$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3444dcb8-9be9-3d37-83c5-59555ab240d6.roa File: 3444dcb8-9be9-3d37-83c5-59555ab240d6.roa (raw, json) Hash identifier: ZNgKV4OLyBBwF624zPJ/cUDOLpjcTq8/PfgAl64GXYY= Subject key identifier: 06:3E:ED:B5:CD:93:5B:75:3D:A3:6C:BC:4D:A9:17:BB:40:7D:08:A1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A3480198D2DC24E1648965D64 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3444dcb8-9be9-3d37-83c5-59555ab240d6.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.153.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:19:8d:2d:c2:4e:16:48:96:5d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=dc3acfb5-20fe-43dc-b49a-9ea73f6cf6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:12:08:42:93:ef:66:9d:3a:97:2f:68:f6:2f: 0f:22:5b:e7:27:2f:77:b4:58:33:46:8a:24:52:91: 85:a3:37:87:34:d7:4f:ae:9b:63:f8:2d:d8:43:cb: 15:4b:ef:c1:34:da:60:a6:04:78:ef:59:bc:fb:77: 70:33:70:98:d8:54:4a:82:8d:03:a3:48:b7:0e:cd: 04:36:4a:32:e3:e5:6f:19:20:eb:1f:b2:d0:16:ba: e5:93:c8:35:2d:0e:44:b0:35:f3:e0:57:47:9c:e6: 6d:25:b1:51:f2:61:10:37:d6:68:3f:f0:41:53:76: 90:26:7d:5b:31:87:c4:82:66:6f:08:dd:36:d7:41: a9:ea:19:84:d1:f9:ad:4b:fc:29:dc:cd:1e:e7:c1: f5:4f:65:20:2e:e1:9d:37:72:c0:54:5b:fc:af:a4: d1:73:04:68:77:d8:c9:fc:85:53:66:59:d6:a0:eb: a6:9a:db:a6:1d:56:3e:54:20:94:10:f5:78:07:4c: 94:30:00:48:53:aa:58:63:f8:74:a3:d6:c6:5b:66: 61:26:b0:03:8f:70:b5:0b:0d:05:e4:44:80:40:1c: 35:01:b0:37:a0:29:3a:5e:54:bd:b4:e1:e0:fc:b5: df:cb:39:b3:c7:02:d1:9f:71:ce:8c:06:e3:f8:6a: d2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3E:ED:B5:CD:93:5B:75:3D:A3:6C:BC:4D:A9:17:BB:40:7D:08:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3444dcb8-9be9-3d37-83c5-59555ab240d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:68:22:93:af:c4:e0:5c:1a:cb:56:9e:74:29:ea:a3:7c:1c: f0:51:bf:c3:48:86:7b:f8:eb:42:f5:49:c0:db:dc:c0:69:f1: a6:11:f3:95:ff:34:b0:a3:6d:65:68:23:24:49:c5:a3:d3:6b: e6:00:52:6b:b1:83:e5:5d:af:67:98:5b:c1:64:74:bc:50:f4: eb:23:b3:af:6c:55:6a:e4:11:ab:15:14:78:80:e7:12:05:d2: 3c:1d:13:7a:4b:db:02:08:b6:e4:bc:d9:6e:ff:e6:c4:6f:6d: 84:b1:9b:e1:60:08:4a:a1:d8:55:c6:80:f7:61:e1:99:44:19: a8:8e:4a:bb:ce:f4:08:6b:1f:07:c4:ed:bc:80:1e:ce:f2:00: c7:7e:5e:92:ab:ab:e7:b0:7c:fe:2a:7c:b2:e5:5f:6e:ec:27: 0d:12:a6:e8:26:c7:0b:0d:4c:13:c3:cb:ad:85:0d:16:fb:e9: 0a:74:61:2f:d2:24:33:c6:7d:61:1e:6b:ab:a4:68:d8:12:39: 0f:16:47:5b:0e:36:55:98:b2:5b:40:1e:e5:8b:7e:95:55:8c: f4:4b:00:36:f6:51:bf:ae:ef:30:94:be:bf:75:bc:95:9e:79: 75:de:48:46:58:b8:92:43:9b:f0:85:d4:99:a9:25:62:0c:38: 65:58:49:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBmNLcJOFkiWXWQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk ZGMzYWNmYjUtMjBmZS00M2RjLWI0OWEtOWVhNzNmNmNmNmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohIIQpPvZp06ly9o9i8PIlvnJy93tFgzRook UpGFozeHNNdPrptj+C3YQ8sVS+/BNNpgpgR471m8+3dwM3CY2FRKgo0Do0i3Ds0E Nkoy4+VvGSDrH7LQFrrlk8g1LQ5EsDXz4FdHnOZtJbFR8mEQN9ZoP/BBU3aQJn1b MYfEgmZvCN0210Gp6hmE0fmtS/wp3M0e58H1T2UgLuGdN3LAVFv8r6TRcwRod9jJ /IVTZlnWoOummtumHVY+VCCUEPV4B0yUMABIU6pYY/h0o9bGW2ZhJrADj3C1Cw0F 5ESAQBw1AbA3oCk6XlS9tOHg/LXfyzmzxwLRn3HOjAbj+GrSoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAY+7bXNk1t1PaNsvE2pF7tAfQihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzQ0NGRjYjgtOWJlOS0z ZDM3LTgzYzUtNTk1NTVhYjI0MGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBoIpOvxOBcGstWnnQp6qN8HPBRv8NIhnv460L1ScDb3MBp8aYR85X/ NLCjbWVoIyRJxaPTa+YAUmuxg+Vdr2eYW8FkdLxQ9Osjs69sVWrkEasVFHiA5xIF 0jwdE3pL2wIItuS82W7/5sRvbYSxm+FgCEqh2FXGgPdh4ZlEGaiOSrvO9AhrHwfE 7byAHs7yAMd+XpKrq+ewfP4qfLLlX27sJw0SpugmxwsNTBPDy62FDRb76Qp0YS/S JDPGfWEea6ukaNgSOQ8WR1sONlWYsltAHuWLfpVVjPRLADb2Ub+u7zCUvr91vJWe eXXeSEZYuJJDm/CF1JmpJWIMOGVYSQs= -----END CERTIFICATE-----Generated at Mon Jun 30 01:57:49 2025 by rpki-client