$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ccbe6b35-9d46-3d6a-b109-1ec55c7362b4.roa File: ccbe6b35-9d46-3d6a-b109-1ec55c7362b4.roa (raw, json) Hash identifier: hpoN4BNdRqU9qa/HK53p8QBR6B/j3KdR6PigVJbtXYo= Subject key identifier: 30:72:D0:98:40:74:6A:3A:6C:A6:C3:43:BB:77:B6:BF:77:32:F4:F9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849E34C31E2EC56F02FEAE6A240 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ccbe6b35-9d46-3d6a-b109-1ec55c7362b4.roa Signing time: Sat 17 May 2025 22:55:51 +0000 ROA not before: Sat 17 May 2025 22:55:51 +0000 ROA not after: Fri 15 Aug 2025 22:55:51 +0000 asID: 8069 IP address blocks: 20.153.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:4c:31:e2:ec:56:f0:2f:ea:e6:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 17 22:55:51 2025 GMT Not After : Aug 15 22:55:51 2025 GMT Subject: CN=e1ff42d1-ba15-4ec1-bd6e-0fbd9f76edd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:28:39:96:d0:34:39:37:b5:35:32:9b:03:04: 8d:e9:67:85:f5:bf:ec:89:82:89:a3:4d:58:b6:9a: 15:ac:ec:4b:c8:ed:13:c8:dc:05:f1:2a:9b:9c:f5: 23:97:4b:a5:c9:bc:4c:38:11:68:a0:f0:60:55:fb: 6e:c0:0a:ab:b9:c2:f7:3e:ca:3f:69:db:80:cd:17: ee:da:5a:00:da:8b:d8:f1:c9:7d:67:34:56:e7:02: 67:42:06:a1:f5:5c:bf:5d:a4:8b:01:7f:be:d5:49: 0e:83:a0:01:b1:1f:88:87:ab:4c:9c:1b:64:85:9d: 44:87:18:cc:ad:f3:ae:f0:25:d6:40:0a:b7:b9:ef: 78:12:df:2e:34:d0:9f:8b:d7:a9:2e:d2:3d:96:83: 90:6e:38:50:d6:66:01:ee:b6:c3:96:f1:76:c3:12: cd:70:9c:5f:5f:6b:6d:27:c5:fb:e7:32:10:d9:c2: 7f:c2:4b:e4:34:fe:03:ea:01:06:8f:33:ae:a2:08: 6e:c6:08:7a:5e:f2:8b:6c:b2:6e:be:3a:41:63:69: 46:ec:6b:e8:28:9c:96:3c:5a:00:23:7b:74:9f:06: 97:e1:8a:0b:f2:c0:06:df:25:40:f6:4c:fb:10:9f: a3:3b:90:cb:bb:8d:5c:75:3d:24:48:a8:b8:90:50: 0b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:72:D0:98:40:74:6A:3A:6C:A6:C3:43:BB:77:B6:BF:77:32:F4:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ccbe6b35-9d46-3d6a-b109-1ec55c7362b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:5b:50:6d:e9:ce:f9:fe:65:98:83:f3:7c:47:25:e4:c4:fe: fc:40:64:25:b6:11:18:7d:ad:5d:fd:5a:0d:31:bc:d0:1c:ef: 5d:21:05:ed:8a:61:53:74:47:a4:e9:77:43:11:66:7c:83:6f: 92:9d:d3:b3:85:f1:d8:cb:db:80:c6:0c:c6:f0:da:5b:58:e8: 00:1e:b2:62:40:8c:37:7c:dc:58:2b:77:6d:9b:85:3a:6f:9a: 3e:04:e2:69:13:a5:d8:d5:d9:ed:df:41:ae:0b:b6:49:c1:98: a2:74:52:2a:f8:c3:62:05:2f:64:61:f9:8a:b6:96:95:f0:74: bf:ac:e0:ed:a3:5d:2c:5d:ba:ce:c6:ca:8f:e0:e5:02:2f:de: c5:e3:98:5b:2f:7e:e7:e9:2c:08:4e:a9:15:10:5e:8b:61:b5: ef:6e:97:93:52:89:e1:5f:f4:46:d7:46:ca:86:a4:02:74:52: a7:c8:61:29:4b:28:34:e6:e3:52:f0:a1:cd:f8:9d:a6:9a:74: bc:b0:bd:0a:4b:88:d5:3a:f9:9c:ae:0a:f7:6d:99:c6:e8:39: be:c8:77:99:67:d5:d6:d3:e7:cc:1e:d4:e5:7b:93:9e:f2:8d: bc:6a:c2:1e:b6:44:b5:49:18:af:d7:20:07:d0:b9:10:69:4b: 6a:fc:4a:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnjTDHi7FbwL+rmokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNzIyNTU1MVoXDTI1MDgxNTIyNTU1MVowLzEtMCsGA1UEAxMk ZTFmZjQyZDEtYmExNS00ZWMxLWJkNmUtMGZiZDlmNzZlZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCg5ltA0OTe1NTKbAwSN6WeF9b/siYKJo01Y tpoVrOxLyO0TyNwF8SqbnPUjl0ulybxMOBFooPBgVftuwAqrucL3Pso/aduAzRfu 2loA2ovY8cl9ZzRW5wJnQgah9Vy/XaSLAX++1UkOg6ABsR+Ih6tMnBtkhZ1EhxjM rfOu8CXWQAq3ue94Et8uNNCfi9epLtI9loOQbjhQ1mYB7rbDlvF2wxLNcJxfX2tt J8X75zIQ2cJ/wkvkNP4D6gEGjzOuoghuxgh6XvKLbLJuvjpBY2lG7GvoKJyWPFoA I3t0nwaX4YoL8sAG3yVA9kz7EJ+jO5DLu41cdT0kSKi4kFALTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBy0JhAdGo6bKbDQ7t3tr93MvT5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2NiZTZiMzUtOWQ0Ni0z ZDZhLWIxMDktMWVjNTVjNzM2MmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVbUG3pzvn+ZZiD83xHJeTE/vxAZCW2ERh9rV39Wg0xvNAc710hBe2K YVN0R6Tpd0MRZnyDb5Kd07OF8djL24DGDMbw2ltY6AAesmJAjDd83Fgrd22bhTpv mj4E4mkTpdjV2e3fQa4LtknBmKJ0Uir4w2IFL2Rh+Yq2lpXwdL+s4O2jXSxdus7G yo/g5QIv3sXjmFsvfufpLAhOqRUQXothte9ul5NSieFf9EbXRsqGpAJ0UqfIYSlL KDTm41Lwoc34naaadLywvQpLiNU6+ZyuCvdtmcboOb7Id5ln1dbT58we1OV7k57y jbxqwh62RLVJGK/XIAfQuRBpS2r8StQ= -----END CERTIFICATE-----Generated at Sun Jun 15 15:34:24 2025 by rpki-client