$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be6d61d-293d-3ed8-a651-1bf004bc5280.roa File: 8be6d61d-293d-3ed8-a651-1bf004bc5280.roa (raw, json) Hash identifier: Gr64AYgUk/hRNDafhLdYZ3TKwX+OkkudO7Pomy/tqMc= Subject key identifier: 2A:AC:72:13:0B:FA:ED:BF:D6:09:97:F3:61:B6:94:7C:2D:89:5A:F0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858499294A95F503100B876385360 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be6d61d-293d-3ed8-a651-1bf004bc5280.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 8069 IP address blocks: 20.157.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a9:5f:50:31:00:b8:76:38:53:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=b216d467-9ec9-49bc-863a-0699a4192645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fe:95:64:81:34:f3:5a:28:d3:8b:db:10:97: 68:8e:08:cf:57:06:12:a3:6e:9c:7a:6f:22:8e:47: 42:e7:e1:64:86:05:d7:9c:ad:b5:1f:a1:e8:67:b8: e9:55:86:98:5a:a2:7e:b1:68:0a:68:86:75:5e:67: 06:c7:9f:b4:39:84:5d:ec:6c:40:a0:98:67:1b:9f: fa:69:5c:e6:35:47:a2:84:1b:a6:8a:e0:5d:16:f0: 76:f8:42:10:cc:53:f2:af:09:6c:05:ea:48:40:e1: 8f:2f:82:40:e8:b2:35:96:e0:85:c1:d9:e6:b7:76: 1f:86:fb:09:65:2e:6d:9f:11:9c:ff:54:d0:47:a5: 6f:ae:1f:a7:6e:5d:30:8b:51:15:01:59:65:4f:af: d2:ca:39:a9:ad:14:22:40:93:26:3c:59:18:72:fc: be:d4:97:62:21:d5:21:b4:55:64:0f:b9:e8:5c:98: 61:ec:72:fa:c8:dc:c2:f4:bb:13:fe:8f:93:6f:eb: 74:c8:4c:f7:8a:4a:8f:9d:3b:26:fc:d4:15:dc:69: fe:79:61:93:9f:78:c0:be:52:4e:86:4e:84:17:20: a7:a3:16:1a:4a:31:95:2f:c2:56:0a:12:15:10:00: f9:06:fb:cd:66:45:4b:3a:0e:f8:7c:59:99:3f:b2: 98:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AC:72:13:0B:FA:ED:BF:D6:09:97:F3:61:B6:94:7C:2D:89:5A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8be6d61d-293d-3ed8-a651-1bf004bc5280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c1:c4:fa:71:47:69:22:8f:c0:5c:4e:59:a8:57:4b:38:4b: fb:70:c8:ea:a8:e8:dd:32:b0:c4:bd:b9:64:7b:a9:12:97:e6: b2:fb:9a:85:47:47:8d:54:95:19:18:e6:09:49:97:29:2f:46: ac:b9:a5:e2:6b:5a:75:18:1e:1e:cc:65:9d:9c:52:9c:d7:2a: 3f:8a:85:27:6a:a3:f6:7c:12:a9:41:61:54:a9:f5:25:1e:87: 93:10:44:5d:1f:e9:67:3d:21:d0:54:2f:dc:af:2a:9c:2c:8c: 34:0d:d3:53:83:99:6c:45:9d:f6:28:da:e3:b5:60:42:a6:8a: 30:f9:11:7f:fa:2a:eb:f8:c0:fd:1d:10:c4:6a:21:34:50:a1: e4:a9:df:90:21:de:88:b8:e7:75:5a:33:9c:36:d8:7c:d3:48: f7:fd:bd:d9:31:0d:d4:c2:a2:c6:e4:7e:de:8a:2d:6f:41:90: 0d:28:70:e4:9a:c2:1f:17:62:7a:1f:bd:91:40:0e:ca:88:dc: 56:5e:a3:ed:7b:98:f3:44:68:1e:c5:94:05:06:f4:e0:40:24: 4d:a4:7b:87:f5:30:08:7d:45:cc:91:76:90:30:d2:77:5c:72: 8f:72:bd:ac:52:bd:6e:51:76:94:b0:c6:4f:2f:4c:3e:53:73: 2c:7b:7d:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKlfUDEAuHY4U2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk YjIxNmQ0NjctOWVjOS00OWJjLTg2M2EtMDY5OWE0MTkyNjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/6VZIE081oo04vbEJdojgjPVwYSo26cem8i jkdC5+FkhgXXnK21H6HoZ7jpVYaYWqJ+sWgKaIZ1XmcGx5+0OYRd7GxAoJhnG5/6 aVzmNUeihBumiuBdFvB2+EIQzFPyrwlsBepIQOGPL4JA6LI1luCFwdnmt3YfhvsJ ZS5tnxGc/1TQR6Vvrh+nbl0wi1EVAVllT6/SyjmprRQiQJMmPFkYcvy+1JdiIdUh tFVkD7noXJhh7HL6yNzC9LsT/o+Tb+t0yEz3ikqPnTsm/NQV3Gn+eWGTn3jAvlJO hk6EFyCnoxYaSjGVL8JWChIVEAD5BvvNZkVLOg74fFmZP7KYoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqschML+u2/1gmX82G2lHwtiVrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGJlNmQ2MWQtMjkzZC0z ZWQ4LWE2NTEtMWJmMDA0YmM1MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjBxPpxR2kij8BcTlmoV0s4S/twyOqo6N0ysMS9uWR7qRKX5rL7moVH R41UlRkY5glJlykvRqy5peJrWnUYHh7MZZ2cUpzXKj+KhSdqo/Z8EqlBYVSp9SUe h5MQRF0f6Wc9IdBUL9yvKpwsjDQN01ODmWxFnfYo2uO1YEKmijD5EX/6Kuv4wP0d EMRqITRQoeSp35Ah3oi453VaM5w22HzTSPf9vdkxDdTCosbkft6KLW9BkA0ocOSa wh8XYnofvZFADsqI3FZeo+17mPNEaB7FlAUG9OBAJE2ke4f1MAh9RcyRdpAw0ndc co9yvaxSvW5RdpSwxk8vTD5Tcyx7fdQ= -----END CERTIFICATE-----Generated at Mon Apr 28 01:47:48 2025 by rpki-client