$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04f49678-6960-3aec-9e72-225a207c1fe5.roa File: 04f49678-6960-3aec-9e72-225a207c1fe5.roa (raw, json) Hash identifier: 2ByWjykUxrQ6/lgoma+zzFMpBTf3cjgYR8Wr4WH4SgQ= Subject key identifier: B6:4A:32:73:C0:3A:B0:F1:F1:DB:83:6E:D5:09:78:2B:DF:9B:B8:E3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A3480173FF402BD37233B8800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04f49678-6960-3aec-9e72-225a207c1fe5.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.153.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:17:3f:f4:02:bd:37:23:3b:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=064d6035-c95c-4752-b705-47f83e1e7606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:e7:f7:80:38:3a:96:88:16:93:c9:2d:ee: 64:2e:6f:e1:d8:54:a9:9e:61:d5:2d:23:97:70:86: 87:75:e6:bc:b0:46:8e:c8:80:d7:f7:c5:07:6b:55: f9:54:8d:48:85:dd:3c:84:25:fb:6e:d5:fa:f5:2c: bc:43:39:b5:86:98:5b:70:24:2e:37:0e:de:db:14: 73:fe:27:9e:4a:53:00:76:30:2b:72:d7:e7:35:ac: 2d:3e:36:75:dd:b3:18:02:32:d5:a4:34:e7:a3:b6: 38:78:2b:e5:fb:8c:0e:98:39:5b:19:00:37:84:7d: 15:88:34:ae:02:03:da:d9:72:aa:71:f2:e0:68:95: 56:8c:6a:2f:72:f2:1e:b4:22:80:97:27:02:b0:c3: 4d:af:ec:37:1a:4d:74:cd:32:cd:45:83:cb:ac:44: 1d:c0:c5:11:ca:bd:c2:79:73:c6:7f:38:6a:0f:64: f7:ef:38:ea:b6:ea:01:8f:38:d6:c0:2e:15:3d:d7: d5:07:37:de:07:04:2f:e6:77:c9:fd:3b:70:62:9d: 0c:a2:41:7d:95:76:01:9c:9f:f5:37:f8:32:43:a7: 72:3c:00:06:06:9b:aa:0d:d1:40:6d:a7:c0:26:e4: 9f:1f:9f:33:e1:d4:39:d5:e6:92:82:37:7b:66:70: a1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4A:32:73:C0:3A:B0:F1:F1:DB:83:6E:D5:09:78:2B:DF:9B:B8:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04f49678-6960-3aec-9e72-225a207c1fe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:c8:be:ec:fd:17:8c:fe:12:59:81:24:6e:45:0d:06:43:3a: de:d5:02:73:f2:a6:12:cd:8b:cf:0d:11:85:9a:d7:d7:c1:a2: 3d:5e:ce:93:d2:71:46:b6:a9:76:5c:ef:83:c9:04:0e:d0:cf: 9b:ad:7b:0a:69:d5:1a:bb:11:60:82:7b:54:ee:89:37:03:27: 28:f7:74:0e:a3:61:ac:31:00:7c:c4:89:4e:93:16:00:82:7d: 84:d0:a9:4a:0e:df:84:d3:8d:8b:ad:ee:5a:e0:04:1b:d9:4d: f3:79:a4:93:6e:51:b9:84:d6:9e:a4:52:5d:eb:b9:f0:cb:59: b6:4d:7c:3a:47:e5:5a:e5:69:be:6d:9e:6d:76:73:f4:60:7e: 82:51:cd:d3:f2:3f:a0:e9:99:0d:13:fc:40:2e:9b:8e:af:3f: d3:e4:69:9a:15:49:a7:91:b0:85:43:f5:25:46:dd:67:63:47: 35:2b:4e:1a:97:49:ca:89:42:bf:44:52:65:47:4a:10:49:08: db:22:d0:94:e5:a3:7c:a0:ec:9b:34:f9:a5:8e:3a:1c:69:4a: 17:5a:68:80:4e:57:1a:93:3e:2f:6a:54:9f:8c:77:fa:48:49: f1:5e:95:b4:06:ba:5f:df:a4:95:e7:9a:43:7a:6b:42:98:93: fc:69:01:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBc/9AK9NyM7iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk MDY0ZDYwMzUtYzk1Yy00NzUyLWI3MDUtNDdmODNlMWU3NjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYnn94A4OpaIFpPJLe5kLm/h2FSpnmHVLSOX cIaHdea8sEaOyIDX98UHa1X5VI1Ihd08hCX7btX69Sy8Qzm1hphbcCQuNw7e2xRz /ieeSlMAdjArctfnNawtPjZ13bMYAjLVpDTno7Y4eCvl+4wOmDlbGQA3hH0ViDSu AgPa2XKqcfLgaJVWjGovcvIetCKAlycCsMNNr+w3Gk10zTLNRYPLrEQdwMURyr3C eXPGfzhqD2T37zjqtuoBjzjWwC4VPdfVBzfeBwQv5nfJ/TtwYp0MokF9lXYBnJ/1 N/gyQ6dyPAAGBpuqDdFAbafAJuSfH58z4dQ51eaSgjd7ZnChZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZKMnPAOrDx8duDbtUJeCvfm7jjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDRmNDk2NzgtNjk2MC0z YWVjLTllNzItMjI1YTIwN2MxZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLIvuz9F4z+ElmBJG5FDQZDOt7VAnPyphLNi88NEYWa19fBoj1ezpPS cUa2qXZc74PJBA7Qz5utewpp1Rq7EWCCe1TuiTcDJyj3dA6jYawxAHzEiU6TFgCC fYTQqUoO34TTjYut7lrgBBvZTfN5pJNuUbmE1p6kUl3rufDLWbZNfDpH5Vrlab5t nm12c/RgfoJRzdPyP6DpmQ0T/EAum46vP9PkaZoVSaeRsIVD9SVG3WdjRzUrThqX ScqJQr9EUmVHShBJCNsi0JTlo3yg7Js0+aWOOhxpShdaaIBOVxqTPi9qVJ+Md/pI SfFelbQGul/fpJXnmkN6a0KYk/xpAdM= -----END CERTIFICATE-----Generated at Mon Jun 30 19:29:06 2025 by rpki-client