$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa File: 9682b18d-084f-339c-8a00-ef1f480f78c1.roa (raw, json) Hash identifier: CQpMYJy2dSvu20GvDtMk4URLyaPElVBYKWmTlBjKn+8= Subject key identifier: AA:94:77:62:16:05:11:D7:22:B1:C0:F8:48:6F:12:F7:66:34:80:F3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A5B95B427B94454D8DAC45980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 20.153.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b4:27:b9:44:54:d8:da:c4:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=0497b480-bf83-451a-be7a-c1b1c0d61925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:86:6b:fc:4c:e4:69:ef:4b:2b:74:81:5e:d9: d2:9f:9d:3f:ee:16:af:47:b4:35:68:54:07:0e:73: f9:41:d4:13:fc:ff:d2:b7:1c:4f:41:c3:4b:e2:4f: 71:ba:9d:51:03:a7:83:27:32:46:2d:bc:14:12:c9: dd:f4:45:27:57:5a:ef:0d:ad:da:ce:55:32:24:29: ba:30:24:cd:7b:0c:fb:6e:4f:a3:80:b2:99:ac:77: 85:eb:d5:7c:1b:b3:9f:81:95:fb:fc:a0:5f:f7:0f: 2f:6c:ef:c1:a7:e2:4a:82:e1:67:6d:9b:64:c5:4b: 68:21:9c:7d:a5:2a:19:cb:4d:c8:db:c6:f5:19:51: 6f:74:af:00:9d:74:e3:21:e7:8c:1b:22:90:21:a6: 1d:57:64:cc:be:4c:c3:3e:75:2f:30:79:cb:a7:95: 17:a3:f5:f4:2d:76:d1:b4:1c:30:43:4d:6e:c3:84: a1:89:d3:e9:87:dc:51:4b:3d:6c:58:a1:e6:1e:ac: 5e:e2:78:20:ee:f5:62:d5:8f:27:b6:de:db:fb:c3: 31:dd:a7:3d:90:34:79:0e:d7:10:a5:db:3e:ca:c9: d4:c5:e5:b4:c7:38:74:27:1a:bd:92:1b:3f:3c:47: e5:79:96:fc:fd:01:89:d7:87:bc:be:1f:27:6e:39: 10:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:94:77:62:16:05:11:D7:22:B1:C0:F8:48:6F:12:F7:66:34:80:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:a6:84:88:82:de:5f:b7:31:c1:ee:e6:5e:4e:28:ea:40:54: 95:88:5d:71:06:80:9b:c8:14:91:ec:6c:81:d0:d1:9d:e8:da: d5:9d:4f:6c:bd:72:0c:cf:9f:d7:8d:36:84:24:45:8c:23:d9: 88:6c:2b:bb:e2:a4:1d:aa:6f:1f:97:ed:d0:1e:f3:0d:6c:cb: 69:d2:b1:8c:35:47:65:32:89:d2:53:31:85:bd:1a:e8:ce:16: 8e:c8:2e:e0:b6:92:7d:db:92:83:64:67:ea:5a:b3:56:45:b4: f2:4a:c9:b7:ce:41:41:a8:6a:04:c0:a6:9a:74:19:78:ef:c0: 87:96:8f:cf:e1:c0:9b:f8:08:45:a9:ff:4b:62:71:e7:bb:b7: e5:e3:ef:70:a1:3b:48:dc:55:32:e8:a3:99:36:41:f4:ca:34: 9e:ac:59:69:2a:ef:ea:32:df:fa:c6:8e:43:25:a2:fc:57:79: 1e:29:b4:2c:20:92:3d:59:8a:97:07:6e:17:24:73:70:c4:ff: 2c:48:54:ea:12:db:ec:72:a5:1d:72:8e:b3:a7:8c:dc:70:23: 7c:76:3e:81:98:83:f5:1e:55:54:18:10:aa:40:44:d5:bf:8a: 5b:2e:4e:61:ce:6f:3e:0d:b8:22:50:8c:f9:3e:c6:48:6e:de: ed:b3:aa:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbQnuURU2NrEWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk MDQ5N2I0ODAtYmY4My00NTFhLWJlN2EtYzFiMWMwZDYxOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoZr/Ezkae9LK3SBXtnSn50/7havR7Q1aFQH DnP5QdQT/P/StxxPQcNL4k9xup1RA6eDJzJGLbwUEsnd9EUnV1rvDa3azlUyJCm6 MCTNewz7bk+jgLKZrHeF69V8G7OfgZX7/KBf9w8vbO/Bp+JKguFnbZtkxUtoIZx9 pSoZy03I28b1GVFvdK8AnXTjIeeMGyKQIaYdV2TMvkzDPnUvMHnLp5UXo/X0LXbR tBwwQ01uw4ShidPph9xRSz1sWKHmHqxe4ngg7vVi1Y8ntt7b+8Mx3ac9kDR5DtcQ pds+ysnUxeW0xzh0Jxq9khs/PEfleZb8/QGJ14e8vh8nbjkQJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqUd2IWBRHXIrHA+EhvEvdmNIDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTY4MmIxOGQtMDg0Zi0z MzljLThhMDAtZWYxZjQ4MGY3OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKmhIiC3l+3McHu5l5OKOpAVJWIXXEGgJvIFJHsbIHQ0Z3o2tWdT2y9 cgzPn9eNNoQkRYwj2YhsK7vipB2qbx+X7dAe8w1sy2nSsYw1R2UyidJTMYW9GujO Fo7ILuC2kn3bkoNkZ+pas1ZFtPJKybfOQUGoagTAppp0GXjvwIeWj8/hwJv4CEWp /0ticee7t+Xj73ChO0jcVTLoo5k2QfTKNJ6sWWkq7+oy3/rGjkMlovxXeR4ptCwg kj1ZipcHbhckc3DE/yxIVOoS2+xypR1yjrOnjNxwI3x2PoGYg/UeVVQYEKpARNW/ ilsuTmHObz4NuCJQjPk+xkhu3u2zqgE= -----END CERTIFICATE-----Generated at Mon Jun 30 08:35:11 2025 by rpki-client