$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4ca8c3b-9666-353c-ac32-7b4bf191f70e.roa File: a4ca8c3b-9666-353c-ac32-7b4bf191f70e.roa (raw, json) Hash identifier: wP7TPwLxHEbSO2eQE6Ua8vc/XsoY6FkBEqNaT7TWjNE= Subject key identifier: C9:F7:9E:04:ED:45:FC:A8:38:8C:9B:F2:C7:92:07:8E:7C:62:CF:B1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A348017F361BF502F9C355F00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4ca8c3b-9666-353c-ac32-7b4bf191f70e.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.153.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:17:f3:61:bf:50:2f:9c:35:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=2773f10e-7d0c-4421-b4a6-ddb3cde9ad7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f1:6f:37:91:8e:47:91:e2:d9:51:dd:75:85: ce:1a:bc:43:4c:14:1f:71:e1:92:7b:f8:dc:92:ba: 00:dd:db:a2:07:52:e8:65:42:ea:cf:a0:94:9c:8a: 35:38:4c:11:71:05:22:b2:a0:57:cc:9b:96:3b:39: 16:59:d5:16:b1:11:44:1b:c4:7a:10:13:fe:57:e6: 38:d9:28:99:7d:e9:39:4a:f9:c1:55:f0:b0:a4:98: d8:f6:e2:44:7d:34:8f:a0:30:68:d2:5b:c2:08:30: ba:d5:a4:08:26:83:1a:27:31:36:d9:e8:31:2b:77: ad:96:53:c8:32:05:50:32:45:3a:ed:bf:38:97:dd: bd:f2:c4:d0:83:f7:e2:36:d5:cd:d7:63:34:54:08: ac:8d:34:ac:97:c7:05:e7:bd:30:dc:ff:4f:92:15: 49:9a:9a:94:e2:a5:36:05:5e:c3:e1:70:c6:0c:f0: 95:ce:0a:81:ba:b5:c7:4b:11:46:ff:7c:d0:b8:8f: f1:a9:16:60:05:00:13:8e:9a:99:0e:f2:df:db:d5: e3:4e:1e:c2:3f:a4:f2:c5:55:9b:b3:6b:e1:58:f4: 83:9c:1f:2b:cc:e4:59:b5:cf:a0:2c:79:86:e8:d9: 4a:0e:a2:fc:08:a8:3b:af:90:ac:15:8e:51:32:c4: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F7:9E:04:ED:45:FC:A8:38:8C:9B:F2:C7:92:07:8E:7C:62:CF:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a4ca8c3b-9666-353c-ac32-7b4bf191f70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:85:8c:82:8c:34:29:ad:f1:93:b0:ee:ba:b8:43:f9:70:bd: 7d:99:45:59:ca:83:7f:3a:f0:88:32:a3:2b:a9:89:e9:a4:8d: f7:ec:6e:25:02:90:02:d2:85:94:0e:7d:42:34:d4:5d:fa:32: bb:49:db:ae:92:a9:e0:7d:48:86:3d:5b:e1:b1:df:1d:99:8b: 41:48:c8:ee:ac:c6:10:8f:b4:b6:fe:9b:40:ba:b8:a0:7e:c0: b5:ee:09:1d:99:55:ba:5c:8c:8e:f7:a9:db:82:5b:bf:ed:32: 71:3f:de:84:94:4b:74:4b:18:c1:55:d4:19:eb:5d:3e:3d:4f: 4b:74:5f:93:6b:7f:bd:32:17:97:d6:4b:6a:1b:a6:cb:5e:49: bb:ab:45:07:14:ea:1a:45:5d:34:73:f5:e4:16:07:5d:bc:ff: a5:28:aa:c9:3c:4a:b5:01:a1:47:19:28:48:7f:19:f6:a3:22: 54:39:b6:fa:aa:7c:f0:40:b2:24:27:1e:fa:cb:a2:ac:d3:b2: 0b:70:14:12:52:f3:53:2f:bc:98:7c:e5:5a:9c:da:3e:a6:e8: 24:a1:67:11:d4:df:8a:c0:2d:2f:54:46:8d:39:af:03:f7:e1: 15:b8:31:db:64:47:6e:bd:41:4a:0a:60:93:70:cd:d6:83:94: 84:7a:38:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBfzYb9QL5w1XwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk Mjc3M2YxMGUtN2QwYy00NDIxLWI0YTYtZGRiM2NkZTlhZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPFvN5GOR5Hi2VHddYXOGrxDTBQfceGSe/jc kroA3duiB1LoZULqz6CUnIo1OEwRcQUisqBXzJuWOzkWWdUWsRFEG8R6EBP+V+Y4 2SiZfek5SvnBVfCwpJjY9uJEfTSPoDBo0lvCCDC61aQIJoMaJzE22egxK3etllPI MgVQMkU67b84l9298sTQg/fiNtXN12M0VAisjTSsl8cF570w3P9PkhVJmpqU4qU2 BV7D4XDGDPCVzgqBurXHSxFG/3zQuI/xqRZgBQATjpqZDvLf29XjTh7CP6TyxVWb s2vhWPSDnB8rzORZtc+gLHmG6NlKDqL8CKg7r5CsFY5RMsTdaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMn3ngTtRfyoOIyb8seSB458Ys+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTRjYThjM2ItOTY2Ni0z NTNjLWFjMzItN2I0YmYxOTFmNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGFjIKMNCmt8ZOw7rq4Q/lwvX2ZRVnKg3868IgyoyupiemkjffsbiUC kALShZQOfUI01F36MrtJ266SqeB9SIY9W+Gx3x2Zi0FIyO6sxhCPtLb+m0C6uKB+ wLXuCR2ZVbpcjI73qduCW7/tMnE/3oSUS3RLGMFV1BnrXT49T0t0X5Nrf70yF5fW S2obpsteSburRQcU6hpFXTRz9eQWB128/6Uoqsk8SrUBoUcZKEh/GfajIlQ5tvqq fPBAsiQnHvrLoqzTsgtwFBJS81MvvJh85Vqc2j6m6CShZxHU34rALS9URo05rwP3 4RW4MdtkR269QUoKYJNwzdaDlIR6OIE= -----END CERTIFICATE-----Generated at Mon Jun 30 00:52:07 2025 by rpki-client