$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823301fc-cddb-3a97-977d-56de970cf5fa.roa File: 823301fc-cddb-3a97-977d-56de970cf5fa.roa (raw, json) Hash identifier: 9cqc/4OYJnnzytAsJZQP8aTN0ES8RzrjyGI5vGMHYaA= Subject key identifier: 82:4F:34:30:7D:69:8B:E6:85:60:FD:FA:B7:D8:2D:54:88:C4:BF:07 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858497C3EF25CDBF373BFAC156E80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823301fc-cddb-3a97-977d-56de970cf5fa.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 8069 IP address blocks: 20.153.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:f2:5c:db:f3:73:bf:ac:15:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=92f238f6-d494-4100-89be-faee468e7d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c7:78:88:89:42:ea:41:ef:70:46:b8:50:81: 48:eb:7c:d8:76:61:0a:30:93:6c:52:2c:62:3b:57: 79:0a:15:25:38:d4:c5:fc:4a:05:32:17:21:2a:68: 12:0a:ea:65:8b:ab:0e:14:1f:76:28:99:0e:00:2c: 32:b8:8c:f9:90:83:d1:01:81:0a:70:e4:25:0e:03: ea:e8:fa:0a:22:99:22:ec:9d:86:5e:37:fe:fc:52: 7b:63:96:f5:4c:98:de:f6:8b:b9:57:15:af:9a:43: 31:2f:50:e0:43:e2:07:3f:ba:0e:62:19:b8:8f:8c: 8c:f3:ff:be:91:3a:3f:e0:80:fa:df:65:5b:b3:75: 67:b4:a3:7e:ef:27:d3:c5:db:2d:2e:a9:bc:f3:fb: 87:10:64:64:0c:4e:41:ff:87:05:6e:24:7c:19:d3: 64:61:f9:46:99:af:d7:53:d9:66:d7:b1:b2:ae:13: 55:70:4c:b0:47:15:92:6c:38:6a:1e:a7:81:d9:85: 70:be:bd:77:a4:1a:41:ab:66:b7:96:36:a1:25:df: 99:f3:3e:57:cc:6a:b4:a9:86:9a:6f:c3:0b:d7:23: fe:80:d1:c0:ed:4d:78:79:fa:ec:8e:f0:45:89:8b: 5d:84:4c:32:fc:da:2e:aa:f2:c9:d7:18:b7:1b:d1: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4F:34:30:7D:69:8B:E6:85:60:FD:FA:B7:D8:2D:54:88:C4:BF:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823301fc-cddb-3a97-977d-56de970cf5fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:1d:3f:63:65:8d:a3:41:fc:58:ca:42:10:d3:6c:11:b8:6e: 4b:69:cc:5c:25:73:d6:10:d0:09:27:83:44:c1:b4:e6:8d:51: 2f:39:1f:17:fe:8a:66:b7:e6:a7:a2:96:23:88:d6:9e:77:9e: b6:e8:ce:0c:a8:cf:ce:e0:4c:35:98:95:b0:15:8c:2c:82:39: ba:19:34:dd:c7:cf:aa:d1:e3:19:a0:37:52:58:c0:ad:52:30: d4:e7:76:3e:6e:59:d8:43:92:55:56:04:a2:7d:e7:20:d8:41: b4:4e:1f:7c:6a:9c:3c:55:aa:97:9a:df:e3:ed:e4:f7:76:a4: 89:ec:74:77:76:f0:f0:6f:eb:9a:03:ca:1c:ca:d5:31:38:d6: 29:7e:18:48:17:b4:6e:06:06:45:43:4f:dd:ef:fc:4e:e1:85: cd:7d:21:17:3a:eb:08:4e:01:71:a6:06:2f:de:3b:2b:59:89: 0d:81:e7:2d:92:94:9b:a1:10:48:02:8a:1c:0e:dd:2a:25:03: d9:70:ea:30:db:ec:b3:26:34:9d:22:46:fd:41:ce:1e:cc:19: c6:21:b2:98:d4:7d:a0:9c:d0:25:49:95:fb:6f:52:1b:b5:2f: a1:28:c7:1c:a3:ff:1e:4a:c8:fa:18:3b:74:b0:2f:33:b2:e4: d4:5d:5c:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvJc2/Nzv6wVboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk OTJmMjM4ZjYtZDQ5NC00MTAwLTg5YmUtZmFlZTQ2OGU3ZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMd4iIlC6kHvcEa4UIFI63zYdmEKMJNsUixi O1d5ChUlONTF/EoFMhchKmgSCupli6sOFB92KJkOACwyuIz5kIPRAYEKcOQlDgPq 6PoKIpki7J2GXjf+/FJ7Y5b1TJje9ou5VxWvmkMxL1DgQ+IHP7oOYhm4j4yM8/++ kTo/4ID632Vbs3VntKN+7yfTxdstLqm88/uHEGRkDE5B/4cFbiR8GdNkYflGma/X U9lm17GyrhNVcEywRxWSbDhqHqeB2YVwvr13pBpBq2a3ljahJd+Z8z5XzGq0qYaa b8ML1yP+gNHA7U14efrsjvBFiYtdhEwy/NouqvLJ1xi3G9EXpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJPNDB9aYvmhWD9+rfYLVSIxL8HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODIzMzAxZmMtY2RkYi0z YTk3LTk3N2QtNTZkZTk3MGNmNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgdP2NljaNB/FjKQhDTbBG4bktpzFwlc9YQ0Akng0TBtOaNUS85Hxf+ ima35qeiliOI1p53nrbozgyoz87gTDWYlbAVjCyCOboZNN3Hz6rR4xmgN1JYwK1S MNTndj5uWdhDklVWBKJ95yDYQbROH3xqnDxVqpea3+Pt5Pd2pInsdHd28PBv65oD yhzK1TE41il+GEgXtG4GBkVDT93v/E7hhc19IRc66whOAXGmBi/eOytZiQ2B5y2S lJuhEEgCihwO3SolA9lw6jDb7LMmNJ0iRv1Bzh7MGcYhspjUfaCc0CVJlftvUhu1 L6Eoxxyj/x5KyPoYO3SwLzOy5NRdXN0= -----END CERTIFICATE-----Generated at Sun Apr 27 05:47:00 2025 by rpki-client