$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa File: f0c78555-959f-3406-a67f-c1b8b75f63c0.roa (raw, json) Hash identifier: 1AudGOXEyjsoATvnuCxwLyJl2cbzp4MzzMGKOiX/H9M= Subject key identifier: B0:A2:9A:5F:28:70:60:91:54:1D:9F:92:2E:0C:CD:AC:5D:5D:54:50 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A2C20281D9BC0D557E87369E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 20.157.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:28:1d:9b:c0:d5:57:e8:73:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=55eecfb5-a889-4041-8809-941747958bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e9:ae:91:59:47:9f:47:77:6e:39:a7:0d:81: 27:a4:5e:c5:91:1c:4e:6f:58:d6:13:f9:b2:66:9b: 65:93:9e:be:1e:aa:43:19:11:29:e5:8f:bb:47:3d: 31:01:7b:f2:aa:96:43:58:91:56:2a:31:ba:47:9d: 22:de:41:e4:70:2c:bd:1f:5d:be:d5:97:da:e9:97: 3c:13:03:b6:38:33:d5:34:04:8a:72:2d:ae:83:35: 92:09:49:95:cf:f1:0a:9e:61:74:83:50:9a:35:ec: 7c:48:0d:d9:55:68:15:1d:f6:4b:cc:dc:17:83:8e: 1b:b6:1d:ce:f7:1f:83:60:57:2b:d3:64:b6:ba:09: 60:7b:5d:85:3f:d7:16:c3:e1:1b:3c:b3:e8:40:b7: 21:43:86:85:1c:ba:cb:99:a1:38:4f:99:78:ba:91: 75:f2:8f:38:51:9f:b0:08:e5:0d:b2:76:a1:a1:5a: 9e:73:b6:c5:9e:a1:88:87:e7:fd:7a:83:84:dd:35: 70:98:c5:5a:9c:83:7e:1f:ff:31:ff:f0:c9:46:ca: 6f:6c:36:2d:7c:b7:a7:90:a7:3b:eb:bd:5b:a6:c7: 58:f3:5f:37:77:63:ef:0b:b8:10:36:56:b5:64:27: 10:6d:cb:da:16:44:8f:95:9c:f4:4b:e4:65:b1:b2: 96:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A2:9A:5F:28:70:60:91:54:1D:9F:92:2E:0C:CD:AC:5D:5D:54:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:59:d0:f4:04:40:17:d5:23:f7:95:60:88:7f:87:99:a5:5b: 7d:9c:0c:a7:2d:f5:10:0d:1f:56:6a:08:cf:39:69:79:93:01: 1d:fa:db:e1:b2:62:c6:68:c0:cb:1c:70:63:e3:83:3a:4c:0f: 2c:c9:11:15:ab:6b:9c:ce:92:ba:95:a6:d7:0f:dd:d7:93:87: 19:6c:70:2d:c8:24:8b:00:95:8a:d2:64:1a:64:9d:d6:01:f6: b1:99:90:ed:12:a0:bf:43:af:e0:24:4e:f1:ec:a1:35:9b:e8: af:a9:be:64:9c:8a:b1:94:95:36:37:d8:93:38:a5:73:2d:84: d5:f7:2e:d7:8a:ee:39:f3:af:89:14:49:31:10:ae:e0:a4:98: 5c:4e:8d:6f:8e:8c:af:9d:36:af:90:6f:ea:98:cd:d3:10:4a: 9c:9a:d0:4b:81:f3:d3:d9:b6:32:63:80:c1:26:1f:a2:e3:25: 3b:07:85:45:b4:4e:7a:34:6b:9d:11:86:88:7f:aa:c4:b4:25: 91:01:e6:50:d2:9b:c9:72:0a:41:9a:4c:3c:05:3b:fe:69:5e: df:15:76:99:5b:cc:29:3a:14:53:8b:31:fb:16:4f:62:82:cb: 5a:9c:a8:d2:7f:c2:70:64:23:96:54:d2:66:06:ba:b6:e1:8c: 04:5c:eb:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICgdm8DVV+hzaeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk NTVlZWNmYjUtYTg4OS00MDQxLTg4MDktOTQxNzQ3OTU4YmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxumukVlHn0d3bjmnDYEnpF7FkRxOb1jWE/my Zptlk56+HqpDGREp5Y+7Rz0xAXvyqpZDWJFWKjG6R50i3kHkcCy9H12+1Zfa6Zc8 EwO2ODPVNASKci2ugzWSCUmVz/EKnmF0g1CaNex8SA3ZVWgVHfZLzNwXg44bth3O 9x+DYFcr02S2uglge12FP9cWw+EbPLPoQLchQ4aFHLrLmaE4T5l4upF18o84UZ+w COUNsnahoVqec7bFnqGIh+f9eoOE3TVwmMVanIN+H/8x//DJRspvbDYtfLenkKc7 671bpsdY8183d2PvC7gQNla1ZCcQbcvaFkSPlZz0S+RlsbKWZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCiml8ocGCRVB2fki4MzaxdXVRQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjBjNzg1NTUtOTU5Zi0z NDA2LWE2N2YtYzFiOGI3NWY2M2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdZ0PQEQBfVI/eVYIh/h5mlW32cDKct9RANH1ZqCM85aXmTAR362+Gy YsZowMsccGPjgzpMDyzJERWra5zOkrqVptcP3deThxlscC3IJIsAlYrSZBpkndYB 9rGZkO0SoL9Dr+AkTvHsoTWb6K+pvmScirGUlTY32JM4pXMthNX3LteK7jnzr4kU STEQruCkmFxOjW+OjK+dNq+Qb+qYzdMQSpya0EuB89PZtjJjgMEmH6LjJTsHhUW0 Tno0a50Rhoh/qsS0JZEB5lDSm8lyCkGaTDwFO/5pXt8VdplbzCk6FFOLMfsWT2KC y1qcqNJ/wnBkI5ZU0mYGurbhjARc62k= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:14 2025 by rpki-client