$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f53ba16-77d5-3fca-9bb1-cee3008311d9.roa File: 5f53ba16-77d5-3fca-9bb1-cee3008311d9.roa (raw, json) Hash identifier: Yvdo8rxRxq6CGU+aJwBphjjU0EmSAYovTIik68/euAA= Subject key identifier: C7:7B:B3:7C:7F:3F:CF:8C:B4:83:1D:40:D8:4B:B6:B9:51:BF:AD:95 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A497074722BFD86EFAD8E4300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f53ba16-77d5-3fca-9bb1-cee3008311d9.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 8069 IP address blocks: 20.157.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:74:72:2b:fd:86:ef:ad:8e:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=2becb1b4-d22c-47e6-9783-f49a0b297622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:62:d0:49:e7:da:4e:59:b0:3f:54:f6:84:eb: 0b:43:3f:28:4c:e3:3a:09:1b:cf:9e:72:80:0e:80: 97:2f:27:05:5e:d6:7c:bd:f1:ec:d3:68:13:f7:7e: 7a:63:be:a7:c4:90:4c:43:92:cc:07:02:c6:3a:cf: 0c:45:67:37:fc:3d:9e:2b:c6:ec:3f:24:80:f2:94: df:ce:df:9d:58:4a:e6:ad:21:bf:dd:55:df:2a:b1: d1:b0:a4:27:9d:17:63:7d:3b:11:79:0c:e1:94:7e: 35:e6:2f:6d:cd:96:20:a4:33:99:e0:3e:76:01:7d: 1e:7c:da:18:4b:59:0e:7a:dc:7c:ef:50:17:79:37: e7:97:ff:71:5a:53:68:b8:f4:1c:b7:76:08:ef:09: 2d:f0:48:f1:e1:d2:1c:7f:a3:3e:cd:9d:5d:92:94: c5:8b:df:0d:13:f0:28:85:64:50:9a:3f:10:b2:8c: ab:35:e9:80:a9:15:55:4e:e4:70:00:cb:5c:76:c1: 30:43:30:30:3d:ed:9c:ed:b5:79:3d:e4:1f:25:ae: 5f:a7:91:3a:7f:19:a5:a6:ff:fa:07:1e:dd:2e:6a: 73:14:01:fe:29:bf:68:ea:c4:cc:99:3a:f3:d2:a9: 16:f3:aa:de:7f:60:18:1b:cd:85:6b:c2:49:20:82: 1b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7B:B3:7C:7F:3F:CF:8C:B4:83:1D:40:D8:4B:B6:B9:51:BF:AD:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f53ba16-77d5-3fca-9bb1-cee3008311d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:51:77:e4:93:84:c5:3d:fa:2d:07:6d:b5:5a:70:0f:2a:fb: c3:61:ef:1c:5b:98:7e:cd:d1:34:e7:94:7e:9e:83:7e:bb:3f: a6:97:fb:dc:1a:f8:8e:84:37:04:91:5f:65:6c:b3:b9:f8:89: 59:07:c6:9b:fa:22:91:66:86:a2:84:f3:3b:d2:7f:fd:7c:75: 0c:c1:65:e5:5c:f9:88:47:df:cc:85:69:12:9a:e9:00:8a:3c: 1e:a1:1b:ec:c5:f8:1d:f3:8a:c7:16:e8:e3:27:e4:ee:33:60: 39:92:78:ab:f9:68:8d:ba:a2:45:71:5e:1e:3c:4c:2a:a6:f9: 8d:9a:56:1d:7e:a4:0e:66:cd:26:7b:86:7c:c7:1a:d8:3e:9a: 59:c5:9c:49:e9:8b:be:62:bf:8a:64:75:b9:1a:51:13:7d:33: 46:22:d8:d3:d6:b4:4c:56:3b:bd:c5:0c:b9:9b:4b:1a:2e:88: 9a:41:1b:f0:38:95:1d:03:65:51:7a:a3:71:94:80:4e:6b:d5: 58:1a:78:b4:fe:c4:59:50:fa:ca:b0:69:e2:ef:57:be:7c:aa: e0:f4:89:0d:bb:91:d4:64:69:3e:73:df:e6:79:77:18:6c:33: 6e:83:b3:51:af:15:6a:78:d5:2a:01:58:72:da:68:25:d4:47: e3:6b:c6:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHRyK/2G762OQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk MmJlY2IxYjQtZDIyYy00N2U2LTk3ODMtZjQ5YTBiMjk3NjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmLQSefaTlmwP1T2hOsLQz8oTOM6CRvPnnKA DoCXLycFXtZ8vfHs02gT9356Y76nxJBMQ5LMBwLGOs8MRWc3/D2eK8bsPySA8pTf zt+dWErmrSG/3VXfKrHRsKQnnRdjfTsReQzhlH415i9tzZYgpDOZ4D52AX0efNoY S1kOetx871AXeTfnl/9xWlNouPQct3YI7wkt8Ejx4dIcf6M+zZ1dkpTFi98NE/Ao hWRQmj8QsoyrNemAqRVVTuRwAMtcdsEwQzAwPe2c7bV5PeQfJa5fp5E6fxmlpv/6 Bx7dLmpzFAH+Kb9o6sTMmTrz0qkW86ref2AYG82Fa8JJIIIbyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMd7s3x/P8+MtIMdQNhLtrlRv62VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWY1M2JhMTYtNzdkNS0z ZmNhLTliYjEtY2VlMzAwODMxMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNRd+SThMU9+i0HbbVacA8q+8Nh7xxbmH7N0TTnlH6eg367P6aX+9wa +I6ENwSRX2Vss7n4iVkHxpv6IpFmhqKE8zvSf/18dQzBZeVc+YhH38yFaRKa6QCK PB6hG+zF+B3ziscW6OMn5O4zYDmSeKv5aI26okVxXh48TCqm+Y2aVh1+pA5mzSZ7 hnzHGtg+mlnFnEnpi75iv4pkdbkaURN9M0Yi2NPWtExWO73FDLmbSxouiJpBG/A4 lR0DZVF6o3GUgE5r1VgaeLT+xFlQ+sqwaeLvV758quD0iQ27kdRkaT5z3+Z5dxhs M26Ds1GvFWp41SoBWHLaaCXUR+Nrxj0= -----END CERTIFICATE-----Generated at Mon Jun 30 09:52:36 2025 by rpki-client