$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/51de0f90-d04b-3ee5-8cd9-8de517542b74.roa File: 51de0f90-d04b-3ee5-8cd9-8de517542b74.roa (raw, json) Hash identifier: 7A9m9fROdhgmcpQ3Wh8wsnBfrE5idzni/oROK+6kh0E= Subject key identifier: 21:9C:8F:C4:7C:0A:83:C0:21:B4:01:91:01:0F:56:19:1F:62:4A:E5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A49707460D696AFB2DE994540 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/51de0f90-d04b-3ee5-8cd9-8de517542b74.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 8069 IP address blocks: 20.157.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:74:60:d6:96:af:b2:de:99:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=2556a2d6-9ce1-477b-81c6-40a806dc02a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d6:a1:3f:87:53:07:79:24:ea:3e:35:46:ca: 97:2b:fd:16:1d:0c:73:e7:b0:eb:d8:d4:40:1a:9c: 2d:fe:60:bd:c9:08:19:d4:af:d7:c7:9d:72:42:85: 12:22:c3:a6:58:9c:5c:63:29:94:e6:c1:d2:81:db: 4e:8f:d5:a8:39:9f:84:4b:a2:9a:01:08:d8:59:43: f8:16:11:f8:87:17:9e:b5:c7:1f:bf:8e:36:21:4d: 6b:7c:7b:f7:2b:04:7b:e1:38:a9:92:da:3a:22:f3: 18:cc:b0:fe:5e:05:59:8c:18:fd:ce:69:99:0e:20: 2a:13:d5:fc:0c:9f:63:01:69:bb:da:fa:10:cf:1a: cb:8f:b5:2a:03:01:d9:4f:02:fb:af:f7:2a:38:0a: 3c:d1:25:a5:f5:b6:21:2c:40:83:e9:94:99:b4:f1: 0d:e6:98:c8:85:fd:86:28:2c:46:fb:0f:42:0a:f4: bd:13:e3:c9:49:fc:02:e7:58:6b:f6:80:89:ec:ae: 2a:4d:7f:8b:6f:76:a7:d3:e1:86:2d:81:8d:34:a5: d6:c3:78:53:4a:81:9b:59:f7:13:50:b5:12:95:f5: 9f:dc:2a:eb:9d:cc:ce:0b:69:cb:11:d0:80:16:ae: c4:54:72:bc:ad:7d:6d:63:f1:80:0a:8a:b0:07:32: e4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9C:8F:C4:7C:0A:83:C0:21:B4:01:91:01:0F:56:19:1F:62:4A:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/51de0f90-d04b-3ee5-8cd9-8de517542b74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:96:14:8f:13:61:01:bb:b1:9a:fc:bc:53:a9:66:96:22:7f: 90:d8:33:dd:fb:89:c0:30:94:27:6e:b2:60:44:e9:63:46:62: 98:50:7d:44:5f:75:7d:d4:a5:eb:d0:89:2a:11:31:02:e2:2a: d9:8a:0d:c2:a7:bd:59:7b:d3:90:d1:68:02:38:6b:3f:ba:3c: 0d:62:1e:eb:bc:85:3a:f0:14:4a:ab:59:89:f5:e7:aa:e1:58: 6d:00:2c:a9:86:45:5b:c0:62:de:5a:c2:8c:13:e0:f1:fe:e9: 28:68:19:00:b4:d2:fb:b5:1d:68:c5:01:e5:8e:2b:96:6c:fa: f4:a0:48:8c:20:77:a9:b1:e0:79:af:d3:70:33:42:c7:09:28: 58:a3:22:8c:4f:5d:41:b7:73:66:19:a1:fb:a7:17:17:26:3e: 9d:e9:68:67:ef:75:79:4d:d1:a1:17:cf:c9:74:82:fd:2c:60: a0:fd:87:03:18:c6:08:e1:c6:58:bb:27:61:eb:da:28:57:0d: e4:ee:15:9d:18:72:5c:85:4c:b1:12:fe:1d:7b:80:22:32:06: 56:2f:66:d2:cc:69:97:76:51:f3:0b:b1:6a:60:18:8b:a6:f7: c1:8b:ca:6d:2e:0b:d7:00:74:61:ac:4f:04:45:9c:64:05:4e: 83:d9:97:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHRg1pavst6ZRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk MjU1NmEyZDYtOWNlMS00NzdiLTgxYzYtNDBhODA2ZGMwMmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdahP4dTB3kk6j41RsqXK/0WHQxz57Dr2NRA Gpwt/mC9yQgZ1K/Xx51yQoUSIsOmWJxcYymU5sHSgdtOj9WoOZ+ES6KaAQjYWUP4 FhH4hxeetccfv442IU1rfHv3KwR74Tipkto6IvMYzLD+XgVZjBj9zmmZDiAqE9X8 DJ9jAWm72voQzxrLj7UqAwHZTwL7r/cqOAo80SWl9bYhLECD6ZSZtPEN5pjIhf2G KCxG+w9CCvS9E+PJSfwC51hr9oCJ7K4qTX+Lb3an0+GGLYGNNKXWw3hTSoGbWfcT ULUSlfWf3CrrnczOC2nLEdCAFq7EVHK8rX1tY/GACoqwBzLkpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGcj8R8CoPAIbQBkQEPVhkfYkrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTFkZTBmOTAtZDA0Yi0z ZWU1LThjZDktOGRlNTE3NTQyYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKWFI8TYQG7sZr8vFOpZpYif5DYM937icAwlCdusmBE6WNGYphQfURf dX3UpevQiSoRMQLiKtmKDcKnvVl705DRaAI4az+6PA1iHuu8hTrwFEqrWYn156rh WG0ALKmGRVvAYt5awowT4PH+6ShoGQC00vu1HWjFAeWOK5Zs+vSgSIwgd6mx4Hmv 03AzQscJKFijIoxPXUG3c2YZofunFxcmPp3paGfvdXlN0aEXz8l0gv0sYKD9hwMY xgjhxli7J2Hr2ihXDeTuFZ0YclyFTLES/h17gCIyBlYvZtLMaZd2UfMLsWpgGIum 98GLym0uC9cAdGGsTwRFnGQFToPZlz0= -----END CERTIFICATE-----Generated at Mon Jun 30 01:20:08 2025 by rpki-client