$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa File: cd786728-d6f2-3414-abfc-112e58503c9a.roa (raw, json) Hash identifier: V35hfnHqqbiHNusI8Zn971OE5T4NN322y3diRiynrm4= Subject key identifier: FA:A3:FE:9E:09:8B:AC:CC:86:BE:D8:25:87:16:E3:F1:DB:88:DF:13 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A14657F5333F1A8E2FA10E540 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 8069 IP address blocks: 20.157.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7f:53:33:f1:a8:e2:fa:10:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=5bd0e883-cd77-45d7-a1bd-58c9d89e9f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fc:d6:16:56:cd:23:c9:03:42:90:70:f4:c1: 1d:0e:9c:04:d1:53:b8:6a:e8:ec:da:70:37:ac:bb: 49:06:f6:b6:cd:97:f4:2d:77:a6:59:bb:a8:fe:ea: 51:44:a3:4e:bb:b9:85:1d:50:63:4f:ad:ec:7d:27: 43:f8:32:02:c6:1a:7a:48:87:d0:95:01:33:2c:41: 7b:8b:e3:13:22:89:bf:c0:db:fa:e6:5c:89:96:47: 2b:5b:11:08:a9:0f:34:cc:e9:fd:36:28:16:97:cb: b5:dd:58:05:12:dc:c7:8d:79:53:a8:cb:30:69:58: 5c:6c:32:9f:4e:47:20:72:aa:40:1a:fd:d2:b3:b1: 56:52:96:54:a2:5d:e3:b6:97:ae:3b:e5:ce:a6:1a: ee:02:60:94:72:8f:e8:ee:04:b8:85:b4:34:c4:36: ad:87:c4:6f:6c:ae:81:5d:48:31:2a:22:f9:f4:97: f3:d0:62:23:8f:f8:17:6c:9f:23:df:c3:e0:74:08: f7:56:1c:0d:41:96:a5:d0:14:fe:7b:1d:59:a5:81: 2c:c6:48:cc:b8:b9:ba:0f:74:4d:69:24:6d:dd:7e: d2:b2:e6:27:e0:1d:67:9d:37:6c:f4:29:bf:46:18: 9a:0f:af:c1:b0:f1:1e:d8:a6:96:83:4a:ac:e6:67: c1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A3:FE:9E:09:8B:AC:CC:86:BE:D8:25:87:16:E3:F1:DB:88:DF:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:aa:fe:fa:17:2c:2e:7f:16:78:8f:ec:e1:6a:1c:cb:f3:18: e8:9a:89:67:b3:bc:c3:52:0e:72:74:e4:52:2e:50:0d:bc:c3: e2:4e:ac:79:e7:1a:fb:c5:e5:93:cd:19:08:c1:5a:40:94:f5: ad:2a:0c:be:a8:b4:00:3c:7a:f9:f7:22:f1:c1:da:23:30:6a: 98:67:23:c9:ac:6b:3f:17:4c:4a:c0:61:3f:c0:e8:d7:06:b5: e0:0e:7a:ba:a7:36:12:11:75:fe:18:e2:a7:da:97:10:2f:4b: 51:55:2b:e1:19:1a:6a:1c:bb:28:aa:2c:c1:29:8f:31:cc:4f: 31:37:76:a0:62:35:dc:2a:88:98:cf:5e:80:b8:4d:12:e0:a3: cb:3a:bb:0a:fc:08:4d:67:71:a0:62:ee:7e:fc:30:79:a3:5e: fe:f7:3f:35:3f:09:b5:98:f0:d9:c6:6f:92:af:35:47:83:d3: 88:6d:ee:b2:f5:cc:93:7f:b2:3b:24:30:90:17:82:39:26:80: f6:77:f6:af:8d:0d:e3:1a:c4:e8:61:62:f1:23:6f:cc:45:42: d4:da:01:df:3c:6b:a0:88:a0:e7:46:90:69:04:1e:84:d2:48: 97:d0:dd:97:35:8b:f7:15:ae:41:fc:14:55:0c:34:a6:19:f0: 68:86:e5:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZX9TM/Go4voQ5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NWJkMGU4ODMtY2Q3Ny00NWQ3LWExYmQtNThjOWQ4OWU5ZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvzWFlbNI8kDQpBw9MEdDpwE0VO4aujs2nA3 rLtJBva2zZf0LXemWbuo/upRRKNOu7mFHVBjT63sfSdD+DICxhp6SIfQlQEzLEF7 i+MTIom/wNv65lyJlkcrWxEIqQ80zOn9NigWl8u13VgFEtzHjXlTqMswaVhcbDKf TkcgcqpAGv3Ss7FWUpZUol3jtpeuO+XOphruAmCUco/o7gS4hbQ0xDath8RvbK6B XUgxKiL59Jfz0GIjj/gXbJ8j38PgdAj3VhwNQZal0BT+ex1ZpYEsxkjMuLm6D3RN aSRt3X7SsuYn4B1nnTds9Cm/RhiaD6/BsPEe2KaWg0qs5mfB1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqj/p4Ji6zMhr7YJYcW4/HbiN8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2Q3ODY3MjgtZDZmMi0z NDE0LWFiZmMtMTEyZTU4NTAzYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2q/voXLC5/FniP7OFqHMvzGOiaiWezvMNSDnJ05FIuUA28w+JOrHnn GvvF5ZPNGQjBWkCU9a0qDL6otAA8evn3IvHB2iMwaphnI8msaz8XTErAYT/A6NcG teAOerqnNhIRdf4Y4qfalxAvS1FVK+EZGmocuyiqLMEpjzHMTzE3dqBiNdwqiJjP XoC4TRLgo8s6uwr8CE1ncaBi7n78MHmjXv73PzU/CbWY8NnGb5KvNUeD04ht7rL1 zJN/sjskMJAXgjkmgPZ39q+NDeMaxOhhYvEjb8xFQtTaAd88a6CIoOdGkGkEHoTS SJfQ3Zc1i/cVrkH8FFUMNKYZ8GiG5dg= -----END CERTIFICATE-----Generated at Sun Jun 15 15:36:07 2025 by rpki-client