$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa File: 8dea440f-3599-3031-bd25-4f82936b64f4.roa (raw, json) Hash identifier: 5mqwYgSc9DYD/cXhtCkmKlXUE5tRY2JM8Ca+0kGZ40U= Subject key identifier: 05:47:C5:84:C7:FF:A1:34:08:D0:0D:78:29:ED:7A:EB:9B:8D:F9:1C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A14657F8FE90A74B3CF714500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 8069 IP address blocks: 20.157.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7f:8f:e9:0a:74:b3:cf:71:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=23be2b3c-150a-4671-99a0-5b1b2173926c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d6:dd:5d:d0:5a:c7:ed:6d:00:69:b2:d3:14: 5e:c5:f3:fd:82:0f:2f:51:a8:c8:ae:8b:d1:69:83: 4a:7b:25:51:2d:ec:d1:6e:d0:10:0c:16:37:f6:c9: 63:b9:5e:67:fe:fe:47:e9:ac:4f:1f:73:15:6e:14: 3f:d7:a9:92:b4:31:e8:fe:2f:29:54:dd:85:61:e6: 9c:bb:a3:4c:e0:67:99:aa:d0:c8:6e:98:d5:d1:70: 7d:bb:27:fe:2d:f3:b5:2c:9f:bb:7f:af:7a:07:1a: 00:cf:ff:5f:4d:35:12:4e:a0:89:fc:09:b4:20:83: eb:ef:19:44:2c:a4:b2:52:97:ef:14:fc:2b:09:46: b9:b2:a6:39:ed:a6:04:3a:f1:0d:98:d4:35:37:d7: 0b:4b:9c:fc:00:06:d5:cf:be:a6:e5:ba:59:d2:92: b1:5c:3f:40:8d:55:e4:c8:1c:a2:95:9e:16:53:a7: 91:27:a9:cd:7e:f7:54:43:df:02:45:93:2c:47:4a: 7e:82:75:9d:91:88:97:4a:40:4d:89:00:46:db:40: 06:6e:aa:01:af:bd:28:5f:c5:db:63:39:cb:b6:38: 22:ca:b4:7b:b7:a9:45:25:bc:1a:88:b6:f4:54:2d: c8:58:dc:39:cd:03:4c:d7:b4:6d:83:69:a8:5c:0b: cb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:47:C5:84:C7:FF:A1:34:08:D0:0D:78:29:ED:7A:EB:9B:8D:F9:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:86:7b:4d:a9:12:ec:e2:0c:7f:be:14:35:99:1c:bb:d7:a3: c2:9b:c5:21:32:74:b1:dd:da:c0:26:ee:06:29:e3:7f:48:47: 8e:59:a2:70:9c:5a:68:41:89:61:98:40:22:03:b1:87:eb:18: a8:50:4c:21:45:c8:a1:5e:dd:78:6e:fa:a2:87:5f:9e:7d:ba: a4:10:8c:90:2d:d6:b9:80:3e:5a:89:5c:d6:40:e7:cc:1a:27: 46:ed:02:98:2c:9e:fa:95:29:60:e3:0c:ae:c9:49:07:39:76: 13:64:2f:a6:42:8d:96:73:4e:1a:9b:4b:a5:11:53:04:29:d4: 02:4c:dc:5f:97:15:fb:14:dd:1c:f0:a7:02:24:4c:7f:25:2b: ff:a8:eb:4b:19:64:08:9a:5a:13:e8:30:68:21:ca:a6:24:44: 7f:d8:9c:9a:af:12:30:d8:0e:76:8c:ef:4a:dc:e1:05:56:7b: bc:93:de:41:37:6e:a5:0f:61:e4:01:18:99:56:44:c4:ee:a4: bc:b0:ab:df:d1:d5:c9:38:2b:66:9c:6e:6b:9a:3d:93:af:c3: e7:8e:a3:65:22:24:53:95:1d:bc:44:1b:c3:d0:b1:43:94:b6: 59:97:b4:55:9d:e7:c0:48:e1:f2:d2:74:2d:f7:fd:65:e1:3f: 51:ba:46:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZX+P6Qp0s89xRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MjNiZTJiM2MtMTUwYS00NjcxLTk5YTAtNWIxYjIxNzM5MjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdbdXdBax+1tAGmy0xRexfP9gg8vUajIrovR aYNKeyVRLezRbtAQDBY39sljuV5n/v5H6axPH3MVbhQ/16mStDHo/i8pVN2FYeac u6NM4GeZqtDIbpjV0XB9uyf+LfO1LJ+7f696BxoAz/9fTTUSTqCJ/Am0IIPr7xlE LKSyUpfvFPwrCUa5sqY57aYEOvENmNQ1N9cLS5z8AAbVz76m5bpZ0pKxXD9AjVXk yByilZ4WU6eRJ6nNfvdUQ98CRZMsR0p+gnWdkYiXSkBNiQBG20AGbqoBr70oX8Xb YznLtjgiyrR7t6lFJbwaiLb0VC3IWNw5zQNM17Rtg2moXAvLMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVHxYTH/6E0CNANeCnteuubjfkcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGRlYTQ0MGYtMzU5OS0z MDMxLWJkMjUtNGY4MjkzNmI2NGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+Ge02pEuziDH++FDWZHLvXo8KbxSEydLHd2sAm7gYp439IR45ZonCc WmhBiWGYQCIDsYfrGKhQTCFFyKFe3Xhu+qKHX559uqQQjJAt1rmAPlqJXNZA58wa J0btApgsnvqVKWDjDK7JSQc5dhNkL6ZCjZZzThqbS6URUwQp1AJM3F+XFfsU3Rzw pwIkTH8lK/+o60sZZAiaWhPoMGghyqYkRH/YnJqvEjDYDnaM70rc4QVWe7yT3kE3 bqUPYeQBGJlWRMTupLywq9/R1ck4K2acbmuaPZOvw+eOo2UiJFOVHbxEG8PQsUOU tlmXtFWd58BI4fLSdC33/WXhP1G6Rjk= -----END CERTIFICATE-----Generated at Sun Jun 15 17:28:53 2025 by rpki-client