$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b57f4240-51b4-387a-a937-eb616049d478.roa File: b57f4240-51b4-387a-a937-eb616049d478.roa (raw, json) Hash identifier: 7D5YhYOwuOWdSu3YO/38o5eZq/N+EF5u6kbKzTcEiZo= Subject key identifier: 13:B6:C7:3B:44:A1:CB:99:E9:E9:86:23:76:64:17:C2:29:F7:91:EC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A2591C4E174B824AEB751B380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b57f4240-51b4-387a-a937-eb616049d478.roa Signing time: Tue 10 Jun 2025 16:39:23 +0000 ROA not before: Tue 10 Jun 2025 16:39:23 +0000 ROA not after: Mon 08 Sep 2025 16:39:23 +0000 asID: 8069 IP address blocks: 20.153.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:25:91:c4:e1:74:b8:24:ae:b7:51:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 10 16:39:23 2025 GMT Not After : Sep 8 16:39:23 2025 GMT Subject: CN=ba890784-dc2e-43b0-a507-5d75c0793216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:98:9c:3c:44:bb:27:5a:ad:66:a9:90:f7:b8: 0c:55:31:9c:71:1f:f8:50:3f:d2:76:4f:b6:52:99: 5f:30:c6:51:28:64:90:fb:2d:40:ab:0e:45:6b:ac: 89:cd:29:f4:c8:47:6e:9d:97:c9:e6:7d:f9:db:83: 0a:5e:76:7c:32:65:62:c5:c2:e3:96:46:05:71:b4: 55:98:8f:ef:b2:fe:82:77:4a:c0:eb:a6:fe:ea:56: f5:13:71:ff:00:0a:7d:93:fb:2b:73:70:1e:d5:45: 0f:1d:ce:c4:5a:4e:fa:d4:37:00:52:7b:52:3c:9f: 23:cf:d0:4c:f8:07:33:50:8b:02:c6:60:76:0b:26: 48:36:ca:61:e3:2f:d7:2f:a8:67:78:67:3f:b8:d7: 05:1e:c4:0b:73:ec:63:8b:df:8b:2d:af:c2:34:7d: de:48:e9:7e:08:86:99:c2:8f:c3:60:dd:8e:40:f5: 28:74:42:8d:c5:5b:94:88:ac:ca:96:43:5f:ad:ab: e9:04:34:b4:04:fe:a7:92:bb:aa:ab:a6:0a:7d:aa: 2a:06:b6:60:d5:0f:2e:8e:1a:04:af:a9:34:bf:75: 08:67:e8:1c:b9:df:01:23:86:12:51:20:14:f7:f4: 19:02:57:82:70:ef:8a:e9:21:9b:8b:76:a4:40:06: cd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B6:C7:3B:44:A1:CB:99:E9:E9:86:23:76:64:17:C2:29:F7:91:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b57f4240-51b4-387a-a937-eb616049d478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:9d:d5:bd:2e:0d:ca:14:3c:b5:3d:48:97:ec:9b:bc:35:d8: a2:a8:90:5e:2b:27:81:6e:b1:2b:b1:67:3c:b3:d6:dc:b4:c5: 67:86:f7:bf:b7:8a:3d:db:e9:4f:62:62:11:0c:50:8f:06:ed: c7:06:0d:e8:cf:58:d9:5d:06:f2:88:e2:1e:f8:fc:cf:b3:84: da:b2:a7:32:3d:e3:b4:19:0b:e2:ee:b8:38:44:75:99:65:5d: 98:7e:0f:13:f5:a5:24:5b:dc:5e:59:96:76:18:ac:62:18:07: c8:d9:db:4c:fa:d7:3e:bc:0c:ba:78:3b:3f:92:3f:42:8b:71: 54:91:e6:84:d2:79:fe:69:d6:51:8e:7a:8f:08:75:09:3a:4c: 34:58:c5:0f:22:78:2b:84:64:df:f0:3b:5e:2b:ea:ad:47:9b: a8:33:6d:0e:4c:b9:f0:f5:82:23:36:50:82:6d:fc:db:fb:ca: 45:8a:69:12:e6:89:26:da:89:23:3c:fb:9e:8a:3e:30:5c:de: 0d:d1:67:16:2f:ec:41:88:dc:7c:07:6d:17:66:7c:81:d9:9e: 65:6d:32:f1:4c:99:a5:da:04:e8:b4:6a:08:01:cc:de:b9:e5: 93:c5:2f:5d:2c:1c:fc:0d:4a:24:01:85:8d:36:76:ef:85:eb: 25:0d:10:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEolkcThdLgkrrdRs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMDE2MzkyM1oXDTI1MDkwODE2MzkyM1owLzEtMCsGA1UEAxMk YmE4OTA3ODQtZGMyZS00M2IwLWE1MDctNWQ3NWMwNzkzMjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZicPES7J1qtZqmQ97gMVTGccR/4UD/Sdk+2 UplfMMZRKGSQ+y1Aqw5Fa6yJzSn0yEdunZfJ5n3524MKXnZ8MmVixcLjlkYFcbRV mI/vsv6Cd0rA66b+6lb1E3H/AAp9k/src3Ae1UUPHc7EWk761DcAUntSPJ8jz9BM +AczUIsCxmB2CyZINsph4y/XL6hneGc/uNcFHsQLc+xji9+LLa/CNH3eSOl+CIaZ wo/DYN2OQPUodEKNxVuUiKzKlkNfravpBDS0BP6nkruqq6YKfaoqBrZg1Q8ujhoE r6k0v3UIZ+gcud8BI4YSUSAU9/QZAleCcO+K6SGbi3akQAbNfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBO2xztEocuZ6emGI3ZkF8Ip95HsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjU3ZjQyNDAtNTFiNC0z ODdhLWE5MzctZWI2MTYwNDlkNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGd1b0uDcoUPLU9SJfsm7w12KKokF4rJ4FusSuxZzyz1ty0xWeG97+3 ij3b6U9iYhEMUI8G7ccGDejPWNldBvKI4h74/M+zhNqypzI947QZC+LuuDhEdZll XZh+DxP1pSRb3F5ZlnYYrGIYB8jZ20z61z68DLp4Oz+SP0KLcVSR5oTSef5p1lGO eo8IdQk6TDRYxQ8ieCuEZN/wO14r6q1Hm6gzbQ5MufD1giM2UIJt/Nv7ykWKaRLm iSbaiSM8+56KPjBc3g3RZxYv7EGI3HwHbRdmfIHZnmVtMvFMmaXaBOi0aggBzN65 5ZPFL10sHPwNSiQBhY02du+F6yUNEIo= -----END CERTIFICATE-----Generated at Mon Jun 16 11:57:35 2025 by rpki-client