$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa File: bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa (raw, json) Hash identifier: kF+8ngVC1vn8ohM5zU4EMKHsVx9c0s3VLbfcb0QJRKs= Subject key identifier: 7A:1A:2D:8B:5C:8F:7A:B7:F9:85:8A:70:CC:6D:71:9B:E9:79:9F:39 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A146565C0C4D34290264E4D80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 8069 IP address blocks: 20.157.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:65:c0:c4:d3:42:90:26:4e:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=e9247c89-b1c7-4cf8-8679-94d67b088d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:42:74:eb:dc:3a:42:c3:ac:52:66:7e:f3:ef: de:4d:11:1c:77:6f:02:15:1b:dc:1c:5a:7d:7a:75: 6a:ce:11:27:13:e6:cb:e6:ac:f0:70:fd:14:40:8a: 63:33:2f:2b:a2:eb:39:a8:f6:88:2e:2a:5e:06:c0: 2c:a9:4c:b1:25:14:56:d6:4e:ba:cc:1a:55:ad:82: 81:8b:c3:fd:e4:f6:34:83:f5:13:df:89:58:49:2e: 05:a7:32:9f:60:7f:8a:10:63:31:74:dd:6c:a5:21: d4:06:c3:bb:7e:c9:f2:a6:73:2f:da:d7:2d:7c:99: 8f:2e:90:01:91:40:11:0c:35:96:f5:c4:fc:2b:0d: 02:31:2a:26:35:a1:1c:5c:e4:85:96:57:16:a5:06: bc:cb:3e:4d:22:d3:66:0c:a7:12:cf:79:b6:32:57: d5:45:dd:e1:f0:ce:fd:e9:ab:ff:58:3b:18:bc:0a: b8:a1:51:54:8f:bd:b2:61:95:84:6d:cd:68:0d:23: ab:d7:17:d3:1f:45:63:65:4e:51:3e:9d:1d:78:88: 92:25:e7:b2:7f:fe:b4:b3:d7:c2:0c:3c:7f:6b:f0: 76:eb:55:98:2f:02:3d:9c:39:f2:35:53:21:32:bf: 42:89:89:c1:0c:2e:bf:9f:ff:e7:c0:ac:c9:d9:01: c8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1A:2D:8B:5C:8F:7A:B7:F9:85:8A:70:CC:6D:71:9B:E9:79:9F:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:6d:e3:f1:95:4d:f3:78:81:55:49:5a:c2:cd:6c:05:87:d1: ad:1c:31:d8:e5:23:8e:e4:18:c7:1d:5c:c3:a0:9d:82:0a:d6: 33:c2:eb:3f:54:24:3a:67:c9:41:68:c4:b2:26:ea:cc:27:be: 3f:cd:ab:03:d6:c6:a7:70:65:72:47:c9:69:8c:37:be:ad:ff: cf:f9:09:e9:5c:fb:30:56:5e:fa:a7:23:db:e4:85:ea:d0:f5: b0:ec:fe:6f:fd:76:02:d4:40:d4:59:c3:04:c1:2e:64:37:d4: f6:90:28:ec:b8:c3:1b:68:6a:5f:b2:2b:11:94:22:f1:fe:ce: 4a:a1:77:de:9f:a5:d5:8d:0b:cf:d6:77:a2:06:25:4a:f0:b3: 09:b3:b8:74:0f:5d:e7:b0:87:88:50:ea:e4:0c:f3:a8:e1:5b: 5b:82:28:5b:9e:fd:2f:27:95:f6:4d:ff:1d:dd:16:cf:64:b3: e2:73:bf:19:8c:1b:86:cc:59:6a:a6:21:71:ce:c7:3d:98:f7: c6:4f:7e:4b:a7:2e:ed:aa:61:37:38:89:5c:c2:79:f9:ac:7c: 60:53:c3:31:8a:cb:70:cd:d2:1a:9a:6e:65:e1:67:8a:00:03: bd:6f:c6:10:de:de:e1:8d:a7:c8:94:79:d5:cc:87:5b:29:c5: 4b:5e:09:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZWXAxNNCkCZOTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ZTkyNDdjODktYjFjNy00Y2Y4LTg2NzktOTRkNjdiMDg4ZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkJ069w6QsOsUmZ+8+/eTREcd28CFRvcHFp9 enVqzhEnE+bL5qzwcP0UQIpjMy8rous5qPaILipeBsAsqUyxJRRW1k66zBpVrYKB i8P95PY0g/UT34lYSS4FpzKfYH+KEGMxdN1spSHUBsO7fsnypnMv2tctfJmPLpAB kUARDDWW9cT8Kw0CMSomNaEcXOSFllcWpQa8yz5NItNmDKcSz3m2MlfVRd3h8M79 6av/WDsYvAq4oVFUj72yYZWEbc1oDSOr1xfTH0VjZU5RPp0deIiSJeeyf/60s9fC DDx/a/B261WYLwI9nDnyNVMhMr9CiYnBDC6/n//nwKzJ2QHInQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoaLYtcj3q3+YWKcMxtcZvpeZ85MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYmY0NmQxOTQtMGRkMi0z NmNjLWFlNGEtN2JjZmZhNTBlYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1t4/GVTfN4gVVJWsLNbAWH0a0cMdjlI47kGMcdXMOgnYIK1jPC6z9U JDpnyUFoxLIm6swnvj/NqwPWxqdwZXJHyWmMN76t/8/5Celc+zBWXvqnI9vkherQ 9bDs/m/9dgLUQNRZwwTBLmQ31PaQKOy4wxtoal+yKxGUIvH+zkqhd96fpdWNC8/W d6IGJUrwswmzuHQPXeewh4hQ6uQM86jhW1uCKFue/S8nlfZN/x3dFs9ks+JzvxmM G4bMWWqmIXHOxz2Y98ZPfkunLu2qYTc4iVzCefmsfGBTwzGKy3DN0hqabmXhZ4oA A71vxhDe3uGNp8iUedXMh1spxUteCZg= -----END CERTIFICATE-----Generated at Sun Jun 15 15:48:26 2025 by rpki-client