$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa File: c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa (raw, json) Hash identifier: aUTrDTofq9IRsm+MkG+iczIj9V2+k0A2zRGl8lSwuU0= Subject key identifier: 40:BC:78:A8:F6:F0:E0:A2:94:85:FE:19:30:3D:E3:AF:C1:63:D8:8C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858493673BC6443C357EFBAE6F880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa Signing time: Mon 17 Mar 2025 01:00:37 +0000 ROA not before: Mon 17 Mar 2025 01:00:37 +0000 ROA not after: Sun 15 Jun 2025 01:00:37 +0000 asID: 8069 IP address blocks: 20.153.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:36:73:bc:64:43:c3:57:ef:ba:e6:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 17 01:00:37 2025 GMT Not After : Jun 15 01:00:37 2025 GMT Subject: CN=d07bb8a2-355b-45c3-aa83-2ce1d33a7b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f4:97:a3:2c:02:1c:59:7d:12:09:0c:29:7c: a8:83:ee:a2:5c:fd:44:bd:13:04:11:74:90:9a:99: e8:e8:95:8e:57:ad:8e:b2:64:34:42:36:a7:e6:f8: e5:79:34:2a:01:9a:a7:62:b8:71:1b:29:c7:fe:77: 3d:c4:44:9e:9f:d4:a3:f5:55:ff:34:89:dc:f3:3b: 3b:c8:c3:ab:e8:f0:3a:ca:1f:46:cf:a1:66:e5:9d: 59:d1:4e:31:53:93:38:cf:9d:4d:a2:6a:82:4a:f0: a2:ab:9d:30:e8:2b:54:1c:fc:93:d0:19:4a:0e:8f: 48:33:6a:cb:a7:da:5e:8a:f6:97:21:96:9d:64:38: a9:6f:00:31:6d:9e:6e:c3:aa:4e:36:fc:a3:d0:1b: 20:60:4e:82:1a:95:6a:83:fd:b9:82:4c:e2:53:f9: ba:f6:2f:62:c0:45:81:cf:e1:b4:03:c9:24:7f:16: 5b:aa:88:d6:67:82:cd:52:3a:6c:d4:1f:3a:22:6b: 53:aa:56:46:03:e7:d0:d6:0f:57:95:94:06:e9:e6: 1c:46:12:11:ee:cd:5d:15:f9:5d:d3:34:b9:cd:81: 3e:e7:14:30:a1:63:83:7a:97:39:27:ee:1f:78:1c: 2f:66:92:f7:73:94:a7:c2:48:4c:ed:55:c5:2f:c1: ac:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BC:78:A8:F6:F0:E0:A2:94:85:FE:19:30:3D:E3:AF:C1:63:D8:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4cc327a-172a-3b79-aa08-dd5f2fdd3f92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b0:27:91:3e:15:13:af:14:01:0e:2e:43:34:dc:57:4e:a1: 87:7e:28:f8:c8:27:34:62:1e:92:86:92:b5:a1:41:70:34:a7: b3:fa:5a:ea:48:7e:dc:27:23:f2:e4:43:fa:f5:6b:d4:ca:d4: c9:72:73:18:13:96:0a:5e:23:e6:6a:b8:67:04:9f:f1:3c:52: fb:af:4d:61:d8:13:b7:05:af:a8:ad:e4:64:e5:7a:08:c9:42: 59:fd:4c:88:04:5f:d6:28:ff:6b:70:a4:3a:fb:4a:5f:e1:52: 46:f4:5f:35:b7:e9:36:a2:26:8e:3e:5d:c2:cb:0b:b3:56:22: 03:9e:e8:d8:a4:9d:bb:56:72:34:58:81:90:32:33:6f:b3:8b: 40:11:67:80:9a:a4:bb:13:65:f5:67:e9:f8:70:5f:39:e6:dd: 91:e0:61:8b:d5:e2:0f:4c:ec:4a:3d:77:9b:af:8b:ae:9a:3b: 7b:bc:c0:9e:bc:de:96:0d:10:cd:e3:4b:cd:37:60:6f:bf:f3: 0b:e2:38:24:fe:1a:c4:70:15:79:60:6b:2a:80:23:e7:16:f6: cb:2f:44:dc:18:ee:f4:73:27:ec:30:83:b0:5d:69:c4:dd:e8: 37:fa:76:a8:0a:8c:9a:36:af:17:d3:a9:23:22:26:c3:61:9d: 22:55:f0:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk2c7xkQ8NX77rm+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxNzAxMDAzN1oXDTI1MDYxNTAxMDAzN1owLzEtMCsGA1UEAxMk ZDA3YmI4YTItMzU1Yi00NWMzLWFhODMtMmNlMWQzM2E3YjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfSXoywCHFl9EgkMKXyog+6iXP1EvRMEEXSQ mpno6JWOV62OsmQ0Qjan5vjleTQqAZqnYrhxGynH/nc9xESen9Sj9VX/NInc8zs7 yMOr6PA6yh9Gz6Fm5Z1Z0U4xU5M4z51NomqCSvCiq50w6CtUHPyT0BlKDo9IM2rL p9peivaXIZadZDipbwAxbZ5uw6pONvyj0BsgYE6CGpVqg/25gkziU/m69i9iwEWB z+G0A8kkfxZbqojWZ4LNUjps1B86ImtTqlZGA+fQ1g9XlZQG6eYcRhIR7s1dFfld 0zS5zYE+5xQwoWODepc5J+4feBwvZpL3c5SnwkhM7VXFL8GsWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEC8eKj28OCilIX+GTA946/BY9iMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzRjYzMyN2EtMTcyYS0z Yjc5LWFhMDgtZGQ1ZjJmZGQzZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEywJ5E+FROvFAEOLkM03FdOoYd+KPjIJzRiHpKGkrWhQXA0p7P6WupI ftwnI/LkQ/r1a9TK1MlycxgTlgpeI+ZquGcEn/E8UvuvTWHYE7cFr6it5GTlegjJ Qln9TIgEX9Yo/2twpDr7Sl/hUkb0XzW36TaiJo4+XcLLC7NWIgOe6NiknbtWcjRY gZAyM2+zi0ARZ4CapLsTZfVn6fhwXznm3ZHgYYvV4g9M7Eo9d5uvi66aO3u8wJ68 3pYNEM3jS803YG+/8wviOCT+GsRwFXlgayqAI+cW9ssvRNwY7vRzJ+wwg7BdacTd 6Df6dqgKjJo2rxfTqSMiJsNhnSJV8HA= -----END CERTIFICATE-----Generated at Sun Apr 27 05:36:41 2025 by rpki-client