$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa File: deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa (raw, json) Hash identifier: +1nLlzvcesQASysbqw5K7xpYJLKwIcDJkJ0F/U6dBVY= Subject key identifier: 66:ED:28:51:06:E7:DB:74:51:71:49:B9:06:81:4C:EB:F7:07:87:AD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A15CA958E4F5E2253A73B1B00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa Signing time: Thu 05 Jun 2025 01:00:51 +0000 ROA not before: Thu 05 Jun 2025 01:00:51 +0000 ROA not after: Wed 03 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.153.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:ca:95:8e:4f:5e:22:53:a7:3b:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 5 01:00:51 2025 GMT Not After : Sep 3 01:00:51 2025 GMT Subject: CN=40de21b0-1fea-4aaf-b0ef-57c451b93e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:8f:7b:60:ca:10:98:bb:c3:be:d0:8f:0a: ba:ce:d1:aa:32:f5:6a:82:cf:09:28:7d:a5:9f:4a: 91:3d:b9:3d:65:6f:31:38:c7:9b:0c:b1:55:72:58: f6:ba:cb:e6:05:9f:b9:3c:79:7c:ce:75:b3:6c:d2: 25:ca:4c:b2:57:34:d1:46:f8:7d:fe:60:93:52:91: a5:a7:6a:52:3b:ee:32:72:50:5f:14:6b:d3:18:d0: d5:b7:dc:d9:08:14:c0:5e:1c:14:89:47:d2:e7:ca: d7:1a:ae:97:e3:74:23:b4:59:f8:b5:9d:24:ce:a8: 22:8e:ed:03:e1:86:2c:49:7e:01:04:fa:4b:bd:a6: ae:07:dc:75:83:9d:78:a7:4e:f7:c6:32:7c:ff:7f: 08:d2:30:3f:a7:b4:ea:30:3d:56:6a:d2:1e:7f:4c: e2:23:b2:a4:a2:89:52:79:fe:5d:8e:7e:f2:5e:90: cd:05:fb:85:72:41:f2:c0:9d:78:65:f1:cc:bd:ba: 81:e1:00:16:43:1e:35:9f:78:a3:92:d7:cb:98:b9: 73:27:83:93:b9:90:43:cd:b9:1f:62:79:1f:c6:2d: 53:3e:cb:d1:75:b0:06:ae:81:a2:47:8b:66:f6:83: 1a:03:7b:2f:2e:83:d7:f0:c5:bf:3a:48:40:02:9e: 41:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:ED:28:51:06:E7:DB:74:51:71:49:B9:06:81:4C:EB:F7:07:87:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:bf:d4:6e:ef:44:0d:ec:15:d5:ec:af:4b:5a:56:46:99:c2: 7a:8f:6f:26:f3:6f:db:49:36:2a:cd:c5:49:1f:77:5a:1c:ec: 53:92:67:82:76:df:53:65:30:c3:4a:45:3e:91:05:8c:f6:ed: 74:d9:24:51:25:67:14:66:ce:eb:e4:2c:44:21:19:4d:8f:38: 56:8d:45:80:38:20:e3:f7:0c:11:93:c1:2d:0c:1f:d0:97:ca: 4f:31:a3:ea:90:a0:e6:7d:01:cd:af:86:41:13:1f:d5:f6:37: f7:33:0f:a3:89:92:e0:33:0f:5c:7a:8e:35:a2:68:b0:50:b8: 9f:75:ed:5f:89:fc:c6:96:52:a1:d5:3f:4c:a8:8d:fe:d7:bd: 45:48:d1:32:21:9a:e3:2d:82:e4:92:12:98:0d:9f:40:10:b3: a4:f3:4b:b7:38:05:06:1e:be:30:e5:2d:33:d0:a1:cb:d3:00: 0d:5d:c5:a7:e8:e6:ff:e5:1e:d0:44:84:f6:6a:9d:ec:56:c8: 66:bd:0f:c3:0d:dc:2e:d4:51:8d:2d:46:6d:fb:30:79:79:d9: df:5b:d5:33:ca:63:90:01:26:53:28:ad:93:c7:38:6d:eb:d5: f7:22:cf:e9:56:a1:18:98:f9:bc:9c:d3:40:5d:97:bf:f7:a1: 17:18:b7:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoVypWOT14iU6c7GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNTAxMDA1MVoXDTI1MDkwMzAxMDA1MVowLzEtMCsGA1UEAxMk NDBkZTIxYjAtMWZlYS00YWFmLWIwZWYtNTdjNDUxYjkzZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8SPe2DKEJi7w77Qjwq6ztGqMvVqgs8JKH2l n0qRPbk9ZW8xOMebDLFVclj2usvmBZ+5PHl8znWzbNIlykyyVzTRRvh9/mCTUpGl p2pSO+4yclBfFGvTGNDVt9zZCBTAXhwUiUfS58rXGq6X43QjtFn4tZ0kzqgiju0D 4YYsSX4BBPpLvaauB9x1g514p073xjJ8/38I0jA/p7TqMD1WatIef0ziI7KkoolS ef5djn7yXpDNBfuFckHywJ14ZfHMvbqB4QAWQx41n3ijktfLmLlzJ4OTuZBDzbkf Ynkfxi1TPsvRdbAGroGiR4tm9oMaA3svLoPX8MW/OkhAAp5BqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbtKFEG59t0UXFJuQaBTOv3B4etMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGVlYWViNDYtMWVlMi0z M2ExLWIyZDUtNzNjOTMyN2ZkMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJq/1G7vRA3sFdXsr0taVkaZwnqPbybzb9tJNirNxUkfd1oc7FOSZ4J2 31NlMMNKRT6RBYz27XTZJFElZxRmzuvkLEQhGU2POFaNRYA4IOP3DBGTwS0MH9CX yk8xo+qQoOZ9Ac2vhkETH9X2N/czD6OJkuAzD1x6jjWiaLBQuJ917V+J/MaWUqHV P0yojf7XvUVI0TIhmuMtguSSEpgNn0AQs6TzS7c4BQYevjDlLTPQocvTAA1dxafo 5v/lHtBEhPZqnexWyGa9D8MN3C7UUY0tRm37MHl52d9b1TPKY5ABJlMorZPHOG3r 1fciz+lWoRiY+byc00Bdl7/3oRcYtyA= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:00 2025 by rpki-client