$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e23c58a0-4ce7-3f33-af00-69385397dadb.roa File: e23c58a0-4ce7-3f33-af00-69385397dadb.roa (raw, json) Hash identifier: 4S+TdfEBWenuWcngCnwXJxFEgI9Mr68fEwkJIenOsYw= Subject key identifier: 29:46:79:28:CF:68:84:F7:45:25:95:2D:C8:CA:CD:B8:B6:4A:E9:B1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A19FABD10EC7908527B6CC400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e23c58a0-4ce7-3f33-af00-69385397dadb.roa Signing time: Fri 06 Jun 2025 13:01:04 +0000 ROA not before: Fri 06 Jun 2025 13:01:04 +0000 ROA not after: Thu 04 Sep 2025 13:01:04 +0000 asID: 8069 IP address blocks: 20.153.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:19:fa:bd:10:ec:79:08:52:7b:6c:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 6 13:01:04 2025 GMT Not After : Sep 4 13:01:04 2025 GMT Subject: CN=fc007da3-893d-40e3-ab8d-952eadadfc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:02:22:b8:cc:1e:de:98:2a:49:ce:0d:3c:0a: d9:f4:4a:80:10:81:9a:5c:d6:62:be:b3:ec:c6:41: f2:5a:b2:f2:97:61:25:bc:46:38:0e:c4:de:a6:98: 37:c0:22:80:b2:98:78:dc:e8:ce:06:df:94:3b:2c: 6c:00:d9:05:2a:47:2f:d5:90:39:f2:92:16:9d:55: 50:75:4b:86:2a:f2:a8:9d:68:ae:56:f0:9b:22:2a: db:7d:7e:d0:ba:be:65:53:f8:09:bb:9c:8f:8a:ad: 81:36:bf:61:24:cb:fc:a3:fc:25:da:64:40:1f:ae: 8f:0a:a9:53:ad:5d:7d:d7:78:02:d7:22:ed:77:87: 3a:6b:8d:7c:04:6e:f7:5f:05:7d:9a:45:65:b3:77: 62:45:84:55:55:c2:dc:5b:7c:57:c6:25:24:02:89: 81:4f:25:b0:6e:79:73:8a:e8:07:f0:c2:be:c6:c2: e7:7b:29:b1:4f:7a:65:4d:6d:fd:3c:d9:5f:dc:bc: 9f:2d:a7:35:5f:86:78:20:24:b8:81:08:a9:77:83: a3:b5:da:af:91:71:cc:36:29:b5:3e:74:d3:d7:a6: 18:41:2c:b4:fe:04:21:97:43:61:e6:c8:1c:1d:1d: 9f:16:48:04:12:6d:b9:9d:0f:39:96:f4:87:b7:68: c8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:46:79:28:CF:68:84:F7:45:25:95:2D:C8:CA:CD:B8:B6:4A:E9:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e23c58a0-4ce7-3f33-af00-69385397dadb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:65:7e:76:20:8d:f0:6c:d6:5b:3f:27:da:e8:47:a2:27:31: cb:07:69:16:bb:63:4a:f7:2b:e4:50:29:c8:ed:66:84:8b:2d: 75:59:07:62:82:de:52:a4:4e:3b:94:01:3c:e5:ec:d2:27:d6: 38:32:1a:21:da:41:51:96:a1:1c:73:68:8a:47:59:eb:ba:e3: 7e:80:af:12:45:21:75:8e:5c:ea:3f:20:f5:84:3c:5e:b2:e0: 50:35:50:d0:af:04:9e:f2:a8:8b:f2:f8:60:c3:33:04:36:64: b0:2e:44:f9:84:64:de:7d:61:8d:2c:eb:24:e7:3b:73:bf:d1: f8:c4:98:f9:58:e7:b0:4b:4d:9a:2e:e6:e5:a6:3b:8b:05:51: a9:86:82:24:dd:de:4b:e0:52:da:12:b5:ab:25:e3:0f:74:98: 9f:66:d8:ae:b4:af:2d:69:8d:88:d7:1e:cc:f4:b6:e4:5c:f8: dd:e8:b3:2a:8d:1d:60:f3:79:dc:68:ad:26:ff:f8:66:c2:b8: 2a:61:93:e0:4e:a5:6c:7c:69:bf:39:ba:f0:44:bd:a5:59:54: bf:ce:95:e5:ba:85:69:1d:85:ee:14:65:7d:40:d2:31:32:67: 60:cf:6f:a7:03:99:0b:75:bf:5c:e1:65:71:83:48:7b:03:6b: c2:8f:68:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoZ+r0Q7HkIUntsxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNjEzMDEwNFoXDTI1MDkwNDEzMDEwNFowLzEtMCsGA1UEAxMk ZmMwMDdkYTMtODkzZC00MGUzLWFiOGQtOTUyZWFkYWRmYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwIiuMwe3pgqSc4NPArZ9EqAEIGaXNZivrPs xkHyWrLyl2ElvEY4DsTeppg3wCKAsph43OjOBt+UOyxsANkFKkcv1ZA58pIWnVVQ dUuGKvKonWiuVvCbIirbfX7Qur5lU/gJu5yPiq2BNr9hJMv8o/wl2mRAH66PCqlT rV1913gC1yLtd4c6a418BG73XwV9mkVls3diRYRVVcLcW3xXxiUkAomBTyWwbnlz iugH8MK+xsLneymxT3plTW39PNlf3LyfLac1X4Z4ICS4gQipd4OjtdqvkXHMNim1 PnTT16YYQSy0/gQhl0Nh5sgcHR2fFkgEEm25nQ85lvSHt2jIKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClGeSjPaIT3RSWVLcjKzbi2SumxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTIzYzU4YTAtNGNlNy0z ZjMzLWFmMDAtNjkzODUzOTdkYWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9lfnYgjfBs1ls/J9roR6InMcsHaRa7Y0r3K+RQKcjtZoSLLXVZB2KC 3lKkTjuUATzl7NIn1jgyGiHaQVGWoRxzaIpHWeu6436ArxJFIXWOXOo/IPWEPF6y 4FA1UNCvBJ7yqIvy+GDDMwQ2ZLAuRPmEZN59YY0s6yTnO3O/0fjEmPlY57BLTZou 5uWmO4sFUamGgiTd3kvgUtoStasl4w90mJ9m2K60ry1pjYjXHsz0tuRc+N3osyqN HWDzedxorSb/+GbCuCphk+BOpWx8ab85uvBEvaVZVL/OleW6hWkdhe4UZX1A0jEy Z2DPb6cDmQt1v1zhZXGDSHsDa8KPaMU= -----END CERTIFICATE-----Generated at Sun Jun 15 15:30:30 2025 by rpki-client