$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2e8b32a7-5227-3075-a46f-6e68287464bb.roa File: 2e8b32a7-5227-3075-a46f-6e68287464bb.roa (raw, json) Hash identifier: mHnHsZ7Dm4wyBnYpZglxp+qMPWRqQuueP3Y4rejfaiw= Subject key identifier: DB:56:6E:BB:8E:F7:8D:4E:52:94:0D:C9:FC:33:5D:D3:01:AC:AC:90 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849BF3FA6FDA1F9A31D2794A680 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2e8b32a7-5227-3075-a46f-6e68287464bb.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.153.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a6:fd:a1:f9:a3:1d:27:94:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=6288a6c4-175d-4935-ba38-4f5e69aefb5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b0:19:eb:fd:0e:f4:82:f4:43:21:ac:f0:bc: 30:c2:4a:fd:52:c6:cb:e3:3e:26:e1:91:e1:a3:3c: 16:26:2e:24:c5:d9:80:86:f4:70:91:f5:9f:cf:e6: e5:89:f2:7e:25:47:d5:02:b3:4b:c6:d0:b3:39:95: d1:b5:63:ae:e1:a0:5c:ab:42:58:39:5a:06:8e:b1: 60:b6:5c:da:01:d2:2c:61:a1:02:87:b6:65:7e:97: b4:c7:52:dd:da:b2:15:7d:4c:0c:5a:41:5a:8d:aa: 36:47:7b:56:f6:75:6e:d0:d5:f0:54:0a:65:41:5e: cc:1c:01:d6:4f:e0:a8:33:52:b8:24:9a:bf:66:22: 03:60:1a:5a:29:44:b3:6f:34:40:50:98:87:0a:8b: 92:23:e7:ee:53:24:61:94:1a:f3:d9:11:0f:6a:74: 92:06:24:db:50:d9:e0:40:32:58:4c:84:5a:df:51: 5a:d9:0f:f1:19:0a:dc:9f:c6:6b:c7:a1:4b:56:94: a8:de:55:d2:bc:db:3d:c2:0c:9a:f4:02:d3:74:41: 92:b0:80:87:bb:af:24:a7:21:b8:c2:50:0c:bf:3c: 41:61:6a:c1:42:e9:cf:d6:c5:d2:35:ff:94:55:ca: 26:3f:45:10:d7:24:d9:74:cc:7d:8c:a0:54:21:6e: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:56:6E:BB:8E:F7:8D:4E:52:94:0D:C9:FC:33:5D:D3:01:AC:AC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2e8b32a7-5227-3075-a46f-6e68287464bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f6:19:88:41:0a:c8:c0:18:62:7a:b8:a4:51:ed:0a:73:82: 47:eb:07:d7:73:4a:76:28:27:7d:0b:39:29:2d:8f:75:f0:1f: b6:e3:19:80:b7:9b:af:8f:c6:91:6e:09:fa:de:f4:47:3f:1b: 60:09:91:b7:37:ba:92:27:db:f2:14:8c:f2:49:89:95:69:ac: 08:db:3e:ab:20:d0:21:60:17:fc:61:94:21:b7:ca:e8:6a:24: c1:b5:c2:b0:72:c5:28:87:92:e4:9a:80:80:54:68:e2:b4:26: ab:e5:46:4e:44:d5:52:c8:38:77:e3:e2:76:7e:a7:ee:a9:af: 23:f4:5f:fa:46:b4:35:3f:f0:18:74:2e:36:0d:bf:e7:d0:89: 5d:94:f2:1e:1b:c1:f0:82:e8:d9:97:8c:7b:7e:68:2c:1b:12: f8:8e:dc:fe:fc:bc:1c:a2:7a:85:9f:ec:6f:71:22:4d:6e:32: e4:32:91:a7:97:1b:7e:03:ba:c3:8f:cf:49:b8:06:c4:b2:9d: e7:6e:0e:70:b2:44:79:fb:23:b9:d7:19:7c:60:36:75:55:bc: cd:9a:3e:f9:c1:c2:b1:ff:b4:85:cb:25:17:dc:c7:22:9a:3c: 37:8d:55:f1:14:9d:d2:81:48:fa:19:40:b3:ea:e4:fa:82:37: 06:24:86:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6b9ofmjHSeUpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NjI4OGE2YzQtMTc1ZC00OTM1LWJhMzgtNGY1ZTY5YWVmYjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbAZ6/0O9IL0QyGs8Lwwwkr9UsbL4z4m4ZHh ozwWJi4kxdmAhvRwkfWfz+blifJ+JUfVArNLxtCzOZXRtWOu4aBcq0JYOVoGjrFg tlzaAdIsYaECh7Zlfpe0x1Ld2rIVfUwMWkFajao2R3tW9nVu0NXwVAplQV7MHAHW T+CoM1K4JJq/ZiIDYBpaKUSzbzRAUJiHCouSI+fuUyRhlBrz2REPanSSBiTbUNng QDJYTIRa31Fa2Q/xGQrcn8Zrx6FLVpSo3lXSvNs9wgya9ALTdEGSsICHu68kpyG4 wlAMvzxBYWrBQunP1sXSNf+UVcomP0UQ1yTZdMx9jKBUIW4QHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtWbruO941OUpQNyfwzXdMBrKyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmU4YjMyYTctNTIyNy0z MDc1LWE0NmYtNmU2ODI4NzQ2NGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz2GYhBCsjAGGJ6uKRR7QpzgkfrB9dzSnYoJ30LOSktj3XwH7bjGYC3 m6+PxpFuCfre9Ec/G2AJkbc3upIn2/IUjPJJiZVprAjbPqsg0CFgF/xhlCG3yuhq JMG1wrByxSiHkuSagIBUaOK0JqvlRk5E1VLIOHfj4nZ+p+6pryP0X/pGtDU/8Bh0 LjYNv+fQiV2U8h4bwfCC6NmXjHt+aCwbEviO3P78vByieoWf7G9xIk1uMuQykaeX G34DusOPz0m4BsSyneduDnCyRHn7I7nXGXxgNnVVvM2aPvnBwrH/tIXLJRfcxyKa PDeNVfEUndKBSPoZQLPq5PqCNwYkhig= -----END CERTIFICATE-----Generated at Mon Jun 30 01:22:07 2025 by rpki-client