$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/99262335-e4d0-30ea-8231-d57c9635e705.roa File: 99262335-e4d0-30ea-8231-d57c9635e705.roa (raw, json) Hash identifier: mcF1XSFguxgAUCTT1erqiGfX3YhuFBu0c53SBVbdrIE= Subject key identifier: C6:48:65:25:93:B3:85:98:84:25:31:BC:8F:1E:32:07:FC:AC:85:17 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849350EB2937FEBFCF3E3EE4800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/99262335-e4d0-30ea-8231-d57c9635e705.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.157.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:b2:93:7f:eb:fc:f3:e3:ee:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=699e12f5-a47f-4c33-88b0-1f2493aefff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d7:63:4d:36:05:e1:11:0b:04:dd:17:6e:c5: 5c:cb:34:8d:5f:4c:aa:3f:2e:e7:cc:ee:de:6d:4d: f0:f9:22:53:73:eb:14:29:aa:66:79:8e:ac:ce:0e: 67:f7:17:d7:94:0c:a4:6b:cb:f5:de:cd:d7:61:4d: ba:c5:64:3b:64:c6:18:f8:8e:7f:88:9a:c2:b2:3f: 65:30:c1:10:83:a2:7c:3f:7c:e9:01:bf:08:ad:41: 7f:f8:8f:e0:6d:fe:9b:44:18:1e:2b:9d:ca:ce:db: 5a:5e:55:79:49:e9:71:6d:17:ea:46:6c:6a:fb:62: ff:81:b8:ca:ad:dc:c0:8e:01:b0:fc:22:81:59:0d: 7d:51:ab:ee:4d:0d:be:29:a1:a6:10:ec:5f:f8:b9: 24:16:c6:44:e2:c1:3b:10:4f:08:fc:58:71:92:d2: 26:61:2c:6d:1f:28:af:09:76:02:37:9b:02:d0:4a: 77:ac:7f:e3:61:fc:e5:30:10:46:f6:09:4c:92:06: f3:2b:70:6a:f9:36:96:a5:ab:4e:79:22:fb:85:e8: 9e:1c:27:f3:97:5d:3b:73:34:41:36:20:dc:e4:f3: 70:e8:a9:00:11:5a:a4:92:bc:78:9e:2c:80:1e:62: b6:85:73:3d:05:19:e8:23:4f:7d:ad:38:0a:0f:75: 5f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:48:65:25:93:B3:85:98:84:25:31:BC:8F:1E:32:07:FC:AC:85:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/99262335-e4d0-30ea-8231-d57c9635e705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:63:f5:bb:f0:c9:67:81:fe:af:31:ee:9b:55:c4:84:8e:6f: 3a:99:52:47:d5:14:19:ba:da:a0:df:75:b5:0c:80:cf:31:74: a7:02:5b:63:01:1a:fa:cd:4e:1a:c0:22:78:08:05:a7:2b:ef: a1:f7:49:22:38:bf:31:35:ea:b2:0b:43:ce:26:6c:65:c9:b5: 2c:4d:8f:91:3c:47:04:00:a8:fd:b7:71:d2:bb:43:49:c3:24: fc:6f:6e:7f:4f:2b:cf:51:66:42:6f:d7:19:01:e1:8b:45:69: 07:c1:d1:b9:3a:8d:40:11:28:e7:d1:4a:89:c3:75:62:99:93: 2c:93:da:c7:6b:5b:1c:2e:da:6d:37:ae:18:12:44:71:14:70: 0b:5b:cc:c0:6f:7a:9a:ef:69:9d:b9:14:2f:e1:1b:7b:55:2c: ee:4c:74:3d:c3:5f:b4:18:8d:d0:6b:b1:64:2f:77:5a:32:de: e3:95:35:b1:85:b8:d9:1f:57:2e:1c:02:a7:55:a8:0d:fe:b0: fb:67:98:e8:32:dc:b5:43:2c:c4:23:df:b8:c6:a5:c0:5c:e2: 8c:f9:6e:29:04:3b:51:76:53:e3:4c:3a:bf:23:b5:8c:df:63: d9:79:19:ed:06:f1:fc:e9:c0:f8:3e:7d:a3:52:9e:56:22:4a: 01:5d:4d:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrKTf+v88+PuSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk Njk5ZTEyZjUtYTQ3Zi00YzMzLTg4YjAtMWYyNDkzYWVmZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNdjTTYF4RELBN0XbsVcyzSNX0yqPy7nzO7e bU3w+SJTc+sUKapmeY6szg5n9xfXlAyka8v13s3XYU26xWQ7ZMYY+I5/iJrCsj9l MMEQg6J8P3zpAb8IrUF/+I/gbf6bRBgeK53KzttaXlV5SelxbRfqRmxq+2L/gbjK rdzAjgGw/CKBWQ19UavuTQ2+KaGmEOxf+LkkFsZE4sE7EE8I/FhxktImYSxtHyiv CXYCN5sC0Ep3rH/jYfzlMBBG9glMkgbzK3Bq+TaWpatOeSL7heieHCfzl107czRB NiDc5PNw6KkAEVqkkrx4niyAHmK2hXM9BRnoI099rTgKD3VfNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZIZSWTs4WYhCUxvI8eMgf8rIUXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTkyNjIzMzUtZTRkMC0z MGVhLTgyMzEtZDU3Yzk2MzVlNzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJj9bvwyWeB/q8x7ptVxISObzqZUkfVFBm62qDfdbUMgM8xdKcCW2MB GvrNThrAIngIBacr76H3SSI4vzE16rILQ84mbGXJtSxNj5E8RwQAqP23cdK7Q0nD JPxvbn9PK89RZkJv1xkB4YtFaQfB0bk6jUARKOfRSonDdWKZkyyT2sdrWxwu2m03 rhgSRHEUcAtbzMBveprvaZ25FC/hG3tVLO5MdD3DX7QYjdBrsWQvd1oy3uOVNbGF uNkfVy4cAqdVqA3+sPtnmOgy3LVDLMQj37jGpcBc4oz5bikEO1F2U+NMOr8jtYzf Y9l5Ge0G8fzpwPg+faNSnlYiSgFdTZ4= -----END CERTIFICATE-----Generated at Sun Apr 27 10:26:37 2025 by rpki-client