$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9836e2a1-56f5-3d9c-9327-7ae95cd88d7b.roa File: 9836e2a1-56f5-3d9c-9327-7ae95cd88d7b.roa (raw, json) Hash identifier: 0AvkSw/kMgeCFSon6qdl5c2HI5ScovDAoF9O3fC4ukc= Subject key identifier: 28:02:9B:E9:A1:AD:A5:AB:A9:C1:90:00:67:D6:64:5E:2C:0F:1E:4E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849E34C3A1931CB405019DF2400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9836e2a1-56f5-3d9c-9327-7ae95cd88d7b.roa Signing time: Sat 17 May 2025 22:55:54 +0000 ROA not before: Sat 17 May 2025 22:55:54 +0000 ROA not after: Fri 15 Aug 2025 22:55:54 +0000 asID: 8069 IP address blocks: 20.153.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:4c:3a:19:31:cb:40:50:19:df:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 17 22:55:54 2025 GMT Not After : Aug 15 22:55:54 2025 GMT Subject: CN=dc02080b-206e-40d7-acc5-aee3779c1a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:37:33:3f:35:0f:c1:87:7b:06:2b:34:75: 14:5c:f9:e4:8e:31:91:f7:57:5e:47:00:fd:21:b6: df:fe:e7:2f:c0:7e:28:16:72:2f:f9:20:58:19:51: a4:89:e7:fb:6d:ab:c4:53:b0:3c:09:5d:9b:38:2b: bd:80:a9:db:ed:bf:3b:ce:68:c8:43:10:38:29:03: 83:9e:3f:49:97:30:16:81:9b:1d:f7:83:29:2c:8e: 82:92:7f:a2:8c:74:4e:e4:24:9c:af:8b:24:69:d9: 41:9b:b4:cb:4e:c8:42:e5:84:2a:69:55:0e:80:05: 51:5b:61:dd:28:59:b8:bb:e6:a1:71:6f:b2:10:19: 1b:8f:6e:06:98:ed:bc:a3:3e:80:fb:7a:6c:f7:85: 6f:ba:84:ff:ac:0f:af:f1:2b:cb:cc:6e:b2:f3:83: 81:21:46:f2:5f:69:76:86:94:c8:d6:9e:fd:da:35: a9:25:eb:b1:72:5e:07:35:00:90:b0:31:7a:a6:8d: 85:02:3f:53:74:2a:2a:31:c7:d0:05:92:12:46:09: 31:4d:83:c9:34:48:50:ac:a6:0b:ec:b2:b2:de:04: 2d:00:fd:bc:55:8d:c1:25:c2:49:b4:51:5d:55:d8: 5c:5c:c9:8a:c1:11:52:71:79:2f:6b:bf:ba:2c:58: e0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:02:9B:E9:A1:AD:A5:AB:A9:C1:90:00:67:D6:64:5E:2C:0F:1E:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9836e2a1-56f5-3d9c-9327-7ae95cd88d7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:75:8e:1d:0a:11:bb:a6:1f:a0:b9:c2:89:5d:64:1b:f1:56: ec:7e:f5:04:ee:77:e5:3c:73:5b:9f:9b:27:b0:3e:20:dc:50: 1d:6f:f5:b7:9b:62:69:5a:41:3c:37:04:4e:6a:58:a8:48:0e: 3d:ef:dc:5f:63:d5:72:40:34:ad:80:0e:ed:70:6b:9a:4f:f7: 49:85:3b:fa:32:43:c2:7d:56:9f:be:e1:13:68:12:4c:f7:1d: 7b:d5:09:b9:e7:0d:4d:b0:0f:8e:45:b8:cb:15:96:4e:ca:3b: da:aa:f1:31:ed:98:4a:d9:b9:ac:38:cc:c9:19:a9:53:7a:d1: 5f:2e:93:a9:e1:c7:d4:82:0a:25:3b:ed:43:84:bd:06:7a:bd: 7e:b8:72:70:41:2f:37:a8:cf:08:cd:be:f9:bb:00:d3:5b:f5: 64:18:1a:6c:64:a6:b6:1b:85:56:bc:d6:80:61:f9:1c:99:a0: 39:5c:4c:c8:07:a1:1d:a8:e7:47:01:51:de:f1:65:30:9d:cc: ac:ff:17:53:75:05:da:de:ea:cc:07:4a:fb:e6:cf:bd:6d:0d: 63:ac:91:a4:bf:1a:c2:69:e9:f4:33:c1:26:c3:13:b4:e6:c5: 6d:71:62:1b:8c:89:72:e3:3c:3d:5b:2a:f2:9c:fd:12:24:34: a0:c1:42:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnjTDoZMctAUBnfJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNzIyNTU1NFoXDTI1MDgxNTIyNTU1NFowLzEtMCsGA1UEAxMk ZGMwMjA4MGItMjA2ZS00MGQ3LWFjYzUtYWVlMzc3OWMxYTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPY3Mz81D8GHewYrNHUUXPnkjjGR91deRwD9 Ibbf/ucvwH4oFnIv+SBYGVGkief7bavEU7A8CV2bOCu9gKnb7b87zmjIQxA4KQOD nj9JlzAWgZsd94MpLI6Ckn+ijHRO5CScr4skadlBm7TLTshC5YQqaVUOgAVRW2Hd KFm4u+ahcW+yEBkbj24GmO28oz6A+3ps94VvuoT/rA+v8SvLzG6y84OBIUbyX2l2 hpTI1p792jWpJeuxcl4HNQCQsDF6po2FAj9TdCoqMcfQBZISRgkxTYPJNEhQrKYL 7LKy3gQtAP28VY3BJcJJtFFdVdhcXMmKwRFScXkva7+6LFjg7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgCm+mhraWrqcGQAGfWZF4sDx5OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTgzNmUyYTEtNTZmNS0z ZDljLTkzMjctN2FlOTVjZDg4ZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJnEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFR1jh0KEbumH6C5woldZBvxVux+9QTud+U8c1ufmyewPiDcUB1v9beb YmlaQTw3BE5qWKhIDj3v3F9j1XJANK2ADu1wa5pP90mFO/oyQ8J9Vp++4RNoEkz3 HXvVCbnnDU2wD45FuMsVlk7KO9qq8THtmErZuaw4zMkZqVN60V8uk6nhx9SCCiU7 7UOEvQZ6vX64cnBBLzeozwjNvvm7ANNb9WQYGmxkprYbhVa81oBh+RyZoDlcTMgH oR2o50cBUd7xZTCdzKz/F1N1Bdre6swHSvvmz71tDWOskaS/GsJp6fQzwSbDE7Tm xW1xYhuMiXLjPD1bKvKc/RIkNKDBQnk= -----END CERTIFICATE-----Generated at Sun Jun 15 15:33:03 2025 by rpki-client