$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa File: b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa (raw, json) Hash identifier: +ykxJikBPHTCKNClNRzwShnnlmtBUkknx44UEia4+Tc= Subject key identifier: D7:48:75:96:A2:43:1F:24:4F:4C:76:3B:BE:C9:DC:1A:3E:09:9F:A3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849E34C34B360157E7F59F26BC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa Signing time: Sat 17 May 2025 22:55:52 +0000 ROA not before: Sat 17 May 2025 22:55:52 +0000 ROA not after: Fri 15 Aug 2025 22:55:52 +0000 asID: 8069 IP address blocks: 20.153.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:4c:34:b3:60:15:7e:7f:59:f2:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 17 22:55:52 2025 GMT Not After : Aug 15 22:55:52 2025 GMT Subject: CN=c201713b-c5d9-490f-ad5c-5e34434aab04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fb:44:9c:67:75:3c:a5:71:b8:2f:43:1c:3b: ab:ea:5a:47:9e:23:f8:71:bc:99:19:ba:51:3a:52: 62:a8:ab:f4:c9:22:88:2b:cd:99:45:59:01:cf:87: e4:5d:51:90:5c:d7:88:51:90:d3:79:cd:f1:c4:69: 73:f4:10:49:cc:9f:23:90:33:8c:44:a0:62:42:1f: a9:dd:b8:f5:c8:ee:57:97:04:92:8d:ef:51:99:b5: 70:e6:77:e1:21:41:20:64:e2:71:2b:39:56:e5:13: d6:e7:a1:d5:82:44:8f:e0:ae:d9:5a:d0:c5:82:ea: 5d:ed:fe:f3:9b:f0:30:9a:03:ad:79:15:74:bb:7b: 5b:2d:9d:e3:61:94:fc:f9:c2:ac:e6:13:c1:c7:ec: a6:ec:cc:ec:04:6f:a8:72:0a:23:c4:b0:20:d4:3f: ba:bb:61:f4:b8:38:6b:fe:f6:93:4e:ba:5c:de:3c: 02:cb:48:43:7a:c0:68:c5:e5:4c:f1:c1:f2:cb:5d: b8:cb:5b:88:4d:d5:21:15:6d:17:e8:cb:f6:0d:69: 66:0f:30:5b:26:ca:7a:fd:c5:b1:74:f0:39:9b:28: 68:9d:c2:6f:1e:2a:67:a8:a7:02:84:63:10:19:f1: ab:13:da:c2:f9:85:fa:95:dd:0e:69:bd:fb:74:e8: fe:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:48:75:96:A2:43:1F:24:4F:4C:76:3B:BE:C9:DC:1A:3E:09:9F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:67:64:e9:d3:5b:41:97:73:b9:dc:f5:1c:65:4e:db:29:b4: 44:d8:fd:00:f3:35:1c:39:3d:c5:96:bc:19:3d:90:ed:fb:b6: 75:b4:78:d2:72:44:05:dc:41:0c:c0:38:71:83:d0:ed:82:3b: 23:9d:7e:52:60:8c:98:3a:fb:c1:6e:5f:2f:aa:2d:1c:b2:c8: e9:82:63:b6:62:bb:da:ad:1c:a1:c2:ab:54:e1:fd:fe:a0:23: 25:0e:23:f7:1d:05:42:58:f4:a3:a9:51:14:32:2b:a2:de:18: a5:89:0c:34:a7:c6:75:b7:be:cb:13:88:b0:81:60:c0:ab:e2: 98:82:90:9b:be:be:c2:96:0c:cf:0b:d0:a4:4e:1e:52:9e:f6: 54:54:af:4c:9f:f4:9b:28:8b:10:96:c0:3b:8a:b7:1e:35:6d: 88:17:7e:f9:4d:77:8b:ec:90:6f:eb:39:b4:e5:69:83:23:1e: bb:16:cf:8b:ed:2f:bb:e5:7a:40:d7:ed:a1:bd:4e:ab:dd:1f: 9c:8b:fe:6e:ff:6c:08:9c:f7:9a:fc:43:07:ec:79:12:87:93: ca:9f:c7:1e:a3:00:92:d5:ab:e4:7d:1c:3a:32:ce:c4:8f:0a: d0:c9:80:92:bc:a8:07:7d:03:13:e2:63:08:c8:c2:72:40:f9: e1:4d:3b:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnjTDSzYBV+f1nya8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNzIyNTU1MloXDTI1MDgxNTIyNTU1MlowLzEtMCsGA1UEAxMk YzIwMTcxM2ItYzVkOS00OTBmLWFkNWMtNWUzNDQzNGFhYjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPtEnGd1PKVxuC9DHDur6lpHniP4cbyZGbpR OlJiqKv0ySKIK82ZRVkBz4fkXVGQXNeIUZDTec3xxGlz9BBJzJ8jkDOMRKBiQh+p 3bj1yO5XlwSSje9RmbVw5nfhIUEgZOJxKzlW5RPW56HVgkSP4K7ZWtDFgupd7f7z m/AwmgOteRV0u3tbLZ3jYZT8+cKs5hPBx+ym7MzsBG+ocgojxLAg1D+6u2H0uDhr /vaTTrpc3jwCy0hDesBoxeVM8cHyy124y1uITdUhFW0X6Mv2DWlmDzBbJsp6/cWx dPA5myhoncJvHipnqKcChGMQGfGrE9rC+YX6ld0Oab37dOj+JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdIdZaiQx8kT0x2O77J3Bo+CZ+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjVlZTdjM2EtZjc1MS0z M2U0LWI5ZTItMzdhZjE1YWFiYTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdnZOnTW0GXc7nc9RxlTtsptETY/QDzNRw5PcWWvBk9kO37tnW0eNJy RAXcQQzAOHGD0O2COyOdflJgjJg6+8FuXy+qLRyyyOmCY7Ziu9qtHKHCq1Th/f6g IyUOI/cdBUJY9KOpURQyK6LeGKWJDDSnxnW3vssTiLCBYMCr4piCkJu+vsKWDM8L 0KROHlKe9lRUr0yf9JsoixCWwDuKtx41bYgXfvlNd4vskG/rObTlaYMjHrsWz4vt L7vlekDX7aG9TqvdH5yL/m7/bAic95r8QwfseRKHk8qfxx6jAJLVq+R9HDoyzsSP CtDJgJK8qAd9AxPiYwjIwnJA+eFNOyY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:27:06 2025 by rpki-client