$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/42bf1295-1969-3c75-8c08-abee6320099c.roa File: 42bf1295-1969-3c75-8c08-abee6320099c.roa (raw, json) Hash identifier: zdJKX3ATgQwwU4MXlNJ/wKFmrV/V6w0+s6wf1I97eyM= Subject key identifier: 32:98:23:47:7D:60:87:96:74:A5:21:89:0C:52:AC:EC:7C:F6:D9:CE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A5B95B4531697AE6B550E1400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/42bf1295-1969-3c75-8c08-abee6320099c.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.157.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b4:53:16:97:ae:6b:55:0e:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=36d43ab0-9e04-41d0-8d50-e11f237e9089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:83:79:30:57:92:d6:29:0e:49:24:b1:75:ac: 73:54:9a:8e:77:f9:d9:46:ca:89:ca:ca:d5:cc:b2: c5:1b:85:b5:67:93:cd:a9:66:2d:c4:60:dd:60:85: 0c:5c:12:58:3a:b5:91:57:4a:ad:e4:c0:79:b7:cc: a3:96:c9:e7:08:c9:05:96:66:23:ce:21:08:84:69: 65:52:7c:d6:1e:d8:ba:40:5f:5b:43:0d:d7:4a:38: 4d:89:38:90:fd:61:49:03:7b:c6:da:24:89:7e:4e: fd:10:a6:52:ff:f3:19:8c:02:ca:a6:e1:22:43:e7: e9:50:d3:f8:3b:7e:99:84:2d:49:9c:6b:a7:55:4d: 01:11:48:38:3a:f8:51:be:99:bb:94:e1:c7:8f:b5: 89:54:4e:63:ae:25:9c:49:ba:cd:db:57:cc:c8:c6: 71:29:d2:d5:5d:d9:84:e0:24:ca:7e:3d:eb:9b:88: b6:9f:9b:89:e6:ff:99:4c:13:45:40:e5:55:83:e7: 53:9b:1b:02:c8:7f:0e:c1:38:d9:7c:31:5f:e2:84: 63:5f:1a:06:de:0a:31:7b:2e:56:64:dd:8d:fb:24: f7:9b:7a:a0:60:9f:c5:21:33:c6:26:80:b4:2b:49: 58:33:68:f4:1c:f1:82:35:3e:b7:0b:00:cc:79:d7: 1f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:98:23:47:7D:60:87:96:74:A5:21:89:0C:52:AC:EC:7C:F6:D9:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/42bf1295-1969-3c75-8c08-abee6320099c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:28:6b:b5:0d:be:ef:04:22:4d:be:34:0c:2c:c6:12:bd:67: 0e:72:26:6f:97:c4:fa:61:b0:e8:c7:b8:f6:e3:24:e0:e3:7d: e2:a4:8f:e5:6d:38:cb:56:13:79:e5:56:01:81:d2:51:08:54: ee:4a:33:62:8c:c1:9c:44:44:a8:6d:96:de:2b:05:a1:09:1d: 8a:44:a8:2a:77:9d:e7:02:cd:c1:b9:c3:18:ac:7c:e3:c8:8a: 93:e7:f0:7e:8f:80:bb:5a:49:9f:eb:16:b6:f2:58:d5:34:8c: 68:45:3c:96:92:b2:ef:ae:8d:5f:33:2e:6f:35:55:0c:fe:98: 88:0d:4c:34:1c:96:2c:84:a3:65:c6:97:9c:9c:e4:b2:0e:50: 25:b4:29:8b:b7:91:1a:1e:48:1c:07:fa:8f:2f:ae:d7:35:ef: 73:8c:94:24:5b:a4:9b:24:0c:88:36:28:8c:42:be:67:56:44: b7:e9:a3:da:10:fe:64:75:74:79:81:e3:c6:35:12:6a:fb:f4: 17:19:3f:fc:ef:bd:5b:38:a9:64:10:b4:fe:94:49:1f:c0:83: 95:6e:35:69:46:da:48:e7:a5:bc:21:76:2f:b0:6a:7d:a0:00: 2a:75:37:57:e6:e6:9d:77:15:19:e0:2f:6f:5a:a9:90:9e:49: 6a:36:4f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbRTFpeua1UOFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk MzZkNDNhYjAtOWUwNC00MWQwLThkNTAtZTExZjIzN2U5MDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloN5MFeS1ikOSSSxdaxzVJqOd/nZRsqJysrV zLLFG4W1Z5PNqWYtxGDdYIUMXBJYOrWRV0qt5MB5t8yjlsnnCMkFlmYjziEIhGll UnzWHti6QF9bQw3XSjhNiTiQ/WFJA3vG2iSJfk79EKZS//MZjALKpuEiQ+fpUNP4 O36ZhC1JnGunVU0BEUg4OvhRvpm7lOHHj7WJVE5jriWcSbrN21fMyMZxKdLVXdmE 4CTKfj3rm4i2n5uJ5v+ZTBNFQOVVg+dTmxsCyH8OwTjZfDFf4oRjXxoG3goxey5W ZN2N+yT3m3qgYJ/FITPGJoC0K0lYM2j0HPGCNT63CwDMedcf3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKYI0d9YIeWdKUhiQxSrOx89tnOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDJiZjEyOTUtMTk2OS0z Yzc1LThjMDgtYWJlZTYzMjAwOTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ29MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAoa7UNvu8EIk2+NAwsxhK9Zw5yJm+XxPphsOjHuPbjJODjfeKkj+Vt OMtWE3nlVgGB0lEIVO5KM2KMwZxERKhtlt4rBaEJHYpEqCp3necCzcG5wxisfOPI ipPn8H6PgLtaSZ/rFrbyWNU0jGhFPJaSsu+ujV8zLm81VQz+mIgNTDQcliyEo2XG l5yc5LIOUCW0KYu3kRoeSBwH+o8vrtc173OMlCRbpJskDIg2KIxCvmdWRLfpo9oQ /mR1dHmB48Y1Emr79BcZP/zvvVs4qWQQtP6USR/Ag5VuNWlG2kjnpbwhdi+wan2g ACp1N1fm5p13FRngL29aqZCeSWo2T8k= -----END CERTIFICATE-----Generated at Mon Jun 30 06:58:12 2025 by rpki-client