$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c073bdde-3133-316c-aca0-6453facdfded.roa File: c073bdde-3133-316c-aca0-6453facdfded.roa (raw, json) Hash identifier: 4Ea+/TfT5RIm6ro8f8IsjicOkfkr4NFQCKltB0WiGFs= Subject key identifier: 7B:BF:32:A5:B6:FC:69:0A:D0:D8:B5:D5:5F:DD:49:BE:6E:C0:FA:2C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849BF3FA709884BEAC026AAF4E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c073bdde-3133-316c-aca0-6453facdfded.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.153.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a7:09:88:4b:ea:c0:26:aa:f4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=c6b7ca12-7f95-469c-a683-2ae7cffb21be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4e:61:c7:42:3e:7c:4d:f9:cf:2a:87:64:72: 72:bd:52:35:a6:ca:cc:be:b6:42:01:17:9c:14:fb: 1b:bc:54:eb:be:4b:1d:81:f4:05:02:bc:b3:87:5b: 4e:8f:cd:ea:3f:84:b4:d4:ff:de:63:25:9e:f9:43: 10:90:96:60:1f:90:2c:b7:b5:12:a4:b1:2b:c5:58: ee:79:cf:83:4f:8d:7f:0e:56:1b:34:ef:5f:fe:ce: 4f:54:c5:1f:54:70:ef:c3:5f:b7:83:96:8e:e4:92: 14:fa:cc:b4:aa:0f:66:d5:6f:8c:be:fc:65:ca:53: 1e:0f:39:66:72:9d:b0:ed:08:84:97:f1:b2:ae:4d: 21:7c:24:84:a2:54:83:40:89:1f:4f:03:14:f7:4d: 05:b0:54:84:a0:de:71:a8:2f:a8:8b:5c:ae:38:8f: b7:7b:21:38:db:b7:f5:62:ea:34:2e:ca:a8:c5:fa: 6c:e1:a1:39:db:64:ef:79:be:7c:61:7f:e0:0e:d6: d1:64:5f:80:84:f6:ab:03:09:1b:0d:59:31:3c:12: 6b:a0:ab:67:73:84:71:a7:97:fa:60:29:88:c0:70: 0e:1f:06:f9:3e:39:94:6b:d8:74:97:ee:d7:01:04: 20:0b:25:60:15:c6:9f:47:3c:16:11:ee:96:e8:45: 6e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BF:32:A5:B6:FC:69:0A:D0:D8:B5:D5:5F:DD:49:BE:6E:C0:FA:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c073bdde-3133-316c-aca0-6453facdfded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:95:41:04:72:4a:2b:44:30:52:a6:8f:33:13:e1:9e:e6:8a: f3:43:c9:dc:97:4a:c5:88:28:10:c1:35:c8:8b:23:b8:61:f6: 73:da:50:ea:e2:0c:1c:5d:f6:f9:f7:a4:67:c1:8f:49:3d:66: a5:34:54:7a:e3:6c:f1:ec:3b:1b:d8:73:b6:81:12:e4:26:c1: 8b:13:b4:c1:00:49:89:92:35:c2:4e:bf:a5:b9:00:7d:50:b9: 4c:1a:77:fb:66:22:9b:08:b0:d8:94:00:17:84:80:50:9d:6b: ba:db:b4:c1:3d:37:8e:f5:d6:b7:8e:a4:d2:09:63:e7:4f:95: 0c:e5:bf:22:96:f6:37:07:34:ea:0b:bc:1f:ac:83:38:8c:d2: df:4b:f6:2b:3c:e2:71:f3:8c:c5:45:75:de:28:0a:8a:6d:89: f8:b0:19:b7:43:bd:02:4f:6c:56:52:9a:2f:27:c7:a9:01:56: 17:fb:91:e0:20:ad:18:7a:71:42:bc:66:8d:b1:84:84:e3:c3: 92:99:86:25:de:94:05:a2:45:5c:a9:9c:4f:09:43:b3:e2:38: c6:b2:59:8b:b3:9a:4f:60:f8:14:3e:b2:f5:ab:1c:af:31:0b: 84:49:ab:1d:2e:2a:8a:85:2b:06:07:c1:db:63:37:c1:f9:c3: 73:0c:ae:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6cJiEvqwCaq9OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YzZiN2NhMTItN2Y5NS00NjljLWE2ODMtMmFlN2NmZmIyMWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk5hx0I+fE35zyqHZHJyvVI1psrMvrZCARec FPsbvFTrvksdgfQFAryzh1tOj83qP4S01P/eYyWe+UMQkJZgH5Ast7USpLErxVju ec+DT41/DlYbNO9f/s5PVMUfVHDvw1+3g5aO5JIU+sy0qg9m1W+MvvxlylMeDzlm cp2w7QiEl/Gyrk0hfCSEolSDQIkfTwMU900FsFSEoN5xqC+oi1yuOI+3eyE427f1 Yuo0Lsqoxfps4aE522Tveb58YX/gDtbRZF+AhParAwkbDVkxPBJroKtnc4Rxp5f6 YCmIwHAOHwb5PjmUa9h0l+7XAQQgCyVgFcafRzwWEe6W6EVuOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHu/MqW2/GkK0Ni11V/dSb5uwPosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzA3M2JkZGUtMzEzMy0z MTZjLWFjYTAtNjQ1M2ZhY2RmZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiVQQRySitEMFKmjzMT4Z7mivNDydyXSsWIKBDBNciLI7hh9nPaUOri DBxd9vn3pGfBj0k9ZqU0VHrjbPHsOxvYc7aBEuQmwYsTtMEASYmSNcJOv6W5AH1Q uUwad/tmIpsIsNiUABeEgFCda7rbtME9N4711reOpNIJY+dPlQzlvyKW9jcHNOoL vB+sgziM0t9L9is84nHzjMVFdd4oCoptifiwGbdDvQJPbFZSmi8nx6kBVhf7keAg rRh6cUK8Zo2xhITjw5KZhiXelAWiRVypnE8JQ7PiOMayWYuzmk9g+BQ+svWrHK8x C4RJqx0uKoqFKwYHwdtjN8H5w3MMrs8= -----END CERTIFICATE-----Generated at Sun Jun 15 16:43:53 2025 by rpki-client