$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c7680dd-8697-3c50-8181-945c51777f91.roa File: 6c7680dd-8697-3c50-8181-945c51777f91.roa (raw, json) Hash identifier: 6Zxp7b/vzPeGuRyAWUQ2dXIqgkJqS18IjfG7R6vQs84= Subject key identifier: 3D:3B:45:EB:E5:EE:3F:E0:BB:E4:AF:A8:EB:2A:22:14:D1:25:3B:95 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858497C3EF20F52122C3CC5C6C280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c7680dd-8697-3c50-8181-945c51777f91.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 8069 IP address blocks: 20.153.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:f2:0f:52:12:2c:3c:c5:c6:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=8b87ba29-e80e-4452-b598-18d1019e2513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6f:a9:dc:35:bd:8e:ce:26:f5:ee:b2:29:0d: 79:92:aa:a0:a6:bb:99:26:99:c4:59:83:44:49:35: fb:1a:2d:6c:ff:f5:91:94:76:d4:6e:52:de:f5:81: 5a:c3:68:db:11:f3:b2:02:70:65:35:1c:8c:ec:9c: 00:08:30:33:ff:3a:c0:92:4d:05:c9:05:af:6b:49: b5:1a:11:40:10:60:fb:7b:fc:f9:5b:4d:97:e4:64: c0:6a:3d:5c:16:ad:74:04:80:c5:13:dc:a4:d4:d6: 90:c5:93:ea:bb:f2:db:51:1d:89:fc:7f:9f:20:64: b9:20:37:93:71:47:b6:d3:ef:22:0b:64:26:d9:bd: 19:1b:bc:ea:ac:c2:c8:bd:2b:f8:a0:5f:3d:72:37: 6c:78:0d:93:29:85:f4:82:d6:f4:49:5f:26:cc:09: 76:e4:0d:54:05:89:5a:d0:b2:58:44:28:80:2c:37: 90:6d:68:a5:9f:e1:c7:3b:ef:9a:5a:84:6b:ae:e3: 2c:ec:66:72:64:b7:12:95:42:c6:d6:e8:97:c1:24: 6c:2b:23:7e:8d:78:46:c5:af:f8:a8:6f:6e:dc:7c: aa:ad:cd:c4:14:e2:00:5c:6d:23:fb:d3:dd:ad:29: 18:f8:dd:01:1a:47:1e:44:15:77:54:ac:5f:45:a9: 8c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3B:45:EB:E5:EE:3F:E0:BB:E4:AF:A8:EB:2A:22:14:D1:25:3B:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6c7680dd-8697-3c50-8181-945c51777f91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:98:dd:ac:f0:a6:61:d7:63:36:ce:67:4d:25:f2:3a:5c:d2: 0e:5c:7c:a1:37:e3:de:34:ec:ce:9f:de:5b:3f:ab:4a:7f:2e: 12:9a:87:a0:46:33:c4:0b:c3:0e:d4:0c:68:37:84:c2:33:3e: 02:09:26:74:99:ff:04:9b:19:19:51:90:34:4d:d8:c5:46:8d: 15:37:11:49:54:d9:16:35:90:79:d2:66:f5:ec:e7:86:39:d5: b3:0a:c4:1c:46:c5:89:be:c6:52:93:fc:5a:0f:db:9a:b6:2f: e0:91:ee:67:10:08:54:a9:b1:36:06:8d:8e:30:ce:ef:01:b4: 77:db:51:2a:66:98:37:2e:76:90:1b:df:23:41:2f:ff:fe:92: e5:3c:39:11:57:9d:df:2a:27:3e:ee:01:7e:bd:a2:9e:cc:1d: d4:44:94:53:bc:f3:bc:4e:d2:5b:ce:83:40:67:bf:74:7c:66: 4d:cb:ba:54:b8:f1:d7:3a:5e:00:39:16:38:ad:91:6b:ad:fb: 03:29:4e:1c:62:02:bc:77:2e:4f:23:1b:56:1d:96:a5:d4:44: 4c:a2:71:bb:9e:9a:aa:c1:d9:1b:ce:78:77:ff:68:d5:8f:28: 57:fc:be:3b:ee:b8:8c:03:7d:a0:ec:2c:b5:cd:9f:c7:9e:a2: ed:9d:ea:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvIPUhIsPMXGwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk OGI4N2JhMjktZTgwZS00NDUyLWI1OTgtMThkMTAxOWUyNTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW+p3DW9js4m9e6yKQ15kqqgpruZJpnEWYNE STX7Gi1s//WRlHbUblLe9YFaw2jbEfOyAnBlNRyM7JwACDAz/zrAkk0FyQWva0m1 GhFAEGD7e/z5W02X5GTAaj1cFq10BIDFE9yk1NaQxZPqu/LbUR2J/H+fIGS5IDeT cUe20+8iC2Qm2b0ZG7zqrMLIvSv4oF89cjdseA2TKYX0gtb0SV8mzAl25A1UBYla 0LJYRCiALDeQbWiln+HHO++aWoRrruMs7GZyZLcSlULG1uiXwSRsKyN+jXhGxa/4 qG9u3Hyqrc3EFOIAXG0j+9PdrSkY+N0BGkceRBV3VKxfRamMQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD07Revl7j/gu+SvqOsqIhTRJTuVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmM3NjgwZGQtODY5Ny0z YzUwLTgxODEtOTQ1YzUxNzc3ZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSY3azwpmHXYzbOZ00l8jpc0g5cfKE349407M6f3ls/q0p/LhKah6BG M8QLww7UDGg3hMIzPgIJJnSZ/wSbGRlRkDRN2MVGjRU3EUlU2RY1kHnSZvXs54Y5 1bMKxBxGxYm+xlKT/FoP25q2L+CR7mcQCFSpsTYGjY4wzu8BtHfbUSpmmDcudpAb 3yNBL//+kuU8ORFXnd8qJz7uAX69op7MHdRElFO887xO0lvOg0Bnv3R8Zk3LulS4 8dc6XgA5FjitkWut+wMpThxiArx3Lk8jG1YdlqXUREyicbuemqrB2RvOeHf/aNWP KFf8vjvuuIwDfaDsLLXNn8eeou2d6gQ= -----END CERTIFICATE-----Generated at Sun Apr 27 05:44:23 2025 by rpki-client