$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa File: b7b843e5-1b24-372c-a453-258435c10dbf.roa (raw, json) Hash identifier: XpQXhjhBsORAha/KPXPKlludps+wjLCm6kS7wu6oQIM= Subject key identifier: 1E:26:C6:61:3A:4B:CB:7E:95:E1:89:95:C2:DF:F9:EC:9B:FB:E6:1F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A34801976733737044FAA2900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.153.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:19:76:73:37:37:04:4f:aa:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=7c75f58b-87e9-4f0c-9bc8-8fc24c82d386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:af:28:7e:33:e4:cf:23:95:58:2f:f9:6e: 7b:7b:10:62:4d:45:1f:19:6c:70:85:0f:83:7c:4e: 94:48:c7:1e:c1:b6:be:bc:d3:11:41:0e:37:0f:b6: 56:d3:03:e2:df:3b:9f:71:ca:d8:e3:63:fb:6b:3a: 9a:7a:78:c4:4b:93:c8:75:b3:b4:66:ab:1f:f4:48: 41:90:35:4a:c6:32:74:2c:bc:36:29:53:71:7e:cb: d6:fd:16:88:6a:7b:ce:c2:38:88:99:e3:3b:fd:8c: e8:b6:5e:a7:5b:8f:cb:86:22:57:08:40:f3:93:51: f5:1b:57:95:74:37:af:a2:6b:0b:7a:d6:35:f2:ab: d6:da:6f:e2:08:97:85:17:a5:c5:e1:86:6b:4c:fc: 90:b3:fe:3d:90:e9:9a:5d:fb:33:0e:07:5c:9c:15: b6:16:82:0c:25:f6:af:c7:4f:b1:d6:97:ae:eb:e1: b1:29:fe:04:b0:0f:7a:0a:03:d9:da:2e:8d:53:fd: 6b:15:9b:06:d3:1e:ad:be:cd:2d:29:f4:23:7c:60: 9a:c8:f8:d0:00:d6:0b:09:5e:46:9e:b4:25:fd:9a: 23:2e:d6:7e:8c:a8:cf:29:02:f7:95:0a:d0:d7:2f: 5a:26:25:22:78:f5:2d:7f:e9:90:9f:28:1b:87:a4: d9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:26:C6:61:3A:4B:CB:7E:95:E1:89:95:C2:DF:F9:EC:9B:FB:E6:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b7b843e5-1b24-372c-a453-258435c10dbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:5f:d1:9e:3c:5a:6e:8f:59:cd:81:a9:99:9f:bf:12:a7:2e: 23:2b:11:a7:15:5b:3e:be:2e:5b:5f:06:ee:eb:2d:42:bd:40: 3c:50:ae:de:8a:71:8b:a4:76:81:d0:8e:4b:63:da:b7:07:15: 12:17:aa:ed:f2:e0:fc:5b:91:f2:7b:e1:03:b6:16:2d:87:0e: 01:da:1f:59:bd:d4:fd:de:2d:75:f5:de:1d:e8:a6:16:73:30: 64:dd:f3:af:4d:7d:de:7e:0c:be:37:67:86:a0:01:0e:f8:be: 4e:b9:d1:e1:a1:2d:3b:e3:f0:53:fe:c5:d9:dd:c6:a2:da:99: f7:88:56:38:43:7c:17:40:0a:4d:a9:ab:57:e4:62:95:2b:f8: e0:75:de:68:69:82:89:e7:c0:85:68:dc:48:40:0c:34:77:cb: 87:a1:96:df:55:d0:0f:7e:55:d5:04:4c:5d:2b:6a:2d:3f:e4: 9d:e0:dd:4c:53:dd:21:ba:66:ad:c8:a7:48:e4:80:89:68:f2: ef:5f:28:91:b2:4e:dc:31:dd:a2:f9:70:ce:99:8b:dc:82:2f: 2c:70:ab:8a:83:d7:68:c0:b2:82:86:e2:35:54:5f:91:ad:66: 7e:fd:9b:c3:9c:f4:71:5d:b5:78:c4:94:4d:cd:61:3a:fc:81: 8d:72:dc:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBl2czc3BE+qKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk N2M3NWY1OGItODdlOS00ZjBjLTliYzgtOGZjMjRjODJkMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5ivKH4z5M8jlVgv+W57exBiTUUfGWxwhQ+D fE6USMcewba+vNMRQQ43D7ZW0wPi3zufccrY42P7azqaenjES5PIdbO0Zqsf9EhB kDVKxjJ0LLw2KVNxfsvW/RaIanvOwjiImeM7/Yzotl6nW4/LhiJXCEDzk1H1G1eV dDevomsLetY18qvW2m/iCJeFF6XF4YZrTPyQs/49kOmaXfszDgdcnBW2FoIMJfav x0+x1peu6+GxKf4EsA96CgPZ2i6NU/1rFZsG0x6tvs0tKfQjfGCayPjQANYLCV5G nrQl/ZojLtZ+jKjPKQL3lQrQ1y9aJiUiePUtf+mQnygbh6TZlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4mxmE6S8t+leGJlcLf+eyb++YfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjdiODQzZTUtMWIyNC0z NzJjLWE0NTMtMjU4NDM1YzEwZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtf0Z48Wm6PWc2BqZmfvxKnLiMrEacVWz6+LltfBu7rLUK9QDxQrt6K cYukdoHQjktj2rcHFRIXqu3y4PxbkfJ74QO2Fi2HDgHaH1m91P3eLXX13h3ophZz MGTd869Nfd5+DL43Z4agAQ74vk650eGhLTvj8FP+xdndxqLamfeIVjhDfBdACk2p q1fkYpUr+OB13mhpgonnwIVo3EhADDR3y4ehlt9V0A9+VdUETF0rai0/5J3g3UxT 3SG6Zq3Ip0jkgIlo8u9fKJGyTtwx3aL5cM6Zi9yCLyxwq4qD12jAsoKG4jVUX5Gt Zn79m8Oc9HFdtXjElE3NYTr8gY1y3Pc= -----END CERTIFICATE-----Generated at Mon Jun 30 00:56:16 2025 by rpki-client