$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b9116837-e5d6-3169-80de-95f0f7e66807.roa File: b9116837-e5d6-3169-80de-95f0f7e66807.roa (raw, json) Hash identifier: +zunt2Hi9j0GpWPBPtFPiPi9K8L5zsSIqxHKZw05oRU= Subject key identifier: 1F:AF:80:2E:C8:4B:BD:91:E4:5A:ED:44:25:16:59:91:C8:D7:C8:96 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849FE5AB60A8BD9B1171E863640 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b9116837-e5d6-3169-80de-95f0f7e66807.roa Signing time: Tue 27 May 2025 15:31:55 +0000 ROA not before: Tue 27 May 2025 15:31:55 +0000 ROA not after: Mon 25 Aug 2025 15:31:55 +0000 asID: 8069 IP address blocks: 20.153.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:5a:b6:0a:8b:d9:b1:17:1e:86:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 27 15:31:55 2025 GMT Not After : Aug 25 15:31:55 2025 GMT Subject: CN=a3ef6d54-d8a3-425a-91e3-1d4141f3c059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8b:3b:1f:cd:07:72:45:60:64:71:84:fb:c5: 3b:1e:43:21:a3:ee:f7:46:50:48:ec:c8:3e:0c:dd: 3a:96:dd:ac:d7:84:9b:d1:dd:aa:8c:8c:07:f2:52: 55:2f:c9:8c:47:09:a4:71:1e:54:65:3c:b7:4b:c4: 47:d9:ce:cc:df:63:56:1a:84:74:58:ca:0a:63:66: ad:2e:7d:f7:aa:20:1d:0f:69:5b:92:aa:73:63:b0: 08:21:a1:fd:c2:10:64:43:26:cc:06:90:8f:59:66: 89:bc:01:85:93:fe:ac:f7:7b:77:7c:c6:97:6d:ae: 41:8b:14:2e:4c:d0:55:0a:cb:c3:c6:5e:c4:05:a8: e8:87:c9:f6:87:73:f1:39:8a:14:ca:47:02:6b:91: 1f:3a:88:25:fd:f6:38:56:11:ed:10:2d:37:b7:42: b7:a8:8a:c3:2c:20:af:d5:dd:c8:cb:e2:df:f1:0f: 97:db:82:4e:6b:69:35:f9:79:8d:d7:29:79:78:b4: 88:1c:f2:f8:a5:3b:ce:81:12:cc:9e:d0:d1:49:61: 45:ee:a2:aa:a7:bf:eb:a6:a6:48:53:d4:a7:73:11: 59:96:f7:fc:08:6c:17:45:fd:c8:a2:d3:29:0a:74: c7:49:00:ac:b0:e7:9e:c2:fa:fa:7c:ff:18:8e:8e: 22:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AF:80:2E:C8:4B:BD:91:E4:5A:ED:44:25:16:59:91:C8:D7:C8:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b9116837-e5d6-3169-80de-95f0f7e66807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:fb:c2:fc:fb:d9:06:ca:82:75:ad:08:dc:53:10:a4:8c:25: 5e:a7:7a:cc:c5:fb:fc:f0:8a:b4:0b:19:98:72:35:43:57:da: aa:15:d6:62:85:96:5a:3b:25:83:09:b0:7e:26:c2:53:22:2a: 9a:ea:e2:cf:16:82:0b:06:ac:86:d8:c4:89:cf:7e:75:54:c5: 0a:87:63:8d:d9:80:0f:4d:71:e9:43:80:a2:20:94:4c:a7:51: bf:11:c6:be:be:d1:c4:58:da:17:ea:4c:f6:93:09:85:cc:84: 94:d6:b8:3c:85:06:68:cb:2d:da:26:f8:50:47:65:26:12:85: 5f:6b:40:70:7d:7c:08:95:cd:28:b7:55:f6:34:72:1c:2e:f1: b4:0b:5a:71:97:57:34:19:04:8f:69:4d:1f:2e:fc:c0:85:41: 32:0f:42:b1:5a:a2:f7:d4:77:dc:e1:0b:96:d9:66:de:cc:e3: 38:b2:83:8f:06:66:07:16:1e:93:e8:1e:be:91:5c:ef:31:b6: 3d:00:91:d6:98:72:0e:66:b3:85:05:ad:5e:7c:60:bc:14:a8: f9:53:ab:13:86:3b:6e:67:2f:97:25:62:1a:6f:f6:30:f0:45: 0c:1a:47:7b:8e:17:11:55:b0:1e:c9:25:16:29:e7:2b:e4:fa: 6f:89:88:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+WrYKi9mxFx6GNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUyNzE1MzE1NVoXDTI1MDgyNTE1MzE1NVowLzEtMCsGA1UEAxMk YTNlZjZkNTQtZDhhMy00MjVhLTkxZTMtMWQ0MTQxZjNjMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYs7H80HckVgZHGE+8U7HkMho+73RlBI7Mg+ DN06lt2s14Sb0d2qjIwH8lJVL8mMRwmkcR5UZTy3S8RH2c7M32NWGoR0WMoKY2at Ln33qiAdD2lbkqpzY7AIIaH9whBkQybMBpCPWWaJvAGFk/6s93t3fMaXba5BixQu TNBVCsvDxl7EBajoh8n2h3PxOYoUykcCa5EfOogl/fY4VhHtEC03t0K3qIrDLCCv 1d3Iy+Lf8Q+X24JOa2k1+XmN1yl5eLSIHPL4pTvOgRLMntDRSWFF7qKqp7/rpqZI U9SncxFZlvf8CGwXRf3IotMpCnTHSQCssOeewvr6fP8Yjo4iDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+vgC7IS72R5FrtRCUWWZHI18iWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjkxMTY4MzctZTVkNi0z MTY5LTgwZGUtOTVmMGY3ZTY2ODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD77wvz72QbKgnWtCNxTEKSMJV6neszF+/zwirQLGZhyNUNX2qoV1mKF llo7JYMJsH4mwlMiKprq4s8WggsGrIbYxInPfnVUxQqHY43ZgA9NcelDgKIglEyn Ub8Rxr6+0cRY2hfqTPaTCYXMhJTWuDyFBmjLLdom+FBHZSYShV9rQHB9fAiVzSi3 VfY0chwu8bQLWnGXVzQZBI9pTR8u/MCFQTIPQrFaovfUd9zhC5bZZt7M4ziyg48G ZgcWHpPoHr6RXO8xtj0AkdaYcg5ms4UFrV58YLwUqPlTqxOGO25nL5clYhpv9jDw RQwaR3uOFxFVsB7JJRYp5yvk+m+JiCQ= -----END CERTIFICATE-----Generated at Sun Jun 15 16:32:44 2025 by rpki-client