$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1439d28-9af8-3f08-8217-331ff0fa7b80.roa File: c1439d28-9af8-3f08-8217-331ff0fa7b80.roa (raw, json) Hash identifier: ANYLhbuLTVJd3eSj1uXt/5ZT7M/HAy4/IXWKtaim4lM= Subject key identifier: 74:53:55:D7:31:29:64:12:1C:33:F9:F3:AB:0D:5E:60:F7:64:1D:53 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A3480189D138DD0131A343F80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1439d28-9af8-3f08-8217-331ff0fa7b80.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.153.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:18:9d:13:8d:d0:13:1a:34:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=078b080b-6a51-40e4-b63a-26673eccae10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:c3:0b:21:ff:4a:2b:ad:7c:3a:71:9f:b8: ae:60:d8:11:db:fd:af:c5:77:15:f1:c0:68:7e:45: 19:cf:ef:22:38:1c:cc:ea:61:aa:24:c5:b2:f5:0f: 57:5d:71:b5:86:5c:ee:db:79:d0:31:73:98:ee:24: 44:fe:b6:ec:be:01:8d:4a:ff:c4:9e:fa:ed:fd:79: b8:37:a8:d2:2e:0d:8b:69:44:70:f3:19:68:c0:2a: bb:68:34:29:da:2f:17:85:b7:a0:9e:88:d0:91:98: 8a:3b:83:9b:4c:99:ff:4f:7f:33:7e:f1:6a:92:6c: d3:58:a2:52:7a:ea:2f:21:f6:45:a1:7c:74:68:c5: 1e:13:a7:40:dc:06:4a:79:4e:a0:c3:ca:56:20:2c: 68:1f:4d:ed:19:f9:a7:c2:89:ce:62:72:86:a9:fa: 9c:52:9a:ae:44:1f:e9:6f:8f:ab:d4:d2:87:7c:a1: ee:61:00:1d:f1:05:48:d7:07:6a:45:da:92:db:d7: 41:dd:5b:ce:f6:c6:fa:20:b2:61:e9:1d:01:d3:9b: 84:62:f9:17:07:54:b2:ea:11:25:3e:c6:74:82:d0: 0f:e0:66:db:4b:ba:13:fa:26:92:6a:d0:ec:ed:fb: 4c:75:5c:2d:7a:cd:e7:a3:ac:8e:75:db:8d:4b:89: 42:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:53:55:D7:31:29:64:12:1C:33:F9:F3:AB:0D:5E:60:F7:64:1D:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1439d28-9af8-3f08-8217-331ff0fa7b80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:8e:66:42:88:58:08:8b:7b:16:1e:84:21:a8:4a:cb:d6:71: cb:a8:93:96:35:0f:c3:07:0a:2f:5f:8f:83:c6:9b:1b:c1:ea: 6d:67:60:72:6c:f9:ae:46:3a:6a:08:ff:86:5f:14:78:ae:da: 94:af:02:59:5a:b0:d9:55:d3:37:04:94:1b:74:b9:4c:43:1a: 6c:8d:55:40:f1:db:00:e3:e6:c7:2c:66:7b:c0:4d:d3:33:3f: 53:74:13:41:c1:77:98:79:71:7b:a9:aa:ba:b3:57:79:99:a4: 35:32:13:38:ac:6e:3c:3a:0a:77:92:f3:68:4e:72:2e:f0:3e: c0:9a:6d:c1:42:9e:94:be:1e:aa:c7:09:6b:5b:fb:a3:dc:14: 76:f4:36:c6:bc:74:af:c2:b2:bc:16:52:3b:ae:d4:6a:49:bc: 18:ed:2b:b5:3f:dd:1c:4d:e2:21:1e:df:21:1c:a7:b8:8b:4c: 3c:09:59:9f:f1:40:e3:6c:41:8f:fc:e3:cc:2d:c5:0e:71:a0: 74:5b:90:b9:e4:0e:8d:7a:42:b5:5d:69:f6:5e:88:8f:8e:c4: d8:9c:9a:5d:19:a0:e4:9d:fc:5a:04:85:88:8d:d5:37:8b:42: 8a:23:5a:42:a5:8d:63:52:ec:59:2d:f3:07:2b:a8:09:ae:72: 92:93:06:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBidE43QExo0P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk MDc4YjA4MGItNmE1MS00MGU0LWI2M2EtMjY2NzNlY2NhZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxXDCyH/SiutfDpxn7iuYNgR2/2vxXcV8cBo fkUZz+8iOBzM6mGqJMWy9Q9XXXG1hlzu23nQMXOY7iRE/rbsvgGNSv/Envrt/Xm4 N6jSLg2LaURw8xlowCq7aDQp2i8XhbegnojQkZiKO4ObTJn/T38zfvFqkmzTWKJS euovIfZFoXx0aMUeE6dA3AZKeU6gw8pWICxoH03tGfmnwonOYnKGqfqcUpquRB/p b4+r1NKHfKHuYQAd8QVI1wdqRdqS29dB3VvO9sb6ILJh6R0B05uEYvkXB1Sy6hEl PsZ0gtAP4GbbS7oT+iaSatDs7ftMdVwtes3no6yOdduNS4lCJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRTVdcxKWQSHDP586sNXmD3ZB1TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzE0MzlkMjgtOWFmOC0z ZjA4LTgyMTctMzMxZmYwZmE3YjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6OZkKIWAiLexYehCGoSsvWccuok5Y1D8MHCi9fj4PGmxvB6m1nYHJs +a5GOmoI/4ZfFHiu2pSvAllasNlV0zcElBt0uUxDGmyNVUDx2wDj5scsZnvATdMz P1N0E0HBd5h5cXupqrqzV3mZpDUyEzisbjw6CneS82hOci7wPsCabcFCnpS+HqrH CWtb+6PcFHb0Nsa8dK/CsrwWUjuu1GpJvBjtK7U/3RxN4iEe3yEcp7iLTDwJWZ/x QONsQY/848wtxQ5xoHRbkLnkDo16QrVdafZeiI+OxNicml0ZoOSd/FoEhYiN1TeL QoojWkKljWNS7Fkt8wcrqAmucpKTBu4= -----END CERTIFICATE-----Generated at Mon Jun 30 01:02:03 2025 by rpki-client