$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/94ec5fa0-16d5-3d2e-b9a1-1e87ee8a96d5.roa File: 94ec5fa0-16d5-3d2e-b9a1-1e87ee8a96d5.roa (raw, json) Hash identifier: 8DWj8LcJRCvELVnInDPKuZjcaAd9P9Z64ZZBK7oSqVE= Subject key identifier: 06:F3:C3:2A:7F:81:4A:E7:C5:F6:B1:BE:5C:C3:39:81:D3:C0:F6:94 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A15CA93BD2C694C0FF84249C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/94ec5fa0-16d5-3d2e-b9a1-1e87ee8a96d5.roa Signing time: Thu 05 Jun 2025 01:00:51 +0000 ROA not before: Thu 05 Jun 2025 01:00:51 +0000 ROA not after: Wed 03 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.157.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:ca:93:bd:2c:69:4c:0f:f8:42:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 5 01:00:51 2025 GMT Not After : Sep 3 01:00:51 2025 GMT Subject: CN=e99813d7-baea-49c5-a866-dfc04956fb6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:33:95:76:ff:79:90:68:ea:a7:53:ce:00:fc: 19:c9:91:61:d5:60:a7:28:66:d1:c1:c6:9e:79:ef: b8:03:40:70:b2:ca:31:b6:70:51:03:e8:01:a2:f2: ff:4a:c4:21:d6:62:00:24:fd:11:97:b4:c9:86:c2: fd:73:f6:3e:83:3d:b1:d9:fe:bc:bc:75:da:f8:ef: 28:8a:ac:76:3e:21:f4:9f:5f:a6:9f:06:1c:a1:1d: cc:bf:a8:17:c9:31:c3:12:a7:8b:ff:85:9d:e2:fa: 2d:0b:bc:88:2c:ff:9b:c0:60:5b:04:30:8c:3f:93: 7e:05:58:a2:db:1b:53:54:db:ae:bc:f5:b8:63:93: 38:40:64:6c:96:9c:d7:a3:72:32:81:40:c3:79:76: 9f:88:11:10:db:b7:e9:21:58:85:73:f4:c1:94:58: 80:10:bb:43:00:39:f0:75:21:83:08:42:3c:8e:52: dc:54:52:46:b9:77:83:91:b3:00:cd:8c:c1:22:af: fa:4c:b4:ea:6c:25:b9:db:f5:d2:b9:ca:90:42:20: 2a:9f:74:e2:0a:fa:fc:6a:e9:27:23:83:fb:dc:a9: 76:98:c6:ab:6e:f7:6d:0e:c0:2b:b6:25:84:0e:f2: 28:84:5a:8f:f0:04:63:8d:d6:41:42:a9:ab:8a:2f: 85:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F3:C3:2A:7F:81:4A:E7:C5:F6:B1:BE:5C:C3:39:81:D3:C0:F6:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/94ec5fa0-16d5-3d2e-b9a1-1e87ee8a96d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:63:93:39:86:bc:df:61:7f:0a:da:3d:74:39:12:e3:fb:bc: 78:60:4f:e6:9d:ce:c0:61:b7:1c:c1:f7:e3:ea:33:38:a6:85: f3:c6:52:6b:02:e5:4c:03:a4:76:4f:67:f6:4d:4a:fa:59:65: f3:03:a8:f6:09:d6:34:67:5b:63:22:25:02:17:75:03:9c:88: a0:e4:56:58:0d:d7:c2:9a:5b:32:fc:1b:0e:42:a2:39:77:2e: 13:cc:d2:74:b8:f3:13:19:a1:24:8d:a7:7f:84:46:7a:5c:a1: d0:34:bb:6c:a8:c3:cc:7a:55:3a:a3:ae:39:34:fc:21:c4:55: 5c:7d:b0:76:e5:ce:e9:69:49:54:75:a6:70:68:d8:32:b6:59: ea:42:63:63:c5:37:24:09:7a:47:78:b0:da:30:03:5c:d7:a7: b3:61:bd:b1:58:15:fe:87:62:f5:fc:72:1e:db:80:da:e9:a0: c0:fb:dc:b3:37:8d:58:d9:d8:18:52:47:fd:f5:a1:83:c2:db: 03:e7:87:72:0d:1f:5d:6e:81:ba:36:44:58:e4:db:04:5c:ee: 37:e0:52:7c:b1:ea:71:af:de:4f:4e:0c:43:17:8f:b6:cf:30: 0b:a4:47:8d:a9:91:41:68:30:2b:e6:0a:f3:69:ae:62:09:61: e9:63:23:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoVypO9LGlMD/hCScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNTAxMDA1MVoXDTI1MDkwMzAxMDA1MVowLzEtMCsGA1UEAxMk ZTk5ODEzZDctYmFlYS00OWM1LWE4NjYtZGZjMDQ5NTZmYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzOVdv95kGjqp1POAPwZyZFh1WCnKGbRwcae ee+4A0BwssoxtnBRA+gBovL/SsQh1mIAJP0Rl7TJhsL9c/Y+gz2x2f68vHXa+O8o iqx2PiH0n1+mnwYcoR3Mv6gXyTHDEqeL/4Wd4votC7yILP+bwGBbBDCMP5N+BVii 2xtTVNuuvPW4Y5M4QGRslpzXo3IygUDDeXafiBEQ27fpIViFc/TBlFiAELtDADnw dSGDCEI8jlLcVFJGuXeDkbMAzYzBIq/6TLTqbCW52/XSucqQQiAqn3TiCvr8aukn I4P73Kl2mMarbvdtDsArtiWEDvIohFqP8ARjjdZBQqmrii+FGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbzwyp/gUrnxfaxvlzDOYHTwPaUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTRlYzVmYTAtMTZkNS0z ZDJlLWI5YTEtMWU4N2VlOGE5NmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpjkzmGvN9hfwraPXQ5EuP7vHhgT+adzsBhtxzB9+PqMzimhfPGUmsC 5UwDpHZPZ/ZNSvpZZfMDqPYJ1jRnW2MiJQIXdQOciKDkVlgN18KaWzL8Gw5Cojl3 LhPM0nS48xMZoSSNp3+ERnpcodA0u2yow8x6VTqjrjk0/CHEVVx9sHblzulpSVR1 pnBo2DK2WepCY2PFNyQJekd4sNowA1zXp7NhvbFYFf6HYvX8ch7bgNrpoMD73LM3 jVjZ2BhSR/31oYPC2wPnh3INH11ugbo2RFjk2wRc7jfgUnyx6nGv3k9ODEMXj7bP MAukR42pkUFoMCvmCvNprmIJYeljIxo= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:16 2025 by rpki-client