$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa File: f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa (raw, json) Hash identifier: fT3UniFp4LDNJtTKK8UH6bBqxFEys/HSq6R3WQTvsds= Subject key identifier: E5:C1:32:54:1E:06:D2:6E:AC:B2:77:5D:04:E6:A6:8E:BF:B0:E3:D8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A14657F9FA824B38F843A8080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 8069 IP address blocks: 20.157.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7f:9f:a8:24:b3:8f:84:3a:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=852825ca-9228-4651-99bb-69e211669d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:42:bb:fc:f9:7e:e2:e3:88:9f:72:93:c5:de: 86:2f:6a:64:fe:1f:1d:0a:25:52:9d:99:76:70:2d: e5:39:9f:02:fe:b9:78:4f:e3:17:09:68:0f:83:85: 9a:15:08:44:23:26:1d:0c:dd:b4:ef:8d:da:de:66: 26:f0:f8:67:98:bd:11:89:09:f6:43:9b:c4:b8:2a: c1:99:0e:42:87:ab:ca:b8:cb:49:ca:0f:c6:58:ed: d1:1b:e0:36:cb:8d:6d:bc:38:50:45:67:d8:86:b1: 36:19:5d:8b:e8:c4:4c:14:54:5c:45:5b:4c:e9:54: 34:3d:d8:0a:18:5d:99:eb:59:db:0c:3e:00:78:8d: 94:9d:07:f9:6d:be:59:56:4b:9c:aa:8d:48:28:1c: e3:8d:0b:8a:41:a1:64:7e:f1:3a:ab:92:95:b1:cf: 99:99:dc:66:66:c5:b0:81:1d:0f:f1:7b:55:b3:61: 70:ba:23:53:fc:7f:ce:a9:52:e7:4d:fc:91:19:0c: 0c:b8:ed:3e:99:82:9a:54:ea:bd:a2:9a:f6:be:37: fb:03:33:83:55:40:c0:60:d7:2b:b3:13:75:77:7c: 26:a1:35:90:62:2c:d9:1f:5f:27:aa:e7:4a:9a:72: db:5d:cb:e9:cd:88:e2:2d:6e:aa:7e:9b:65:8f:38: d7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C1:32:54:1E:06:D2:6E:AC:B2:77:5D:04:E6:A6:8E:BF:B0:E3:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f239b7f1-e25e-3db0-8dc4-5d98a3f48435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:67:38:f9:9b:eb:41:01:af:77:63:f9:8a:b2:03:59:a4:43: 25:c2:ea:16:e3:a6:3f:57:45:29:06:dc:a4:31:d1:d7:d2:08: 78:65:18:4d:35:90:60:0c:be:89:40:87:24:d0:7f:46:bc:be: 40:6d:f8:4e:fa:4e:23:10:12:60:f4:79:d2:6a:7f:28:2c:a7: 42:cf:64:22:0a:2f:72:2d:72:a2:39:0b:38:a6:63:fc:e3:2a: 5f:74:88:02:06:f1:42:c3:34:e5:6c:ce:15:98:7d:c3:9b:08: 48:b9:db:1f:36:f0:a1:f3:d6:94:bf:66:82:96:70:3e:11:9c: 10:66:2d:5d:6e:77:f6:d7:ea:20:85:cb:e7:f6:93:ee:ef:74: 6b:14:9a:06:18:5d:06:cc:cb:d6:5a:b0:00:bd:24:c5:ed:26: a1:aa:98:13:64:ce:05:6e:83:c8:89:c0:ad:0e:c0:89:83:5b: b5:9c:0a:6e:80:29:c8:bd:72:f2:db:63:03:a9:5a:e2:d2:eb: 21:b9:b6:67:e2:c6:4b:fc:ec:72:d7:a5:54:3d:b9:c0:4f:99: c9:0b:b3:88:6e:71:21:79:70:bd:2e:74:91:c9:e3:a1:13:ef: 5d:78:5d:94:29:76:50:b1:fa:ef:be:34:3a:a9:cd:1e:ef:72: 0a:8f:19:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZX+fqCSzj4Q6gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ODUyODI1Y2EtOTIyOC00NjUxLTk5YmItNjllMjExNjY5ZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUK7/Pl+4uOIn3KTxd6GL2pk/h8dCiVSnZl2 cC3lOZ8C/rl4T+MXCWgPg4WaFQhEIyYdDN20743a3mYm8PhnmL0RiQn2Q5vEuCrB mQ5Ch6vKuMtJyg/GWO3RG+A2y41tvDhQRWfYhrE2GV2L6MRMFFRcRVtM6VQ0PdgK GF2Z61nbDD4AeI2UnQf5bb5ZVkucqo1IKBzjjQuKQaFkfvE6q5KVsc+ZmdxmZsWw gR0P8XtVs2FwuiNT/H/OqVLnTfyRGQwMuO0+mYKaVOq9opr2vjf7AzODVUDAYNcr sxN1d3wmoTWQYizZH18nqudKmnLbXcvpzYjiLW6qfptljzjX7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXBMlQeBtJurLJ3XQTmpo6/sOPYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjIzOWI3ZjEtZTI1ZS0z ZGIwLThkYzQtNWQ5OGEzZjQ4NDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9nOPmb60EBr3dj+YqyA1mkQyXC6hbjpj9XRSkG3KQx0dfSCHhlGE01 kGAMvolAhyTQf0a8vkBt+E76TiMQEmD0edJqfygsp0LPZCIKL3ItcqI5CzimY/zj Kl90iAIG8ULDNOVszhWYfcObCEi52x828KHz1pS/ZoKWcD4RnBBmLV1ud/bX6iCF y+f2k+7vdGsUmgYYXQbMy9ZasAC9JMXtJqGqmBNkzgVug8iJwK0OwImDW7WcCm6A Kci9cvLbYwOpWuLS6yG5tmfixkv87HLXpVQ9ucBPmckLs4hucSF5cL0udJHJ46ET 7114XZQpdlCx+u++NDqpzR7vcgqPGZY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:58 2025 by rpki-client