$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c94cb722-73e6-3d84-8ff9-c329ac78b958.roa File: c94cb722-73e6-3d84-8ff9-c329ac78b958.roa (raw, json) Hash identifier: yStp/T9f0x2cYxhYQjyIKbufbmN+61DENRQErcC9oJQ= Subject key identifier: DF:09:1C:91:17:53:22:9A:39:87:C5:A0:57:E2:D1:D5:73:A5:DA:8F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A15CA950EF0D49C0149528200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c94cb722-73e6-3d84-8ff9-c329ac78b958.roa Signing time: Thu 05 Jun 2025 01:00:51 +0000 ROA not before: Thu 05 Jun 2025 01:00:51 +0000 ROA not after: Wed 03 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.153.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:ca:95:0e:f0:d4:9c:01:49:52:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 5 01:00:51 2025 GMT Not After : Sep 3 01:00:51 2025 GMT Subject: CN=02d60737-3fab-43d2-9536-f01846aad12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b4:ec:7e:87:4b:ef:33:22:8c:d2:cb:90:ff: ca:60:48:4e:04:1b:4e:60:52:25:4e:54:14:84:c9: 1b:1c:f3:05:68:7a:78:d1:5e:5e:27:1e:f0:59:59: 76:28:c8:53:47:d9:31:6e:bf:81:19:41:53:6b:f5: a3:f6:0b:67:fd:d4:06:d0:62:0a:b2:9a:df:ed:b0: e2:68:1e:4f:28:fd:99:a9:1d:05:a4:94:e0:93:44: 91:b5:ab:64:d1:61:ec:a7:0d:2a:1a:b6:cc:67:e8: 54:8a:26:7b:d7:d1:eb:9b:49:ad:7b:65:ad:7f:0e: 4b:59:2e:78:1f:0d:19:99:df:85:4b:be:8c:e1:f9: a4:52:54:e6:12:cb:36:ab:b2:d9:a9:70:42:7d:c5: d8:c3:a1:be:1c:ac:b4:01:5a:28:c1:59:6d:90:7c: 76:a2:18:4e:bc:87:d1:6a:48:12:e6:0a:61:21:a8: 18:40:66:0f:d1:3b:e2:53:9f:e8:fe:ec:e2:4a:d5: 8f:b2:fc:83:c8:2e:27:7d:2e:47:38:2a:d5:57:16: 5b:82:f3:89:99:9f:13:b9:6d:06:16:d8:5e:75:10: 5c:e0:8b:27:0e:28:20:2a:63:6d:46:29:1d:a7:ae: 82:95:f7:88:67:d6:7e:a4:a9:65:c9:d2:a7:50:c4: dd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:09:1C:91:17:53:22:9A:39:87:C5:A0:57:E2:D1:D5:73:A5:DA:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c94cb722-73e6-3d84-8ff9-c329ac78b958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:e3:b2:8d:74:61:1c:74:62:b1:f2:45:e3:4b:38:08:cf:2b: 71:4b:6c:54:6c:69:ad:f7:d2:87:27:e4:c2:0a:2d:cd:38:0d: 75:c2:28:45:55:a9:8e:4a:f3:86:69:bc:4d:77:55:e7:87:a6: c4:98:df:94:81:32:c6:66:94:d1:41:64:43:e4:ae:8f:a6:9f: e6:fb:8e:b2:78:f3:4c:6a:28:7b:b9:1e:dd:ae:33:80:e4:46: 60:0f:14:3f:98:10:c7:79:79:bd:a5:81:95:26:e0:b7:3d:ae: c6:be:e0:86:40:c4:eb:14:51:d2:88:9d:d9:2a:ff:e6:7d:00: af:b1:47:ac:15:a6:42:c6:0f:2e:d3:d2:96:5b:ea:68:22:2c: 95:88:03:04:45:da:4f:51:07:64:2f:68:1a:22:0c:00:ca:27: 11:fc:3f:94:fd:34:84:b2:27:e5:d0:19:e9:21:95:10:c2:f9: 77:87:9a:22:50:d1:cf:64:19:77:30:bc:e5:9a:7f:4e:a5:f1: df:89:a4:63:40:4f:47:d0:aa:67:46:76:50:1e:7f:28:4d:83: b7:1b:85:8d:7e:4b:aa:2b:59:f7:f7:34:b9:28:e1:bf:49:ab: 4a:61:72:60:b6:65:4e:0d:21:ed:2b:a6:d1:ec:3a:f1:fd:fd: 2f:24:94:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoVypUO8NScAUlSggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNTAxMDA1MVoXDTI1MDkwMzAxMDA1MVowLzEtMCsGA1UEAxMk MDJkNjA3MzctM2ZhYi00M2QyLTk1MzYtZjAxODQ2YWFkMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibTsfodL7zMijNLLkP/KYEhOBBtOYFIlTlQU hMkbHPMFaHp40V5eJx7wWVl2KMhTR9kxbr+BGUFTa/Wj9gtn/dQG0GIKsprf7bDi aB5PKP2ZqR0FpJTgk0SRtatk0WHspw0qGrbMZ+hUiiZ719Hrm0mte2Wtfw5LWS54 Hw0Zmd+FS76M4fmkUlTmEss2q7LZqXBCfcXYw6G+HKy0AVoowVltkHx2ohhOvIfR akgS5gphIagYQGYP0TviU5/o/uziStWPsvyDyC4nfS5HOCrVVxZbgvOJmZ8TuW0G FthedRBc4IsnDiggKmNtRikdp66ClfeIZ9Z+pKllydKnUMTdJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8JHJEXUyKaOYfFoFfi0dVzpdqPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzk0Y2I3MjItNzNlNi0z ZDg0LThmZjktYzMyOWFjNzhiOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPjso10YRx0YrHyReNLOAjPK3FLbFRsaa330ocn5MIKLc04DXXCKEVV qY5K84ZpvE13VeeHpsSY35SBMsZmlNFBZEPkro+mn+b7jrJ480xqKHu5Ht2uM4Dk RmAPFD+YEMd5eb2lgZUm4Lc9rsa+4IZAxOsUUdKIndkq/+Z9AK+xR6wVpkLGDy7T 0pZb6mgiLJWIAwRF2k9RB2QvaBoiDADKJxH8P5T9NISyJ+XQGekhlRDC+XeHmiJQ 0c9kGXcwvOWaf06l8d+JpGNAT0fQqmdGdlAefyhNg7cbhY1+S6orWff3NLko4b9J q0phcmC2ZU4NIe0rptHsOvH9/S8klFU= -----END CERTIFICATE-----Generated at Sun Jun 15 15:24:05 2025 by rpki-client