$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8e769351-a4a9-3cc3-90c8-6121d56822f5.roa File: 8e769351-a4a9-3cc3-90c8-6121d56822f5.roa (raw, json) Hash identifier: U0PjBCWLRZh5O5ca2/CmPLZkQwsjp8qEoorP3ktk4F0= Subject key identifier: 69:B7:C1:64:D0:0A:AB:5E:77:D2:3B:40:28:12:6E:5A:DA:A3:76:62 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849E054EDC2D502152AF99B78C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8e769351-a4a9-3cc3-90c8-6121d56822f5.roa Signing time: Fri 16 May 2025 21:26:01 +0000 ROA not before: Fri 16 May 2025 21:26:01 +0000 ROA not after: Thu 14 Aug 2025 21:26:01 +0000 asID: 8069 IP address blocks: 20.153.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e0:54:ed:c2:d5:02:15:2a:f9:9b:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 16 21:26:01 2025 GMT Not After : Aug 14 21:26:01 2025 GMT Subject: CN=be11b447-c7fc-40f9-abc0-1b686fe395a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e3:f9:6a:eb:0e:f1:ff:2c:55:a0:db:cd:79: 5f:69:44:61:81:d0:84:48:22:73:81:8d:e5:12:0a: 3a:27:a0:0b:d0:86:be:50:f7:6f:d9:a9:2b:b5:f3: 4b:b1:0c:66:0a:05:21:ad:cd:d6:3e:dc:df:74:ae: 62:7d:98:05:ce:ac:54:b8:4e:c7:d1:0f:4c:bb:7d: cb:8f:7f:f7:86:32:4f:82:57:2c:5b:17:81:d8:6d: 6e:48:27:33:a9:b4:55:b1:12:94:73:41:f2:c8:61: c5:a4:5e:46:e0:68:14:d5:b8:d8:c0:63:37:f1:f6: c1:79:98:ef:f8:cd:6e:3f:d7:58:f6:56:a0:b7:6f: e8:c2:2a:d7:d5:c2:dd:72:7a:85:6e:86:99:e5:fa: 9e:b8:48:ae:dd:60:b1:bf:5b:62:b1:62:a7:b6:d6: 0d:21:b4:de:ad:28:b0:34:7f:ce:c1:42:a9:65:f4: f8:18:1d:10:9e:e9:59:7a:18:c2:b7:a2:b3:2d:8a: 28:7b:99:55:06:8e:f3:aa:58:a8:a7:88:42:45:3f: 82:95:aa:30:01:a4:46:66:db:b0:39:6f:89:c1:97: 73:83:6b:f4:ae:2b:82:6c:97:1a:c2:b5:81:81:47: 98:9d:78:36:05:f5:b1:b7:2b:f9:14:80:84:78:d8: 3e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B7:C1:64:D0:0A:AB:5E:77:D2:3B:40:28:12:6E:5A:DA:A3:76:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8e769351-a4a9-3cc3-90c8-6121d56822f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:c0:5e:9f:c2:24:1b:71:28:d3:a6:f4:65:ce:10:a6:0d:14: 54:39:24:3c:be:cc:f5:43:d2:4b:15:32:a0:f2:8d:e0:4f:8f: 5b:a9:cc:23:a4:e2:6a:b3:21:b6:56:44:8e:e9:65:ee:6c:f4: 46:f8:84:ce:71:41:81:ad:e0:99:a8:2c:3b:cb:f5:10:73:2f: 4c:60:dc:18:1e:7c:2f:20:e6:ed:d8:e3:1b:db:e8:e3:8a:33: f8:ad:61:26:7c:47:8c:72:0c:78:d2:57:0a:6c:ee:56:c6:96: 7d:b9:bb:d2:ec:a2:98:fb:a9:8f:20:1a:07:b6:7f:57:59:fb: d6:63:49:1d:c3:29:8c:4b:a4:87:3f:72:06:84:29:14:90:f7: 0a:4c:69:c4:51:e8:c9:a0:5f:45:d3:42:a7:bd:d1:d0:38:0a: f5:06:ab:81:36:1e:29:6a:e4:86:00:bf:90:48:90:89:8a:c4: de:54:f1:ec:a2:3a:fb:de:b2:91:7d:3d:3d:eb:dd:00:f8:73: db:94:1c:44:a1:75:f8:81:09:59:f0:aa:e4:c2:e1:3b:07:5d: 89:b4:7e:a0:3e:c1:39:05:95:46:6e:b7:c0:13:5a:cc:24:d3: 4a:3d:b7:88:d9:cc:20:ea:32:e3:43:2d:2e:0c:f5:0d:78:76: 9a:f5:26:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEngVO3C1QIVKvmbeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNjIxMjYwMVoXDTI1MDgxNDIxMjYwMVowLzEtMCsGA1UEAxMk YmUxMWI0NDctYzdmYy00MGY5LWFiYzAtMWI2ODZmZTM5NWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+P5ausO8f8sVaDbzXlfaURhgdCESCJzgY3l Ego6J6AL0Ia+UPdv2akrtfNLsQxmCgUhrc3WPtzfdK5ifZgFzqxUuE7H0Q9Mu33L j3/3hjJPglcsWxeB2G1uSCczqbRVsRKUc0HyyGHFpF5G4GgU1bjYwGM38fbBeZjv +M1uP9dY9lagt2/owirX1cLdcnqFboaZ5fqeuEiu3WCxv1tisWKnttYNIbTerSiw NH/OwUKpZfT4GB0QnulZehjCt6KzLYooe5lVBo7zqliop4hCRT+ClaowAaRGZtuw OW+JwZdzg2v0riuCbJcawrWBgUeYnXg2BfWxtyv5FICEeNg+sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGm3wWTQCqted9I7QCgSblrao3ZiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGU3NjkzNTEtYTRhOS0z Y2MzLTkwYzgtNjEyMWQ1NjgyMmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJnXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbAXp/CJBtxKNOm9GXOEKYNFFQ5JDy+zPVD0ksVMqDyjeBPj1upzCOk 4mqzIbZWRI7pZe5s9Eb4hM5xQYGt4JmoLDvL9RBzL0xg3BgefC8g5u3Y4xvb6OOK M/itYSZ8R4xyDHjSVwps7lbGln25u9Lsopj7qY8gGge2f1dZ+9ZjSR3DKYxLpIc/ cgaEKRSQ9wpMacRR6MmgX0XTQqe90dA4CvUGq4E2Hilq5IYAv5BIkImKxN5U8eyi OvvespF9PT3r3QD4c9uUHEShdfiBCVnwquTC4TsHXYm0fqA+wTkFlUZut8ATWswk 00o9t4jZzCDqMuNDLS4M9Q14dpr1Ji8= -----END CERTIFICATE-----Generated at Sun Jun 15 15:33:15 2025 by rpki-client