$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1948f61c-5ec1-3c77-874c-757a1aab22b2.roa File: 1948f61c-5ec1-3c77-874c-757a1aab22b2.roa (raw, json) Hash identifier: iatE5SeWj3i9GwvhRKt+ANVXJoWRKNNcdbqrQ8hNSqw= Subject key identifier: 06:E9:D6:30:02:A1:63:A6:BC:27:C1:20:DC:AE:E5:0F:C7:58:57:0F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A34801927D6A056229F1E5780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1948f61c-5ec1-3c77-874c-757a1aab22b2.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.153.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:19:27:d6:a0:56:22:9f:1e:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=412950aa-82f9-4a00-ad8e-2943059e2215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6c:41:4f:5c:e6:d8:97:38:05:9d:29:68:42: 2f:eb:bf:4b:6d:03:86:f4:56:3e:51:23:01:18:32: 7b:55:01:5f:8f:94:16:ce:dd:5c:87:a8:05:e2:39: 83:08:86:4f:62:7c:03:fc:9c:b1:65:6f:a6:8a:af: 63:00:9a:20:65:07:52:67:0f:d8:0f:bf:97:f5:eb: 94:bf:01:b9:df:fa:33:65:81:52:52:c7:74:81:26: 02:2e:8a:98:29:ce:1f:21:45:ec:d5:f1:db:2a:e2: 5d:b3:8d:61:de:c4:b2:b2:95:f0:4d:52:d8:2f:ea: 0e:c7:43:30:7f:fc:fa:4e:24:69:d8:49:e2:34:1a: 4b:fe:56:a9:b7:87:bd:80:5e:c0:d4:f9:a4:3a:f7: 45:41:e2:e6:f1:6e:00:1e:c0:30:fc:02:a9:fa:9a: b7:a8:4b:c3:70:7a:c8:ee:f6:23:9d:37:f4:54:68: c7:27:29:0d:98:3d:d4:4a:77:29:2d:ca:8e:cc:a3: 4b:af:0a:11:4b:8d:33:99:4d:64:a2:6f:f8:10:9c: e6:86:40:3d:23:53:15:42:40:7a:69:a9:d3:85:06: 9a:95:0d:46:13:ea:10:55:bd:ed:f3:ee:56:83:b3: 01:e4:cd:83:98:50:14:c4:e5:16:7b:62:63:bb:38: 0a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E9:D6:30:02:A1:63:A6:BC:27:C1:20:DC:AE:E5:0F:C7:58:57:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1948f61c-5ec1-3c77-874c-757a1aab22b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a9:e2:27:90:81:f1:31:e1:cd:48:2e:c2:16:66:65:5b:9b: 82:78:5a:7e:e7:1e:05:50:3b:f6:b8:92:75:11:7c:eb:b4:68: 9b:01:88:de:f1:73:6e:c3:b0:6e:ab:5e:48:31:ad:e7:45:ef: 79:f6:01:ac:55:85:d7:36:f6:4f:fb:cf:db:d9:4e:91:fc:91: 87:da:51:91:16:6f:1d:25:52:70:06:86:1e:b8:1f:3f:4a:0f: 3c:f7:29:f3:a6:54:a3:d8:08:90:b5:58:0d:69:fe:95:24:5b: 2a:5a:62:09:04:f3:ff:d9:30:a4:9d:c8:f9:e4:f4:72:1e:69: f2:6d:3f:41:fe:81:ad:b5:4b:d8:16:77:67:71:47:8c:a7:56: 28:3c:8e:3e:48:be:31:80:fd:f8:00:06:ab:83:e7:67:39:e0: 22:1c:dc:5f:ec:49:16:0c:28:c8:ae:80:0b:24:7d:b2:18:16: 36:c5:4d:5b:ae:ae:4e:ee:4e:cf:2c:02:db:0a:5a:4a:74:c5: f5:a7:8d:74:7d:06:29:c0:32:12:a9:ae:a4:c4:0b:09:dd:85: d3:87:92:4c:a8:95:97:d0:35:d7:b6:63:d3:21:37:f5:44:15: de:31:b2:74:3f:96:73:56:bf:a2:d5:f7:90:32:d0:ca:1d:b8: f0:30:d0:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBkn1qBWIp8eV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk NDEyOTUwYWEtODJmOS00YTAwLWFkOGUtMjk0MzA1OWUyMjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGxBT1zm2Jc4BZ0paEIv679LbQOG9FY+USMB GDJ7VQFfj5QWzt1ch6gF4jmDCIZPYnwD/JyxZW+miq9jAJogZQdSZw/YD7+X9euU vwG53/ozZYFSUsd0gSYCLoqYKc4fIUXs1fHbKuJds41h3sSyspXwTVLYL+oOx0Mw f/z6TiRp2EniNBpL/lapt4e9gF7A1PmkOvdFQeLm8W4AHsAw/AKp+pq3qEvDcHrI 7vYjnTf0VGjHJykNmD3USncpLcqOzKNLrwoRS40zmU1kom/4EJzmhkA9I1MVQkB6 aanThQaalQ1GE+oQVb3t8+5Wg7MB5M2DmFAUxOUWe2JjuzgKTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbp1jACoWOmvCfBINyu5Q/HWFcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTk0OGY2MWMtNWVjMS0z Yzc3LTg3NGMtNzU3YTFhYWIyMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSp4ieQgfEx4c1ILsIWZmVbm4J4Wn7nHgVQO/a4knURfOu0aJsBiN7x c27DsG6rXkgxredF73n2AaxVhdc29k/7z9vZTpH8kYfaUZEWbx0lUnAGhh64Hz9K Dzz3KfOmVKPYCJC1WA1p/pUkWypaYgkE8//ZMKSdyPnk9HIeafJtP0H+ga21S9gW d2dxR4ynVig8jj5IvjGA/fgABquD52c54CIc3F/sSRYMKMiugAskfbIYFjbFTVuu rk7uTs8sAtsKWkp0xfWnjXR9BinAMhKprqTECwndhdOHkkyolZfQNde2Y9MhN/VE Fd4xsnQ/lnNWv6LV95Ay0ModuPAw0EE= -----END CERTIFICATE-----Generated at Mon Jun 30 01:10:58 2025 by rpki-client