$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/82d5fe1b-d64f-3dc3-a98b-03c9cfe80508.roa File: 82d5fe1b-d64f-3dc3-a98b-03c9cfe80508.roa (raw, json) Hash identifier: BhbzVisWDDGghK3tlvrx0asnMLEMmhcu6Njoc2cuflo= Subject key identifier: 4F:B6:69:E2:79:5B:3D:B8:76:DE:7A:52:35:26:96:0B:0C:98:7C:5C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A49C036839208E8D777951E00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/82d5fe1b-d64f-3dc3-a98b-03c9cfe80508.roa Signing time: Mon 23 Jun 2025 15:42:03 +0000 ROA not before: Mon 23 Jun 2025 15:42:03 +0000 ROA not after: Sun 21 Sep 2025 15:42:03 +0000 asID: 8069 IP address blocks: 20.153.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:c0:36:83:92:08:e8:d7:77:95:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 23 15:42:03 2025 GMT Not After : Sep 21 15:42:03 2025 GMT Subject: CN=89dd6a9b-5e41-4998-a926-a414c2fd5642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:f2:8f:72:43:d3:aa:ff:8e:17:89:64:b8: 2d:00:41:bc:6d:0d:39:4b:5d:be:b6:bf:5d:13:0c: bb:c9:81:76:62:e9:9e:31:18:aa:4a:e8:2b:e9:a2: ca:d1:50:c0:57:51:e3:dc:97:98:c4:2d:4e:a0:07: 10:27:19:b0:b0:a2:45:ad:0c:b5:d0:7d:9a:cf:cc: c6:c2:fd:b9:d4:72:97:8f:43:e3:f3:04:bb:e2:65: 61:04:d3:34:ce:b3:bf:01:7d:30:96:ab:af:e0:79: 7a:7a:d1:ac:78:94:a2:30:3d:6f:a0:05:0c:1b:eb: 66:47:49:7f:09:1c:3c:7e:b4:ff:c9:5d:63:2e:2d: 47:4a:ed:ba:52:20:17:97:28:85:63:6f:98:5f:73: 3e:fa:7b:2c:5d:6d:d5:ce:77:f3:5d:25:70:13:8e: f2:14:70:df:a9:60:eb:68:15:95:44:71:7b:3c:81: a5:6f:db:8f:c9:d3:c6:b0:21:9f:a2:73:70:6b:a2: 4a:af:ca:58:52:af:b7:0d:09:49:2e:45:ff:b7:39: 14:24:d7:2b:e2:e0:8e:68:13:b1:c0:02:2d:6a:e1: ba:3c:fd:f1:fa:f2:f3:a0:8b:f2:f0:ec:3d:ec:54: ce:07:ca:5d:21:a3:06:7e:37:c2:ae:a5:2f:c9:cc: 44:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B6:69:E2:79:5B:3D:B8:76:DE:7A:52:35:26:96:0B:0C:98:7C:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/82d5fe1b-d64f-3dc3-a98b-03c9cfe80508.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:b3:3f:ff:7e:af:59:20:2c:a1:98:ff:b3:48:f4:2e:bd:2b: 80:01:b8:89:60:d7:a2:3f:49:3a:b5:82:85:f1:58:f5:9a:f3: aa:15:23:e8:2d:51:ce:82:26:ad:d6:ce:d3:96:ba:93:5b:d1: 0d:3c:81:b0:db:4a:b5:d0:ad:e6:b0:81:dc:1f:ef:a9:64:3e: 51:2a:a9:ba:61:9c:e3:1a:3d:b6:58:89:14:a2:ac:33:d8:a0: 86:33:cd:7c:be:37:1e:46:89:ac:2f:4a:86:32:95:0c:1b:4f: 93:17:84:42:30:33:bb:58:22:9e:e8:44:6d:08:6a:33:b4:ce: 66:83:c2:3d:30:97:5a:ba:51:5b:25:c1:08:81:00:ee:5c:fb: 18:fd:df:d6:ac:85:0b:17:17:88:56:f6:f2:a1:06:9c:a1:2e: 1b:0f:69:4a:14:e4:f9:e1:43:52:d6:8b:55:1d:ca:a8:05:c1: d5:b3:19:ee:45:bc:89:71:c6:2c:18:a3:29:7f:98:5a:e2:69: cb:ae:67:46:f7:b4:30:04:c3:e8:7e:66:00:b5:ae:4a:7a:cf: 22:9a:5a:51:f7:49:a4:6d:17:d7:24:f1:dd:22:a9:39:55:72: 66:e6:94:1c:5a:b9:4d:36:3d:ba:fc:0b:58:d0:8a:1d:4f:d9: ab:41:46:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJwDaDkgjo13eVHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYyMzE1NDIwM1oXDTI1MDkyMTE1NDIwM1owLzEtMCsGA1UEAxMk ODlkZDZhOWItNWU0MS00OTk4LWE5MjYtYTQxNGMyZmQ1NjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSvyj3JD06r/jheJZLgtAEG8bQ05S12+tr9d Ewy7yYF2YumeMRiqSugr6aLK0VDAV1Hj3JeYxC1OoAcQJxmwsKJFrQy10H2az8zG wv251HKXj0Pj8wS74mVhBNM0zrO/AX0wlquv4Hl6etGseJSiMD1voAUMG+tmR0l/ CRw8frT/yV1jLi1HSu26UiAXlyiFY2+YX3M++nssXW3VznfzXSVwE47yFHDfqWDr aBWVRHF7PIGlb9uPydPGsCGfonNwa6JKr8pYUq+3DQlJLkX/tzkUJNcr4uCOaBOx wAItauG6PP3x+vLzoIvy8Ow97FTOB8pdIaMGfjfCrqUvycxEWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+2aeJ5Wz24dt56UjUmlgsMmHxcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODJkNWZlMWItZDY0Zi0z ZGMzLWE5OGItMDNjOWNmZTgwNTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuzP/9+r1kgLKGY/7NI9C69K4ABuIlg16I/STq1goXxWPWa86oVI+gt Uc6CJq3WztOWupNb0Q08gbDbSrXQreawgdwf76lkPlEqqbphnOMaPbZYiRSirDPY oIYzzXy+Nx5GiawvSoYylQwbT5MXhEIwM7tYIp7oRG0IajO0zmaDwj0wl1q6UVsl wQiBAO5c+xj939ashQsXF4hW9vKhBpyhLhsPaUoU5PnhQ1LWi1UdyqgFwdWzGe5F vIlxxiwYoyl/mFriacuuZ0b3tDAEw+h+ZgC1rkp6zyKaWlH3SaRtF9ck8d0iqTlV cmbmlBxauU02Pbr8C1jQih1P2atBRt4= -----END CERTIFICATE-----Generated at Mon Jun 30 01:16:53 2025 by rpki-client