4ZY1R5XScA2v5fSRdcY8yfY hqouGIWQi1dT1/xlpa/HQzw2+/jiJYtJbVHN/Bt40pLAeOvZ0vwCMImB0zfZwUiM +aRHTw63/m9OVk1tFgC8edqvD6iBQZTvSzX9/ZP2LaNSN3zzvv/+yJX9wQa4RhxZ JZRv/NfFMgHXWNjYxwDCoYIMb26Cc+mORrWLPQnsMtsQejg9BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAELKKQlTriSUcIuXVZ4WmLS+2QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmI0MTVkODQtMDg3Zi0z YmNkLWE1ZmEtZDRlZWY5ZGM0MGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJm1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2sn/Zz/S18I32GRkrZZ1Nm85G6weHABtA7S0Rmyu64nKMmou2ZwmjP ankkNujXSGhh7s9tUCmxcQNGQPiAmAGoUV/fQ9U0ki+6rrSv5yURZcoz7gcA4H3T +hHR7Nux7KMg0DDvQ5JaBYcWDXPy9DszavLJHn172uaDWb/Onj+jJAAJ6ScZDS3V sFPqmkBlqye4A5CtMeh82NewQqP/FdmaYZ8LIG6xyCB4FLffUE5MV7e0tekyYfnA km3hspea236rGQHcKd3Rnqg+qOa3h6T3eAMKrXiaBmb9svDg1DrbkAmOIzTGP7Yj S3X/X+ZFivisFtXyEtdbsSnKgPLTmko= -----END CERTIFICATE-----Generated at Sun Jun 15 15:25:03 2025 by rpki-client