$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dad0d392-2c7c-326e-85d5-1901cea0d1e1.roa File: dad0d392-2c7c-326e-85d5-1901cea0d1e1.roa (raw, json) Hash identifier: CL6Aw9ezWS/EEIbkOg66XzzvGytPMtAVkQSS+3Bu4Oc= Subject key identifier: 05:71:10:47:2B:8E:B1:54:B7:17:F7:61:9D:AD:A1:68:44:60:DD:5E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849E34C43143CD390F26352FD80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dad0d392-2c7c-326e-85d5-1901cea0d1e1.roa Signing time: Sat 17 May 2025 22:55:59 +0000 ROA not before: Sat 17 May 2025 22:55:59 +0000 ROA not after: Fri 15 Aug 2025 22:55:59 +0000 asID: 8069 IP address blocks: 20.153.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:4c:43:14:3c:d3:90:f2:63:52:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 17 22:55:59 2025 GMT Not After : Aug 15 22:55:59 2025 GMT Subject: CN=b750bec0-89ff-4bb7-a0e6-dbc9933b4863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cc:1d:1c:82:72:f1:5a:f5:46:ad:60:55:61: ad:85:c3:07:25:92:05:b0:b0:97:83:03:e2:fb:75: ef:62:23:88:25:7c:ee:cc:f8:54:4a:b3:cc:96:73: 50:27:4e:9d:ce:d6:c6:2a:88:10:e5:12:d5:28:30: d2:05:05:d4:c3:2c:84:98:c4:05:4c:7f:82:30:14: d6:2d:d4:1d:7b:f4:ce:47:22:b5:b4:6e:54:3a:7b: a0:4c:01:29:2d:55:50:ab:9a:a8:20:fd:1f:cc:e5: 05:d9:0d:04:c2:96:35:9c:2a:c8:2b:97:83:d9:1f: f2:2e:7a:00:3f:bb:b9:52:0c:d2:f4:9c:d6:c1:41: 0e:db:b9:79:d4:62:11:cc:5b:82:bd:4a:28:3f:5c: 02:76:a1:6b:c9:7f:a4:20:8f:df:70:26:d4:f9:d5: dd:46:64:b4:47:e3:9a:07:d1:db:08:b1:0f:80:08: ad:a9:0e:a1:e4:90:0a:1b:c0:04:2c:93:b6:c6:ef: 71:65:5e:da:cd:ef:45:3a:94:dc:e4:da:16:3d:2d: 42:24:19:3c:0e:31:55:2e:25:48:89:ef:0b:e3:64: 09:c9:b1:e3:30:1b:06:65:15:c3:3e:1c:4c:ba:37: 35:33:8f:27:03:2e:33:47:58:dc:14:8a:5b:47:1e: c2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:71:10:47:2B:8E:B1:54:B7:17:F7:61:9D:AD:A1:68:44:60:DD:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dad0d392-2c7c-326e-85d5-1901cea0d1e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:bd:f7:34:cd:1b:8f:bb:e0:60:fa:be:e5:3a:4b:d2:43:0f: 98:68:b8:6d:5b:dd:77:33:f2:d9:71:3f:5b:a5:46:dd:3d:73: 86:90:e8:dd:0d:92:d4:a9:7e:a8:45:2a:19:d3:1b:63:26:84: 8f:43:16:75:73:51:2a:df:92:b0:19:95:68:93:ad:27:47:89: 92:9c:e4:14:36:d2:9f:2c:a3:c8:b3:24:96:0d:77:2a:78:94: 2f:29:b2:49:69:c4:a1:d6:1c:7b:74:d9:b9:59:9b:e0:7c:69: 83:b8:fd:f3:f0:b2:cc:af:9c:57:50:f2:55:80:16:0b:6f:ad: 94:7f:74:50:ae:fe:99:9b:81:a0:df:2b:fe:2d:3a:52:25:77: e9:c6:5d:5f:dc:36:7b:32:e0:51:2e:42:af:4e:10:73:96:72: 03:88:74:66:b0:12:d4:4c:57:05:eb:e9:4e:d8:9f:0d:41:71: 84:27:90:41:39:f8:47:c0:15:e6:65:7f:7e:89:e9:58:e2:02: 38:7b:62:af:71:37:23:82:55:e4:d3:cc:11:a3:ce:0e:bb:58: 9b:2d:69:e3:12:74:39:a9:cc:49:b0:c0:cf:69:e1:50:fb:6a: e4:f0:b5:08:27:e8:cf:5c:a4:26:a4:84:89:bb:54:a6:d5:ef: ff:8c:2e:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnjTEMUPNOQ8mNS/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNzIyNTU1OVoXDTI1MDgxNTIyNTU1OVowLzEtMCsGA1UEAxMk Yjc1MGJlYzAtODlmZi00YmI3LWEwZTYtZGJjOTkzM2I0ODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMwdHIJy8Vr1Rq1gVWGthcMHJZIFsLCXgwPi +3XvYiOIJXzuzPhUSrPMlnNQJ06dztbGKogQ5RLVKDDSBQXUwyyEmMQFTH+CMBTW LdQde/TORyK1tG5UOnugTAEpLVVQq5qoIP0fzOUF2Q0EwpY1nCrIK5eD2R/yLnoA P7u5UgzS9JzWwUEO27l51GIRzFuCvUooP1wCdqFryX+kII/fcCbU+dXdRmS0R+Oa B9HbCLEPgAitqQ6h5JAKG8AELJO2xu9xZV7aze9FOpTc5NoWPS1CJBk8DjFVLiVI ie8L42QJybHjMBsGZRXDPhxMujc1M48nAy4zR1jcFIpbRx7CXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVxEEcrjrFUtxf3YZ2toWhEYN1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGFkMGQzOTItMmM3Yy0z MjZlLTg1ZDUtMTkwMWNlYTBkMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJm3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE699zTNG4+74GD6vuU6S9JDD5houG1b3Xcz8tlxP1ulRt09c4aQ6N0N ktSpfqhFKhnTG2MmhI9DFnVzUSrfkrAZlWiTrSdHiZKc5BQ20p8so8izJJYNdyp4 lC8psklpxKHWHHt02blZm+B8aYO4/fPwssyvnFdQ8lWAFgtvrZR/dFCu/pmbgaDf K/4tOlIld+nGXV/cNnsy4FEuQq9OEHOWcgOIdGawEtRMVwXr6U7Ynw1BcYQnkEE5 +EfAFeZlf36J6VjiAjh7Yq9xNyOCVeTTzBGjzg67WJstaeMSdDmpzEmwwM9p4VD7 auTwtQgn6M9cpCakhIm7VKbV7/+MLg0= -----END CERTIFICATE-----Generated at Sun Jun 15 15:30:01 2025 by rpki-client