$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa File: 49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa (raw, json) Hash identifier: UGKlBPwZ2rRHUhaC70P7+hKb5QWOTXRY2srJ5u5zrH4= Subject key identifier: EB:B1:17:D9:07:5B:37:A7:4E:ED:48:B7:42:58:1E:04:CA:7F:9E:3C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A348017CABB4786EE5BEB4800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.153.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:17:ca:bb:47:86:ee:5b:eb:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=afa16032-6305-4505-9a9e-e1ae1a3079ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:12:59:3b:c8:7d:82:55:b0:0e:30:a0:87:ca: b1:e7:64:0c:fc:8e:ef:9b:de:de:3b:ea:96:8d:97: 23:e1:96:6d:79:8c:a6:46:3c:2c:d4:2b:76:bd:26: 6c:54:7b:19:2d:42:06:6f:02:76:42:ae:7f:3f:08: c5:0a:b9:fe:f0:b5:7f:1d:d5:db:2f:e3:9d:a7:d8: 38:06:28:4c:6b:7e:d3:1c:53:cb:4d:98:fd:ec:a2: 4d:8f:65:77:0c:d0:9e:d8:c7:32:b1:98:d1:9e:71: e7:3c:50:8b:b8:f4:ed:1f:d7:d7:24:a0:fb:92:0c: 6f:b4:04:7f:e9:d7:03:ea:69:90:ae:91:5a:0b:be: 17:af:9a:6c:fb:5f:22:6e:95:b3:98:aa:91:bb:25: 40:2b:50:01:64:13:ea:fa:33:26:51:75:da:d9:e8: c4:2b:f0:df:b5:91:7a:37:78:a4:84:aa:f1:be:0b: a8:bd:9e:a8:32:ca:86:3f:8c:ca:71:f3:eb:b2:d2: 5f:88:70:4e:ec:5d:f9:94:73:83:35:37:29:07:20: d3:e9:81:8c:ec:71:98:72:8b:b2:38:66:0b:f7:59: 93:7b:4f:4c:b1:cc:39:3e:2a:21:c6:b0:c9:34:ee: aa:d0:eb:01:52:d9:c5:69:7a:15:c1:db:8e:5c:74: e6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B1:17:D9:07:5B:37:A7:4E:ED:48:B7:42:58:1E:04:CA:7F:9E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/49ef2e2c-77ef-37c9-b327-24e8ee20ef0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:7d:de:9a:99:37:fd:47:08:c0:2e:b8:6d:f0:2f:65:e4:49: f3:66:8a:06:25:9d:20:9a:f2:db:67:ff:6c:9e:d2:98:dc:f0: f4:5c:68:10:99:d6:b0:76:d8:fe:1f:3b:8b:69:3e:43:01:2d: 7c:47:db:4f:78:26:7e:f4:20:41:65:57:c0:c3:2c:7a:2d:e5: 31:0b:3b:ed:db:26:1c:e8:44:a3:db:5a:f3:01:54:15:0f:e3: 07:7b:eb:49:45:ba:a6:6e:6b:72:e9:8c:60:63:8e:27:14:d7: 27:af:cd:15:10:fb:14:2f:39:d0:60:22:e1:a2:7e:c8:af:0c: 9b:e0:5a:ef:78:6e:e0:b5:38:e6:6b:26:8c:18:ca:38:34:f9: 0b:58:94:24:0e:9b:fe:b6:9e:f2:a8:b2:c4:3b:60:5e:05:14: 22:80:5e:6b:db:b0:6c:b4:d4:38:56:da:b7:17:57:91:be:dc: 00:c0:9f:9a:c5:92:07:20:39:ef:30:87:fc:57:8f:b0:6a:64: 18:1c:22:f3:6d:45:12:da:2f:91:71:c3:fe:b8:aa:1d:20:d7: 31:12:1e:68:95:7b:0a:32:cc:71:54:50:ce:2f:dc:89:ca:a5: a4:8e:98:81:88:a1:d7:09:6d:57:e3:dd:ba:5f:4e:03:f9:f7: 7b:d9:fd:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBfKu0eG7lvrSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk YWZhMTYwMzItNjMwNS00NTA1LTlhOWUtZTFhZTFhMzA3OWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghJZO8h9glWwDjCgh8qx52QM/I7vm97eO+qW jZcj4ZZteYymRjws1Ct2vSZsVHsZLUIGbwJ2Qq5/PwjFCrn+8LV/HdXbL+Odp9g4 BihMa37THFPLTZj97KJNj2V3DNCe2McysZjRnnHnPFCLuPTtH9fXJKD7kgxvtAR/ 6dcD6mmQrpFaC74Xr5ps+18ibpWzmKqRuyVAK1ABZBPq+jMmUXXa2ejEK/DftZF6 N3ikhKrxvguovZ6oMsqGP4zKcfPrstJfiHBO7F35lHODNTcpByDT6YGM7HGYcouy OGYL91mTe09Mscw5PiohxrDJNO6q0OsBUtnFaXoVwduOXHTmXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuxF9kHWzenTu1It0JYHgTKf548MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDllZjJlMmMtNzdlZi0z N2M5LWIzMjctMjRlOGVlMjBlZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAd93pqZN/1HCMAuuG3wL2XkSfNmigYlnSCa8ttn/2ye0pjc8PRcaBCZ 1rB22P4fO4tpPkMBLXxH2094Jn70IEFlV8DDLHot5TELO+3bJhzoRKPbWvMBVBUP 4wd760lFuqZua3LpjGBjjicU1yevzRUQ+xQvOdBgIuGifsivDJvgWu94buC1OOZr JowYyjg0+QtYlCQOm/62nvKossQ7YF4FFCKAXmvbsGy01DhW2rcXV5G+3ADAn5rF kgcgOe8wh/xXj7BqZBgcIvNtRRLaL5Fxw/64qh0g1zESHmiVewoyzHFUUM4v3InK paSOmIGIodcJbVfj3bpfTgP593vZ/do= -----END CERTIFICATE-----Generated at Mon Jun 30 08:27:26 2025 by rpki-client