$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/572409db-3ef3-37dc-a464-eedbee4a47ed.roa File: 572409db-3ef3-37dc-a464-eedbee4a47ed.roa (raw, json) Hash identifier: FSXO0KTe8CCjjh4Hskzb9oImZ22huw/JRlTLDpxJttI= Subject key identifier: 5D:30:1C:02:E6:02:3E:95:C0:C7:35:11:E7:DE:8C:1A:8C:24:9E:45 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A3480195F21C5BE46A7DE8580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/572409db-3ef3-37dc-a464-eedbee4a47ed.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.153.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:19:5f:21:c5:be:46:a7:de:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=59595b3d-1bda-450b-8e1a-567ae4a3e7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a9:c2:52:3f:63:f8:b9:02:57:b7:93:16:43: 0f:32:eb:42:e6:8d:94:f3:b2:2a:47:88:fa:56:fa: 06:d0:b2:b0:2d:69:a7:01:7c:44:b7:ba:44:e6:de: 6f:41:e6:d3:b7:9e:c0:79:80:8f:db:62:e0:8a:da: 7f:d2:45:81:11:68:78:0f:1f:92:d5:13:94:5f:59: 4b:05:d3:b2:68:a7:94:73:ec:1b:13:09:3f:84:88: 5d:dd:bc:ac:8b:5f:ab:11:01:cf:71:7f:09:52:fb: 43:80:29:fc:aa:00:3f:6b:77:93:3c:0f:cb:20:0a: 8d:6c:49:ce:aa:d4:47:cf:62:e5:bf:b8:a6:d3:56: c6:69:63:07:d5:6f:86:8a:58:45:38:cf:e2:55:1a: f2:f9:5d:40:3a:c1:8c:d1:a5:73:fe:0d:26:e0:45: 07:18:df:0b:22:6a:82:69:9f:a2:07:81:39:2a:96: d5:95:7c:76:68:8d:af:41:c5:8c:65:08:55:a3:6e: 52:22:38:90:81:c3:4d:88:92:9c:92:a2:63:23:49: 73:f5:02:a4:72:d6:26:b5:6c:c3:7f:9b:83:4d:87: 47:a3:00:0d:fb:2c:84:4b:a7:59:fe:17:bf:aa:12: 07:11:13:d3:4a:30:07:2d:9a:9c:cc:2e:66:58:c9: 5c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:30:1C:02:E6:02:3E:95:C0:C7:35:11:E7:DE:8C:1A:8C:24:9E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/572409db-3ef3-37dc-a464-eedbee4a47ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:8d:18:33:14:ad:2d:0c:df:58:0d:05:ec:be:3e:cc:35:74: 05:fd:4e:15:2b:c7:df:8d:d1:36:70:d0:31:a5:df:85:fa:f4: 53:ee:7a:1a:64:01:31:66:d4:cf:c3:63:7f:00:51:2b:68:11: 21:e5:2e:df:1b:95:0e:f0:12:7a:31:f3:e8:e0:fc:a4:f0:3d: 15:ca:e3:01:cd:e5:4a:d7:e0:c5:bd:09:e5:56:29:44:3d:32: 0f:9d:a8:c3:e5:4b:fc:e9:2f:e0:1d:ad:3d:9b:18:5c:d0:ef: c5:70:d5:ac:31:f0:95:cb:97:0e:71:f0:86:2c:a4:85:af:f8: 06:f0:eb:62:90:ac:da:d4:d0:41:ef:3b:a9:76:53:fe:df:66: 7c:ed:09:16:67:1e:25:6e:3f:55:57:d2:1d:92:d1:cf:69:4e: 5d:66:38:e9:91:a2:a7:e3:68:4a:31:f3:c0:79:9e:db:5b:74: 09:a4:80:a1:43:9f:25:9c:d5:4e:f9:16:bc:d8:98:55:28:6e: b5:d5:fa:4d:e3:e2:56:43:9e:a9:87:fb:72:05:41:1c:8f:3e: 3f:21:16:3b:fe:37:ad:9d:3f:c5:c7:f9:53:a3:bf:73:76:31: d2:b8:42:19:f3:6b:ea:59:d4:22:30:5d:6e:b9:06:87:17:4d: 62:8c:ac:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBlfIcW+RqfehYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk NTk1OTViM2QtMWJkYS00NTBiLThlMWEtNTY3YWU0YTNlN2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKnCUj9j+LkCV7eTFkMPMutC5o2U87IqR4j6 VvoG0LKwLWmnAXxEt7pE5t5vQebTt57AeYCP22Lgitp/0kWBEWh4Dx+S1ROUX1lL BdOyaKeUc+wbEwk/hIhd3bysi1+rEQHPcX8JUvtDgCn8qgA/a3eTPA/LIAqNbEnO qtRHz2Llv7im01bGaWMH1W+GilhFOM/iVRry+V1AOsGM0aVz/g0m4EUHGN8LImqC aZ+iB4E5KpbVlXx2aI2vQcWMZQhVo25SIjiQgcNNiJKckqJjI0lz9QKkctYmtWzD f5uDTYdHowAN+yyES6dZ/he/qhIHERPTSjAHLZqczC5mWMlceQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0wHALmAj6VwMc1EefejBqMJJ5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTcyNDA5ZGItM2VmMy0z N2RjLWE0NjQtZWVkYmVlNGE0N2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuNGDMUrS0M31gNBey+Psw1dAX9ThUrx9+N0TZw0DGl34X69FPuehpk ATFm1M/DY38AUStoESHlLt8blQ7wEnox8+jg/KTwPRXK4wHN5UrX4MW9CeVWKUQ9 Mg+dqMPlS/zpL+AdrT2bGFzQ78Vw1awx8JXLlw5x8IYspIWv+Abw62KQrNrU0EHv O6l2U/7fZnztCRZnHiVuP1VX0h2S0c9pTl1mOOmRoqfjaEox88B5nttbdAmkgKFD nyWc1U75FrzYmFUobrXV+k3j4lZDnqmH+3IFQRyPPj8hFjv+N62dP8XH+VOjv3N2 MdK4Qhnza+pZ1CIwXW65BocXTWKMrAc= -----END CERTIFICATE-----Generated at Mon Jun 30 01:06:29 2025 by rpki-client