$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b02ab758-700b-309e-a6f2-32462e5f6927.roa File: b02ab758-700b-309e-a6f2-32462e5f6927.roa (raw, json) Hash identifier: 8GeK9n8adNN/8JOWFA5FcJZaPfRgpY/3RbR5aMVlEmg= Subject key identifier: 90:65:C4:BD:E8:EE:FC:75:FF:64:FE:CF:99:E9:7B:EA:3B:13:88:2E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A14657F1FAD088A6525B620E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b02ab758-700b-309e-a6f2-32462e5f6927.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 8069 IP address blocks: 20.157.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7f:1f:ad:08:8a:65:25:b6:20:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=4c340ade-6d9b-432d-b119-4924673b6495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0f:dc:e6:e5:69:33:b3:08:f3:9a:ec:27:51: 97:30:81:16:ab:53:0b:ab:01:e7:22:7f:61:65:77: e9:6b:84:21:75:85:b8:f7:cf:56:61:51:c4:b4:3e: 93:f3:05:f7:f9:62:66:47:e3:c4:4f:31:8a:9a:29: 12:b3:71:36:2a:c9:78:dd:0a:9f:11:a9:54:01:29: 4b:6e:15:b3:cf:98:e6:8f:a2:09:f1:0b:6e:6c:0d: fd:0a:fd:ad:14:e9:0c:2d:51:4e:16:fa:e3:d0:50: 0d:b4:a4:b1:3e:20:a3:19:11:35:c3:5a:f6:a4:73: 13:97:3e:9d:95:0c:18:b1:98:be:d8:64:ad:1e:22: 2f:3a:2b:bd:f1:33:a2:45:8d:73:3b:e6:50:a9:2f: 9c:54:18:cb:6f:62:30:44:a1:88:04:a9:12:17:c2: a2:8d:1d:4c:8c:a2:db:09:27:26:9f:2b:83:74:03: 0b:6f:f0:fa:2d:75:16:03:df:47:bc:e2:32:32:a3: c9:37:72:93:54:8e:4a:ff:e2:0e:6c:4a:07:4d:df: d8:94:b1:06:61:7e:51:5e:03:e2:87:c3:5f:5e:df: 58:f4:29:d9:4c:e6:8a:e0:62:3f:a8:af:55:4e:85: 2e:d9:09:4a:d3:e4:a2:e3:ac:16:ed:30:fa:45:91: 69:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:65:C4:BD:E8:EE:FC:75:FF:64:FE:CF:99:E9:7B:EA:3B:13:88:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b02ab758-700b-309e-a6f2-32462e5f6927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d5:b4:9d:96:8e:7d:6f:7e:75:f1:dd:62:63:90:80:9a:38: 25:cb:ac:9e:95:c4:f6:ef:c9:d4:bf:b9:7f:e5:f0:58:4d:a5: 19:ee:d5:87:54:e7:59:05:d3:68:62:6f:6b:01:cf:ee:93:71: 58:6e:23:2c:a3:4d:ba:03:7c:e8:27:36:d7:d4:85:24:45:4c: 21:0a:6a:89:1b:58:19:b0:06:1a:cd:44:ea:6c:30:78:d8:94: 70:0e:4a:e8:61:70:32:05:df:33:4a:9d:3c:d6:8c:f9:a1:6c: 94:8f:f8:e6:66:8f:a8:0d:c3:b5:ce:e3:0b:fb:de:01:c0:c3: 16:4c:eb:d1:42:3d:58:3e:28:96:a2:1b:b1:57:81:13:1e:91: 09:f4:50:f1:8e:5d:5c:be:a9:18:2b:d5:81:33:8f:5c:b5:bc: 68:5c:51:92:e3:62:1a:84:82:12:72:6c:84:7a:15:7a:b9:29: f6:d9:1c:12:f9:d6:62:48:f5:28:55:89:67:16:0e:a1:a4:d9: 76:a1:57:8d:ca:4c:86:e4:4e:24:7b:1a:eb:fd:d2:ab:0b:d1: eb:9a:b8:96:e9:96:da:11:a7:7f:94:b4:94:a3:46:e4:35:24: 4f:81:62:87:51:ad:3c:38:10:28:4f:87:42:1b:72:c7:0a:21: 59:91:6b:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZX8frQiKZSW2IOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NGMzNDBhZGUtNmQ5Yi00MzJkLWIxMTktNDkyNDY3M2I2NDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow/c5uVpM7MI85rsJ1GXMIEWq1MLqwHnIn9h ZXfpa4QhdYW4989WYVHEtD6T8wX3+WJmR+PETzGKmikSs3E2Ksl43QqfEalUASlL bhWzz5jmj6IJ8QtubA39Cv2tFOkMLVFOFvrj0FANtKSxPiCjGRE1w1r2pHMTlz6d lQwYsZi+2GStHiIvOiu98TOiRY1zO+ZQqS+cVBjLb2IwRKGIBKkSF8KijR1MjKLb CScmnyuDdAMLb/D6LXUWA99HvOIyMqPJN3KTVI5K/+IObEoHTd/YlLEGYX5RXgPi h8NfXt9Y9CnZTOaK4GI/qK9VToUu2QlK0+Si46wW7TD6RZFp9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBlxL3o7vx1/2T+z5npe+o7E4guMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjAyYWI3NTgtNzAwYi0z MDllLWE2ZjItMzI0NjJlNWY2OTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXVtJ2Wjn1vfnXx3WJjkICaOCXLrJ6VxPbvydS/uX/l8FhNpRnu1YdU 51kF02hib2sBz+6TcVhuIyyjTboDfOgnNtfUhSRFTCEKaokbWBmwBhrNROpsMHjY lHAOSuhhcDIF3zNKnTzWjPmhbJSP+OZmj6gNw7XO4wv73gHAwxZM69FCPVg+KJai G7FXgRMekQn0UPGOXVy+qRgr1YEzj1y1vGhcUZLjYhqEghJybIR6FXq5KfbZHBL5 1mJI9ShViWcWDqGk2XahV43KTIbkTiR7Guv90qsL0euauJbpltoRp3+UtJSjRuQ1 JE+BYodRrTw4EChPh0IbcscKIVmRa6g= -----END CERTIFICATE-----Generated at Sun Jun 15 17:24:27 2025 by rpki-client