$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d72792fe-5daf-30c7-8173-737c0832e061.roa File: d72792fe-5daf-30c7-8173-737c0832e061.roa (raw, json) Hash identifier: 01p8QcWI6UrvOFkS4Wg/U/y8oZP6r/Q54GVYK4bgU94= Subject key identifier: D8:68:54:86:96:C8:9C:83:DD:E6:93:98:F1:F9:71:5F:9E:91:7F:32 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849E34C33E9BC77DB34F2A62F00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d72792fe-5daf-30c7-8173-737c0832e061.roa Signing time: Sat 17 May 2025 22:55:52 +0000 ROA not before: Sat 17 May 2025 22:55:52 +0000 ROA not after: Fri 15 Aug 2025 22:55:52 +0000 asID: 8069 IP address blocks: 20.153.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:4c:33:e9:bc:77:db:34:f2:a6:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 17 22:55:52 2025 GMT Not After : Aug 15 22:55:52 2025 GMT Subject: CN=7415022f-1073-4301-83c6-a6d1b399726d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b5:60:c9:51:5e:73:7f:28:72:f0:6a:a7:22: 50:9c:6a:73:eb:fd:cf:86:4f:d7:75:df:4c:ea:97: f6:a4:6b:d4:f8:4e:14:0f:a0:be:25:ea:4b:17:a4: 57:1b:f5:f6:bf:20:57:5d:e1:ac:88:20:43:eb:af: 50:54:4a:84:b3:4a:92:da:a3:5e:02:26:01:aa:f2: b1:e8:c5:0d:95:50:fa:a4:28:2f:dc:0a:15:0a:b0: 1a:af:ac:23:36:fa:71:5b:48:96:ef:ec:b0:fa:03: 5e:97:52:9e:35:fb:25:76:50:5b:0c:b8:42:dc:ce: c6:f9:06:89:f5:be:5e:d9:1a:79:0a:8c:06:e2:3a: 22:b7:a4:56:22:86:26:f8:3c:2d:19:1d:2e:7c:d3: ca:2f:45:62:28:d1:86:6b:48:c0:2f:51:5c:63:94: 20:d7:d2:aa:32:26:bc:ea:57:9f:db:4d:59:a1:6e: 27:2b:bd:24:78:82:62:98:78:d0:08:6e:56:8c:6e: 1d:3b:84:f2:99:a6:db:b7:82:29:0f:f2:84:c3:38: c1:eb:f3:ae:eb:26:42:78:bf:60:21:9d:31:12:d9: dd:9d:be:c5:ab:a5:0f:26:0b:49:52:46:b3:84:6a: 6e:9f:22:36:7d:5c:64:fb:b7:07:18:f7:40:1c:6d: aa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:68:54:86:96:C8:9C:83:DD:E6:93:98:F1:F9:71:5F:9E:91:7F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d72792fe-5daf-30c7-8173-737c0832e061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:af:10:4e:b9:60:d9:29:c1:0e:ee:b6:9b:80:28:a1:6b:ce: 94:9b:3d:ca:c3:09:ba:0f:bf:fd:7a:48:9c:34:3f:a7:e1:73: dd:0f:a0:ff:5e:2f:fc:17:db:35:02:38:92:4b:6c:69:8e:95: 47:e2:f4:a2:b0:7c:08:bd:a2:3e:dd:39:6e:45:26:8a:1b:31: 6f:0a:7f:b1:5d:fc:17:f1:b4:a5:58:0e:98:57:16:eb:17:94: 3a:9a:eb:0b:98:ca:10:6f:5f:23:ff:0f:b3:a5:f6:da:91:29: 5e:2b:df:c8:ef:3d:ec:9a:2c:c8:22:c7:f9:55:aa:ee:5a:4c: b4:02:6a:1e:f0:02:a1:8d:42:81:48:a8:dd:60:b6:a3:d9:71: b3:57:0c:72:49:73:22:d4:da:f9:23:35:47:25:35:99:70:00: d3:75:b5:94:c4:42:a1:18:5b:2d:6d:51:15:a9:34:c8:14:85: a1:c2:ea:25:ae:95:ea:6f:4a:4c:51:c6:34:29:85:af:fb:22: e9:a2:4a:9a:e0:fd:98:57:91:99:91:05:37:c5:84:b4:0f:f9: 89:b1:66:82:c7:b1:ad:a9:03:79:85:2e:c2:5f:98:0e:1b:01: 71:0f:ad:47:fb:82:c4:14:b6:7d:40:cf:00:4c:b9:e3:a2:cb: e6:63:42:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnjTDPpvHfbNPKmLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDUxNzIyNTU1MloXDTI1MDgxNTIyNTU1MlowLzEtMCsGA1UEAxMk NzQxNTAyMmYtMTA3My00MzAxLTgzYzYtYTZkMWIzOTk3MjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bVgyVFec38ocvBqpyJQnGpz6/3Phk/Xdd9M 6pf2pGvU+E4UD6C+JepLF6RXG/X2vyBXXeGsiCBD669QVEqEs0qS2qNeAiYBqvKx 6MUNlVD6pCgv3AoVCrAar6wjNvpxW0iW7+yw+gNel1KeNfsldlBbDLhC3M7G+QaJ 9b5e2Rp5CowG4joit6RWIoYm+DwtGR0ufNPKL0ViKNGGa0jAL1FcY5Qg19KqMia8 6lef201ZoW4nK70keIJimHjQCG5WjG4dO4Tymabbt4IpD/KEwzjB6/Ou6yZCeL9g IZ0xEtndnb7Fq6UPJgtJUkazhGpunyI2fVxk+7cHGPdAHG2q3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhoVIaWyJyD3eaTmPH5cV+ekX8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDcyNzkyZmUtNWRhZi0z MGM3LTgxNzMtNzM3YzA4MzJlMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGvEE65YNkpwQ7utpuAKKFrzpSbPcrDCboPv/16SJw0P6fhc90PoP9e L/wX2zUCOJJLbGmOlUfi9KKwfAi9oj7dOW5FJoobMW8Kf7Fd/BfxtKVYDphXFusX lDqa6wuYyhBvXyP/D7Ol9tqRKV4r38jvPeyaLMgix/lVqu5aTLQCah7wAqGNQoFI qN1gtqPZcbNXDHJJcyLU2vkjNUclNZlwANN1tZTEQqEYWy1tURWpNMgUhaHC6iWu lepvSkxRxjQpha/7IumiSprg/ZhXkZmRBTfFhLQP+YmxZoLHsa2pA3mFLsJfmA4b AXEPrUf7gsQUtn1AzwBMueOiy+ZjQsw= -----END CERTIFICATE-----Generated at Mon Jun 30 14:09:37 2025 by rpki-client