$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa File: b7b843e5-1b24-372c-a453-258435c10dbf.roa (raw, json) Hash identifier: G1JKbQbYl7okBvcVlV4C75jNVaimNSEo6IQb9HOncFg= Subject key identifier: 81:1C:3E:63:E0:1D:FE:F5:21:BF:07:B8:EF:74:87:B6:36:C3:89:4D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584954477EEA9571B6DFC89681C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa Signing time: Thu 27 Mar 2025 17:25:47 +0000 ROA not before: Thu 27 Mar 2025 17:25:47 +0000 ROA not after: Wed 25 Jun 2025 17:25:47 +0000 asID: 8069 IP address blocks: 20.153.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:54:47:7e:ea:95:71:b6:df:c8:96:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 27 17:25:47 2025 GMT Not After : Jun 25 17:25:47 2025 GMT Subject: CN=4d50ec0a-94e6-46bc-a844-1b00cc839240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:ab:81:01:ca:10:25:b8:22:ec:dd:3b:2a: 29:35:33:bf:c4:36:60:bc:cd:ee:4f:ed:aa:dd:01: ed:1e:13:86:a9:57:18:16:20:e9:2d:fe:a6:2c:08: 73:c2:12:15:6f:f5:32:b5:51:2d:f5:55:03:b6:c0: a9:04:c8:bd:3e:b9:2b:7c:5d:33:7d:e9:30:78:dc: bf:3c:4a:0b:26:95:53:28:23:f1:c6:cf:59:7a:62: 48:c0:1c:54:c4:45:f0:65:f5:48:ce:b8:fc:9d:40: ce:26:91:0c:78:93:0e:a4:aa:74:67:da:a8:a9:5b: c4:15:79:1f:7f:f0:07:99:66:ae:f8:b1:a4:a0:bb: 15:74:f3:30:b4:eb:06:db:c8:e4:ad:13:84:03:80: 18:13:5c:f7:5e:78:fe:b6:4b:b4:9c:33:9a:bc:c3: eb:6d:05:3e:c5:36:d2:0b:9f:0b:6f:0e:98:5e:3a: b0:20:d0:c0:bf:dd:8c:0e:7c:76:80:cc:ef:da:0f: 79:78:23:94:55:42:21:f5:da:39:a4:dd:73:1e:cf: 03:47:4a:83:2c:4e:35:34:2d:5c:07:ec:78:fb:e6: be:6b:c3:f8:ca:7c:ab:90:d6:fa:0e:8b:29:ce:90: 41:90:7d:db:78:5f:47:e7:de:8a:82:71:42:ed:c3: 38:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1C:3E:63:E0:1D:FE:F5:21:BF:07:B8:EF:74:87:B6:36:C3:89:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:8e:8a:2d:03:6f:8d:d4:61:81:b2:02:f1:55:e0:9f:14:10: 79:38:9a:ba:86:5b:3f:6d:81:eb:ca:b6:d3:e4:83:34:a1:d7: 4d:d5:9f:81:99:65:df:d9:26:24:db:5b:8f:46:b4:46:bc:4d: 47:a1:81:6e:f0:bc:9c:88:40:39:17:80:8f:38:1f:69:47:86: 90:8a:32:86:85:1f:c0:63:76:82:9c:c1:18:8b:94:af:e7:76: bf:7c:a5:aa:11:0d:fa:da:c4:52:c4:3a:3b:04:9e:1d:31:d3: 7b:25:fe:ea:c7:04:1d:16:a7:98:46:93:47:da:eb:f6:8c:3f: 2d:1b:db:1a:8b:5a:ae:2b:04:c0:1b:4a:25:5e:7c:37:a6:ca: 99:15:c7:4f:f5:bb:60:0c:3a:c5:89:44:cc:e1:42:fa:01:db: 4f:38:87:58:8f:b2:9b:48:6a:bf:d0:68:f7:f7:c8:7c:c3:3b: 96:c2:f3:21:cd:b0:11:d6:fb:28:8d:58:55:68:74:6c:d8:96: 73:3b:21:bf:86:e9:94:b7:fc:8e:f9:51:16:30:f8:63:d2:d3: ab:76:87:0f:15:13:ea:f3:9a:8d:59:24:d6:23:95:5b:9d:ae: ab:56:c2:f6:cf:fa:d1:2a:cf:de:ba:aa:1c:ef:c8:e3:69:64: 69:28:6d:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElUR37qlXG238iWgcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyNzE3MjU0N1oXDTI1MDYyNTE3MjU0N1owLzEtMCsGA1UEAxMk NGQ1MGVjMGEtOTRlNi00NmJjLWE4NDQtMWIwMGNjODM5MjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3SrgQHKECW4IuzdOyopNTO/xDZgvM3uT+2q 3QHtHhOGqVcYFiDpLf6mLAhzwhIVb/UytVEt9VUDtsCpBMi9PrkrfF0zfekweNy/ PEoLJpVTKCPxxs9ZemJIwBxUxEXwZfVIzrj8nUDOJpEMeJMOpKp0Z9qoqVvEFXkf f/AHmWau+LGkoLsVdPMwtOsG28jkrROEA4AYE1z3Xnj+tku0nDOavMPrbQU+xTbS C58Lbw6YXjqwINDAv92MDnx2gMzv2g95eCOUVUIh9do5pN1zHs8DR0qDLE41NC1c B+x4++a+a8P4ynyrkNb6DospzpBBkH3beF9H596KgnFC7cM4HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEcPmPgHf71Ib8HuO90h7Y2w4lNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjdiODQzZTUtMWIyNC0z NzJjLWE0NTMtMjU4NDM1YzEwZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+Oii0Db43UYYGyAvFV4J8UEHk4mrqGWz9tgevKttPkgzSh103Vn4GZ Zd/ZJiTbW49GtEa8TUehgW7wvJyIQDkXgI84H2lHhpCKMoaFH8BjdoKcwRiLlK/n dr98paoRDfraxFLEOjsEnh0x03sl/urHBB0Wp5hGk0fa6/aMPy0b2xqLWq4rBMAb SiVefDemypkVx0/1u2AMOsWJRMzhQvoB2084h1iPsptIar/QaPf3yHzDO5bC8yHN sBHW+yiNWFVodGzYlnM7Ib+G6ZS3/I75URYw+GPS06t2hw8VE+rzmo1ZJNYjlVud rqtWwvbP+tEqz966qhzvyONpZGkobdc= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:27 2025 by rpki-client