$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa File: f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa (raw, json) Hash identifier: fwX5IDe3mpe/c1i49NaEa0EFqrQxRFmrBXWZB64X6jo= Subject key identifier: 85:E6:C5:03:97:9C:3A:7D:6B:3B:81:1C:37:6C:BD:A7:4C:E7:52:B4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849350EB287020D831F0FF7C280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.157.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:b2:87:02:0d:83:1f:0f:f7:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=f260dbc1-4de0-42f0-9bbc-c7a1645ee66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:69:d9:75:97:ce:1f:a7:61:b8:d4:ae:df:9f: 4a:fa:1c:1a:84:09:2a:2b:10:cd:78:16:39:d3:ed: 9b:56:fa:72:6a:0e:a6:35:03:b1:13:24:1d:03:fd: a3:1a:ef:ef:c6:c1:35:bd:7f:38:a9:e9:37:56:16: 7c:8b:94:07:13:e1:fb:6d:d8:f1:38:7d:3d:3a:48: 19:4e:f0:08:1f:6d:e4:25:f0:a2:d4:17:fd:94:06: dd:44:83:2e:96:96:d9:e2:61:66:28:50:72:88:52: a3:5b:13:66:8d:34:5b:bb:99:fc:7a:f6:85:a0:f2: d3:e6:74:3d:76:4f:af:c8:d6:e7:25:42:d9:92:fe: aa:93:7f:06:a8:32:b8:09:a5:0e:d1:c1:e1:09:3f: 9b:31:3c:c1:b7:69:a3:97:17:33:a9:ca:b2:f0:82: 04:ec:d9:ec:d8:01:d0:db:f6:80:de:f3:2a:b9:dc: e6:40:b8:39:e7:bf:08:ac:e4:2b:4d:b1:00:7c:d1: f8:0a:c4:bc:22:41:f7:ac:18:7b:a8:8e:5c:b4:a0: b9:4b:7c:8e:d2:53:b7:e9:ec:54:a1:48:bd:24:71: 86:ff:92:0c:aa:67:50:99:6d:0d:1d:45:92:d7:f6: 29:ed:ea:3e:de:1e:76:7e:7a:e3:d6:09:de:7f:52: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E6:C5:03:97:9C:3A:7D:6B:3B:81:1C:37:6C:BD:A7:4C:E7:52:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:1b:cd:55:0f:4d:67:97:fd:e8:1e:87:5e:09:7f:8a:a3:79: bf:b9:bf:b7:b7:57:47:3f:fb:25:bd:d8:cb:58:49:30:d7:63: 81:db:32:b7:5c:1d:64:93:19:3a:ec:24:d7:ab:66:27:42:9b: 83:85:30:1c:49:33:9c:35:1c:9a:c8:26:1b:4c:e3:67:36:b7: 12:6b:5e:94:b8:f1:6b:9b:f8:d2:ed:a8:dc:b2:68:dd:24:0b: 42:0e:5d:6c:f8:db:6a:7c:46:27:bf:15:ca:83:ed:77:f5:7b: f5:a3:02:67:2c:cb:e3:41:5f:ee:1d:1a:5d:88:65:d6:c4:aa: c9:66:43:67:dd:50:ba:9c:f3:0e:dd:44:c2:4c:2f:c6:89:72: 0d:f0:f5:5e:d0:10:fa:96:65:9d:a2:fc:44:26:4e:0c:95:69: ab:e0:dd:7e:15:89:43:54:10:dc:28:47:ae:ae:ef:2a:fb:89: e9:3f:0c:bb:58:d9:8c:0b:8a:de:a4:1b:53:a1:bf:ed:74:24: 00:e4:12:ae:64:b0:b9:e7:61:d8:7f:aa:63:91:f8:44:7e:ad: c5:25:f9:ec:85:0f:f6:20:8a:b5:85:87:a5:2e:47:ad:9a:78: 7b:f2:86:bf:95:35:9c:2a:44:72:ba:aa:ce:75:8f:ff:76:ea: 78:7c:d5:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrKHAg2DHw/3woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZjI2MGRiYzEtNGRlMC00MmYwLTliYmMtYzdhMTY0NWVlNjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2nZdZfOH6dhuNSu359K+hwahAkqKxDNeBY5 0+2bVvpyag6mNQOxEyQdA/2jGu/vxsE1vX84qek3VhZ8i5QHE+H7bdjxOH09OkgZ TvAIH23kJfCi1Bf9lAbdRIMulpbZ4mFmKFByiFKjWxNmjTRbu5n8evaFoPLT5nQ9 dk+vyNbnJULZkv6qk38GqDK4CaUO0cHhCT+bMTzBt2mjlxczqcqy8IIE7Nns2AHQ 2/aA3vMqudzmQLg5578IrOQrTbEAfNH4CsS8IkH3rBh7qI5ctKC5S3yO0lO36exU oUi9JHGG/5IMqmdQmW0NHUWS1/Yp7eo+3h52fnrj1gnef1JdywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXmxQOXnDp9azuBHDdsvadM51K0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjIzOWI3ZjEtZTI1ZS0z ZGIwLThkYzQtNWQ5OGEzZjQ4NDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8bzVUPTWeX/egeh14Jf4qjeb+5v7e3V0c/+yW92MtYSTDXY4HbMrdc HWSTGTrsJNerZidCm4OFMBxJM5w1HJrIJhtM42c2txJrXpS48Wub+NLtqNyyaN0k C0IOXWz422p8Rie/FcqD7Xf1e/WjAmcsy+NBX+4dGl2IZdbEqslmQ2fdULqc8w7d RMJML8aJcg3w9V7QEPqWZZ2i/EQmTgyVaavg3X4ViUNUENwoR66u7yr7iek/DLtY 2YwLit6kG1Ohv+10JADkEq5ksLnnYdh/qmOR+ER+rcUl+eyFD/YgirWFh6UuR62a eHvyhr+VNZwqRHK6qs51j/926nh81VM= -----END CERTIFICATE-----Generated at Sun Apr 27 05:34:48 2025 by rpki-client