$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/aa4b6c02-c24b-3a78-99a8-626fddbe8610.roa File: aa4b6c02-c24b-3a78-99a8-626fddbe8610.roa (raw, json) Hash identifier: VmMzCHKpVhuUAP6KejeX30up6jiUMqfuRjvtA/7h3jw= Subject key identifier: 22:E2:C7:5D:31:4D:DD:04:8A:C0:E2:63:AB:38:03:B7:AA:A1:BF:2A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A19FABCFDEF58EF764CE9C400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/aa4b6c02-c24b-3a78-99a8-626fddbe8610.roa Signing time: Fri 06 Jun 2025 13:01:04 +0000 ROA not before: Fri 06 Jun 2025 13:01:04 +0000 ROA not after: Thu 04 Sep 2025 13:01:04 +0000 asID: 8069 IP address blocks: 20.153.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:19:fa:bc:fd:ef:58:ef:76:4c:e9:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 6 13:01:04 2025 GMT Not After : Sep 4 13:01:04 2025 GMT Subject: CN=07cd4472-a0dd-47ff-9624-2db77b0f0638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4e:f2:14:bf:a9:87:04:b5:95:78:70:a3:39: 38:01:e0:95:dc:7e:d8:48:ca:f9:e6:ab:7d:22:0c: cc:20:6b:fb:db:41:04:7b:cd:78:4c:80:17:f9:3a: 54:79:46:e3:62:ad:d9:0f:6c:96:a4:10:0a:c0:90: c3:2f:81:90:33:51:a0:66:3d:d3:11:71:8b:7f:36: d3:05:cf:e6:2f:53:23:86:67:7c:7d:8c:ba:fc:e1: 71:3f:35:f3:98:7e:81:61:f1:15:12:c2:be:bf:b0: b3:d2:a2:6a:10:32:dd:ee:83:da:b9:b8:58:b1:7a: c6:4b:58:fe:be:ab:ec:30:04:2c:ca:7b:d0:a5:10: 4f:33:4d:9c:7f:04:ac:84:f3:64:29:f2:f5:ac:56: d0:f4:a5:a0:cf:d7:2b:ab:90:4a:c0:c8:92:34:f7: 29:a1:34:45:1e:ac:b4:5b:a0:5c:bf:7b:f0:0e:ce: d8:7f:d5:9c:61:29:3c:7f:c8:76:d4:0a:d1:a9:51: 7f:f7:b4:ec:8d:c0:02:b2:1b:41:06:dc:7f:b1:2c: 2a:99:df:59:e0:53:07:0b:68:d7:27:0e:e0:ae:9b: 11:b0:0f:82:49:f7:a7:39:11:3c:03:a3:d7:51:c0: 14:66:1c:52:f8:71:6f:42:de:f9:f3:2f:9c:4c:b1: 77:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E2:C7:5D:31:4D:DD:04:8A:C0:E2:63:AB:38:03:B7:AA:A1:BF:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/aa4b6c02-c24b-3a78-99a8-626fddbe8610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b1:9f:7c:51:d9:21:99:cf:5c:33:d7:c3:3a:e5:66:6f:e4: b0:dd:c5:73:3f:b7:77:a4:19:c8:54:59:78:35:f7:3d:aa:d8: be:27:68:7e:c6:4a:a1:ff:c7:33:37:04:2f:c9:77:3d:2d:30: fc:00:4d:9c:8f:da:c2:50:4f:38:fb:81:8b:87:69:c3:70:20: 17:0a:59:7a:96:42:b9:7e:63:fe:ed:64:2a:52:83:05:dc:b5: 42:06:c9:1b:5d:5c:3b:de:5f:c7:6d:5c:8a:8f:d6:20:76:58: 2e:8e:10:24:c2:55:56:0a:b4:c6:22:f6:ea:fc:37:c0:fb:dd: 4f:9a:50:f9:bf:69:6e:72:af:d1:c0:69:94:2f:ac:e7:da:7d: c6:9a:59:8d:ab:f9:8e:e2:58:e5:9c:85:8f:22:8e:e0:7b:3d: 3b:ac:41:77:5e:f8:d8:20:89:55:af:7b:68:87:dd:e3:57:ae: af:85:1c:00:08:01:2e:9c:39:27:20:bf:cc:66:39:1e:c7:26: ec:c0:3b:f9:5f:b1:68:70:a2:20:3a:3c:df:66:90:03:df:be: 10:da:c2:54:c7:28:cb:aa:67:a0:ae:37:4e:70:6c:8e:a7:06: 1f:1b:a2:84:4d:54:28:6d:cd:ec:9f:60:e4:57:4b:1b:5b:f4: b6:fb:ef:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoZ+rz971jvdkzpxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNjEzMDEwNFoXDTI1MDkwNDEzMDEwNFowLzEtMCsGA1UEAxMk MDdjZDQ0NzItYTBkZC00N2ZmLTk2MjQtMmRiNzdiMGYwNjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk7yFL+phwS1lXhwozk4AeCV3H7YSMr55qt9 IgzMIGv720EEe814TIAX+TpUeUbjYq3ZD2yWpBAKwJDDL4GQM1GgZj3TEXGLfzbT Bc/mL1Mjhmd8fYy6/OFxPzXzmH6BYfEVEsK+v7Cz0qJqEDLd7oPaubhYsXrGS1j+ vqvsMAQsynvQpRBPM02cfwSshPNkKfL1rFbQ9KWgz9crq5BKwMiSNPcpoTRFHqy0 W6Bcv3vwDs7Yf9WcYSk8f8h21ArRqVF/97TsjcACshtBBtx/sSwqmd9Z4FMHC2jX Jw7grpsRsA+CSfenORE8A6PXUcAUZhxS+HFvQt758y+cTLF3EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLix10xTd0EisDiY6s4A7eqob8qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWE0YjZjMDItYzI0Yi0z YTc4LTk5YTgtNjI2ZmRkYmU4NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+xn3xR2SGZz1wz18M65WZv5LDdxXM/t3ekGchUWXg19z2q2L4naH7G SqH/xzM3BC/Jdz0tMPwATZyP2sJQTzj7gYuHacNwIBcKWXqWQrl+Y/7tZCpSgwXc tUIGyRtdXDveX8dtXIqP1iB2WC6OECTCVVYKtMYi9ur8N8D73U+aUPm/aW5yr9HA aZQvrOfafcaaWY2r+Y7iWOWchY8ijuB7PTusQXde+NggiVWve2iH3eNXrq+FHAAI AS6cOScgv8xmOR7HJuzAO/lfsWhwoiA6PN9mkAPfvhDawlTHKMuqZ6CuN05wbI6n Bh8booRNVChtzeyfYORXSxtb9Lb778g= -----END CERTIFICATE-----Generated at Sun Jun 15 15:24:40 2025 by rpki-client