$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9aa5a3a7-cdb0-30a9-93bc-a7385bd61034.roa File: 9aa5a3a7-cdb0-30a9-93bc-a7385bd61034.roa (raw, json) Hash identifier: iTPGhE3t1WcEaMF9BaTdqTjElrKmie09mOJ923sqtcM= Subject key identifier: D2:87:64:50:01:FB:57:FD:A4:16:8D:23:F5:3F:08:36:BF:6F:84:E0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A348019C1CDB3102AF77E3980 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9aa5a3a7-cdb0-30a9-93bc-a7385bd61034.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.153.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:19:c1:cd:b3:10:2a:f7:7e:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=b4c000b5-594d-47f0-978b-efd0955813ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:26:22:44:97:1e:e1:a7:21:18:09:49:15:98: 9b:89:09:4d:fb:ba:d1:fd:47:a1:4e:9f:08:a6:e0: ef:23:a5:ec:b8:70:d1:0d:cb:88:df:3c:d0:f8:4b: e8:85:8f:f4:a2:b9:61:5d:21:17:15:bb:ed:ee:f4: 45:ae:aa:aa:3b:29:8d:0e:ca:fb:44:56:7a:ae:c2: d6:5d:82:69:63:1f:2c:e9:5d:d2:4a:66:29:10:02: d8:07:3c:89:b1:87:ff:30:d5:a8:5e:92:7e:33:0d: f0:a7:c4:2e:34:8f:be:74:de:cd:5a:18:ec:49:ea: cf:83:e2:3e:d1:08:77:b8:df:fa:5c:47:3c:bd:9c: dc:d2:11:e5:c3:92:19:fe:0e:3c:e6:ba:b4:09:7f: 33:0f:00:d5:f2:5c:3f:fa:1e:61:9d:02:3a:32:dd: 3b:1d:eb:17:b9:00:f9:3f:45:2f:1f:16:3f:1a:1c: 7d:e6:28:30:3f:a0:45:44:00:76:48:2c:59:38:7a: c8:35:f1:76:cd:48:f3:21:a1:fa:c9:3d:7f:c4:ed: 9c:b6:e2:28:fd:21:d1:90:f1:f3:9b:0e:b3:80:69: 18:d7:f0:6d:82:62:39:52:84:03:2a:c8:fe:80:94: 3f:d0:f3:4b:34:c4:49:5a:da:a5:0a:26:8c:19:e5: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:87:64:50:01:FB:57:FD:A4:16:8D:23:F5:3F:08:36:BF:6F:84:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9aa5a3a7-cdb0-30a9-93bc-a7385bd61034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:72:54:15:b3:19:45:cb:87:b0:07:60:22:35:ca:41:e5:bc: e8:17:e4:e8:34:dd:f5:c9:fd:76:04:67:61:64:f2:2e:fd:2f: 7b:01:8b:0a:6e:88:b7:2b:4c:fc:db:de:bd:fb:11:94:76:b4: 69:33:f9:87:7e:9d:49:c7:ef:30:d7:f8:29:ec:ec:6e:a6:b8: 24:3a:ea:a2:53:28:64:02:ab:22:67:65:ef:fd:66:5c:b3:be: ba:39:93:15:e6:64:51:4f:57:fb:b8:ab:b9:6c:e9:63:91:92: e2:46:a5:66:dd:ac:d8:3b:70:be:cf:93:59:6f:b7:19:8b:c3: 6d:91:a4:04:9d:36:24:bf:b5:12:01:4c:e1:fb:3e:bd:ee:e4: 8f:f8:f2:1f:fb:8b:6d:74:58:3a:18:61:76:28:cf:93:69:bc: 95:a7:cd:b6:d1:d2:7a:8e:b9:93:8d:4c:cf:34:8b:70:74:9a: 5f:a3:0b:1b:e9:b0:b4:c9:90:58:1b:71:14:71:5f:e2:84:1c: 53:e1:f0:6c:1a:bc:b1:20:a0:a0:6d:b8:f3:59:6a:f1:3f:2e: 5d:06:cc:25:b8:33:2c:e6:9a:ca:48:32:96:5b:d9:4d:2c:04: 80:9e:7c:08:8a:2b:96:ec:3b:2e:e2:d0:4f:45:42:28:9b:8c: f1:71:2f:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBnBzbMQKvd+OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk YjRjMDAwYjUtNTk0ZC00N2YwLTk3OGItZWZkMDk1NTgxM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziYiRJce4achGAlJFZibiQlN+7rR/UehTp8I puDvI6XsuHDRDcuI3zzQ+EvohY/0orlhXSEXFbvt7vRFrqqqOymNDsr7RFZ6rsLW XYJpYx8s6V3SSmYpEALYBzyJsYf/MNWoXpJ+Mw3wp8QuNI++dN7NWhjsSerPg+I+ 0Qh3uN/6XEc8vZzc0hHlw5IZ/g485rq0CX8zDwDV8lw/+h5hnQI6Mt07HesXuQD5 P0UvHxY/Ghx95igwP6BFRAB2SCxZOHrINfF2zUjzIaH6yT1/xO2ctuIo/SHRkPHz mw6zgGkY1/BtgmI5UoQDKsj+gJQ/0PNLNMRJWtqlCiaMGeVJ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKHZFAB+1f9pBaNI/U/CDa/b4TgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOWFhNWEzYTctY2RiMC0z MGE5LTkzYmMtYTczODViZDYxMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRyVBWzGUXLh7AHYCI1ykHlvOgX5Og03fXJ/XYEZ2Fk8i79L3sBiwpu iLcrTPzb3r37EZR2tGkz+Yd+nUnH7zDX+Cns7G6muCQ66qJTKGQCqyJnZe/9Zlyz vro5kxXmZFFPV/u4q7ls6WORkuJGpWbdrNg7cL7Pk1lvtxmLw22RpASdNiS/tRIB TOH7Pr3u5I/48h/7i210WDoYYXYoz5NpvJWnzbbR0nqOuZONTM80i3B0ml+jCxvp sLTJkFgbcRRxX+KEHFPh8GwavLEgoKBtuPNZavE/Ll0GzCW4MyzmmspIMpZb2U0s BICefAiKK5bsOy7i0E9FQiibjPFxLyE= -----END CERTIFICATE-----Generated at Mon Jun 30 13:25:22 2025 by rpki-client