$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c330b76c-c296-304a-84c3-e600b3a83a94.roa File: c330b76c-c296-304a-84c3-e600b3a83a94.roa (raw, json) Hash identifier: S8tcbrAPDBwouITigYB14qmJVKUyNyKrGtUh8NgNMxw= Subject key identifier: B8:4E:63:9A:F7:E6:0D:E7:24:79:9A:DC:02:5B:94:97:44:21:0E:18 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A348018DC7F66491E8876E000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c330b76c-c296-304a-84c3-e600b3a83a94.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.153.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:18:dc:7f:66:49:1e:88:76:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=b47f77dc-dc7f-45d5-8f26-420ca18b28d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:15:18:a2:2b:be:8a:6d:d6:71:28:e6:be:74: 47:d7:93:44:58:c9:a3:74:77:68:02:30:f3:7e:7b: 8f:80:ac:e4:2b:37:5b:3c:33:55:7b:4c:7b:e3:aa: 0b:37:28:6b:7f:ac:eb:ce:0a:58:24:be:7a:a2:5c: 40:cb:89:e2:d3:0f:c1:ab:3d:be:e9:24:1d:be:88: 65:a4:c1:21:02:d5:87:96:78:f0:54:77:25:53:fe: 15:9a:d5:20:67:8c:0e:0c:fa:76:a4:1a:0f:97:4e: a8:50:34:c1:35:3b:e0:e6:44:81:9f:56:08:b6:b3: 3a:e6:bc:ad:49:81:04:a3:bc:5c:3f:ea:86:17:5d: 71:1a:41:b6:8f:67:2b:35:7c:b4:da:8a:a0:0f:4e: 5c:ff:91:ed:b7:6f:cb:fd:a5:91:d5:48:88:89:38: 4c:4c:d3:e0:e2:10:c2:3f:0a:2f:7b:75:6e:32:ad: 8e:87:e4:c0:ca:69:65:2f:08:5f:e6:a7:b8:8c:8b: ad:25:5e:c3:f2:b3:b1:96:88:cd:c7:aa:58:e4:5e: c7:95:d4:97:2d:54:4f:67:63:28:e8:27:f8:4e:8b: 38:51:ad:05:d1:68:b5:31:4f:0b:33:e7:03:0f:cb: 05:e0:c0:2d:45:57:cc:15:a2:00:76:09:57:84:83: 5c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4E:63:9A:F7:E6:0D:E7:24:79:9A:DC:02:5B:94:97:44:21:0E:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c330b76c-c296-304a-84c3-e600b3a83a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:06:b3:a2:54:e0:6e:a3:0b:88:67:c8:fb:9d:af:36:88:11: 03:4c:58:64:1b:c7:54:76:15:de:47:ce:6a:f8:21:ea:c9:6a: ad:e7:44:ff:98:36:15:99:d8:17:3c:0d:6c:57:6f:9d:0f:d0: a2:9e:67:d4:30:5f:fd:c7:d2:3f:40:4a:e0:d5:41:8c:bc:26: da:1f:1d:31:5e:a7:3f:52:44:2c:0e:3e:3b:24:cb:b9:69:b0: 76:5b:02:59:10:d2:fb:6e:5a:16:a6:62:c4:80:81:22:18:2e: 9e:9b:71:19:82:8e:20:2e:55:14:b4:4c:d3:24:af:e5:ce:d8: ff:e5:1a:97:ca:80:83:e4:b8:be:53:e1:de:26:80:d2:8a:60: 20:63:51:0f:67:26:64:6a:9c:ff:9a:04:21:fa:a7:34:1e:6e: b7:33:09:88:8f:69:e6:08:64:0a:3f:6c:c1:3f:21:eb:53:f1: a3:a2:91:c8:56:77:bb:77:ae:d5:fb:24:3c:bb:b5:1f:ee:ea: 84:58:6d:b2:0f:1d:62:f6:78:ea:43:11:df:ad:d5:b2:f0:72: 73:b5:99:d7:fd:67:20:33:d6:54:6e:03:d4:a0:29:d5:07:5f: 6b:44:b4:fd:a3:39:3e:f1:1c:90:99:b5:50:87:d6:b6:f4:06: c7:94:76:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBjcf2ZJHoh24AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk YjQ3Zjc3ZGMtZGM3Zi00NWQ1LThmMjYtNDIwY2ExOGIyOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRUYoiu+im3WcSjmvnRH15NEWMmjdHdoAjDz fnuPgKzkKzdbPDNVe0x746oLNyhrf6zrzgpYJL56olxAy4ni0w/Bqz2+6SQdvohl pMEhAtWHlnjwVHclU/4VmtUgZ4wODPp2pBoPl06oUDTBNTvg5kSBn1YItrM65ryt SYEEo7xcP+qGF11xGkG2j2crNXy02oqgD05c/5Htt2/L/aWR1UiIiThMTNPg4hDC Pwove3VuMq2Oh+TAymllLwhf5qe4jIutJV7D8rOxlojNx6pY5F7HldSXLVRPZ2Mo 6Cf4Tos4Ua0F0Wi1MU8LM+cDD8sF4MAtRVfMFaIAdglXhINc+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhOY5r35g3nJHma3AJblJdEIQ4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzMzMGI3NmMtYzI5Ni0z MDRhLTg0YzMtZTYwMGIzYTgzYTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJknMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcGs6JU4G6jC4hnyPudrzaIEQNMWGQbx1R2Fd5Hzmr4IerJaq3nRP+Y NhWZ2Bc8DWxXb50P0KKeZ9QwX/3H0j9ASuDVQYy8JtofHTFepz9SRCwOPjsky7lp sHZbAlkQ0vtuWhamYsSAgSIYLp6bcRmCjiAuVRS0TNMkr+XO2P/lGpfKgIPkuL5T 4d4mgNKKYCBjUQ9nJmRqnP+aBCH6pzQebrczCYiPaeYIZAo/bME/IetT8aOikchW d7t3rtX7JDy7tR/u6oRYbbIPHWL2eOpDEd+t1bLwcnO1mdf9ZyAz1lRuA9SgKdUH X2tEtP2jOT7xHJCZtVCH1rb0BseUdto= -----END CERTIFICATE-----Generated at Mon Jun 30 08:17:07 2025 by rpki-client