$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/931912a1-d92f-324c-ace7-59dd3fe9950c.roa File: 931912a1-d92f-324c-ace7-59dd3fe9950c.roa (raw, json) Hash identifier: fBB86MC5dV7+IOaP0o0vyuvwB2zygSFQvvRpG/RM+9Q= Subject key identifier: F5:43:4A:4E:20:84:E8:DE:A0:53:CA:1D:D4:15:A6:97:78:5D:9B:43 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849E34C3D78380208B7506E35C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/931912a1-d92f-324c-ace7-59dd3fe9950c.roa Signing time: Sat 17 May 2025 22:55:56 +0000 ROA not before: Sat 17 May 2025 22:55:56 +0000 ROA not after: Fri 15 Aug 2025 22:55:56 +0000 asID: 8069 IP address blocks: 20.153.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:4c:3d:78:38:02:08:b7:50:6e:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 17 22:55:56 2025 GMT Not After : Aug 15 22:55:56 2025 GMT Subject: CN=05ab3d95-a9e6-4f47-889a-1659bbd034cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:52:e7:fc:3c:d3:0c:b1:68:38:ec:de:4c: e1:0d:7c:ff:27:d1:69:63:14:c0:9c:72:1e:d5:1f: c2:b5:3f:5b:9a:5f:e5:58:27:1c:e1:38:97:4c:35: 3d:68:71:d6:3e:77:eb:e3:e6:bf:2b:61:9f:10:84: 01:94:38:69:23:fe:fa:9c:39:8d:e8:00:db:e6:d7: ed:d2:47:fe:b4:40:dd:cc:b1:32:f3:15:05:10:c0: a5:0c:43:81:ee:27:70:a6:e4:1d:30:2e:fd:ac:5e: e4:51:26:6c:af:0c:30:40:c0:3d:02:d4:60:30:e5: 1b:54:7f:94:6c:b4:37:04:1b:6f:91:67:d9:83:c0: 9f:c3:84:f4:23:65:36:c2:c3:d4:56:f4:62:1a:1c: 84:69:c2:2a:b4:6f:9e:65:b1:ec:09:9c:34:40:19: fb:95:f1:bc:d7:54:40:64:4b:82:c9:dd:0c:24:7f: ed:64:56:55:61:66:0a:94:51:fe:67:07:34:8a:40: 66:cb:0f:ce:5d:8f:63:e4:d6:45:88:c1:ea:35:61: bd:79:f3:90:f4:ba:4b:b4:c4:ba:f4:74:c3:4a:ea: 71:64:c2:c4:eb:8f:ae:30:7b:b5:ac:34:e4:9b:f5: cb:35:bc:02:83:49:b2:96:97:a1:4c:45:a2:8e:69: 28:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:43:4A:4E:20:84:E8:DE:A0:53:CA:1D:D4:15:A6:97:78:5D:9B:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/931912a1-d92f-324c-ace7-59dd3fe9950c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:2b:0d:76:d3:e2:45:c3:75:03:26:2a:26:15:21:bb:17:d0: 1c:59:50:72:f3:2d:6f:88:77:9b:1a:91:ec:a5:4d:8c:2d:18: e7:3d:2b:1a:de:65:a5:52:a9:1e:1f:72:03:8d:f7:0b:34:8b: 8a:5a:94:12:9e:be:c6:8a:66:2f:13:8b:f2:2e:8d:5d:f9:15: 4b:e3:07:83:b1:25:e2:14:a1:5b:20:1d:9a:8c:33:77:c1:ed: b7:0b:d8:de:01:3f:a2:cd:54:83:61:1e:3d:69:53:cc:b3:c3: b0:d2:87:2f:c7:79:65:9b:b3:b6:27:da:c5:cc:99:2f:cf:fd: bd:21:60:01:aa:7d:91:7e:6c:c7:e0:6a:61:48:5d:b2:0d:2c: fd:1c:b2:03:8b:3c:b0:ad:93:98:1d:10:11:22:c5:f5:2f:be: 5a:88:b9:b2:1f:f7:40:d6:6b:30:b0:af:0a:ec:4c:0c:86:e2: f4:fb:12:18:54:38:3b:e4:00:52:f0:50:8a:a2:1f:ba:e7:1e: 08:f9:64:80:3b:cc:46:f7:26:e0:13:8a:71:ee:2a:87:9a:9e: ce:4e:36:36:40:78:04:9f:d5:4f:b6:41:50:d2:14:30:ad:ae: b7:bf:46:76:6b:8f:d2:42:28:c1:64:73:c6:76:dd:31:45:8a: ec:f4:3b:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnjTD14OAIIt1BuNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNzIyNTU1NloXDTI1MDgxNTIyNTU1NlowLzEtMCsGA1UEAxMk MDVhYjNkOTUtYTllNi00ZjQ3LTg4OWEtMTY1OWJiZDAzNGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYxS5/w80wyxaDjs3kzhDXz/J9FpYxTAnHIe 1R/CtT9bml/lWCcc4TiXTDU9aHHWPnfr4+a/K2GfEIQBlDhpI/76nDmN6ADb5tft 0kf+tEDdzLEy8xUFEMClDEOB7idwpuQdMC79rF7kUSZsrwwwQMA9AtRgMOUbVH+U bLQ3BBtvkWfZg8Cfw4T0I2U2wsPUVvRiGhyEacIqtG+eZbHsCZw0QBn7lfG811RA ZEuCyd0MJH/tZFZVYWYKlFH+Zwc0ikBmyw/OXY9j5NZFiMHqNWG9efOQ9LpLtMS6 9HTDSupxZMLE64+uMHu1rDTkm/XLNbwCg0mylpehTEWijmkokQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVDSk4ghOjeoFPKHdQVppd4XZtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTMxOTEyYTEtZDkyZi0z MjRjLWFjZTctNTlkZDNmZTk5NTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQrDXbT4kXDdQMmKiYVIbsX0BxZUHLzLW+Id5sakeylTYwtGOc9Kxre ZaVSqR4fcgON9ws0i4palBKevsaKZi8Ti/IujV35FUvjB4OxJeIUoVsgHZqMM3fB 7bcL2N4BP6LNVINhHj1pU8yzw7DShy/HeWWbs7Yn2sXMmS/P/b0hYAGqfZF+bMfg amFIXbINLP0csgOLPLCtk5gdEBEixfUvvlqIubIf90DWazCwrwrsTAyG4vT7EhhU ODvkAFLwUIqiH7rnHgj5ZIA7zEb3JuATinHuKoeans5ONjZAeASf1U+2QVDSFDCt rre/RnZrj9JCKMFkc8Z23TFFiuz0O98= -----END CERTIFICATE-----Generated at Sun Jun 15 15:34:17 2025 by rpki-client