$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea538004-6f2f-32c7-aa95-11998a593420.roa File: ea538004-6f2f-32c7-aa95-11998a593420.roa (raw, json) Hash identifier: i5HTkGfnWkE9/pdBERnZt8EB4IQqdJt0Cuw3KULWyOc= Subject key identifier: 31:82:76:6A:32:1B:B2:8E:B9:74:D6:C2:F0:5E:18:37:BF:9F:E6:01 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A3480183EBBC9926CA914E600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea538004-6f2f-32c7-aa95-11998a593420.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.153.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:18:3e:bb:c9:92:6c:a9:14:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=9b6cbe91-b2db-4a90-96bc-91d4e5cb5fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:29:e0:91:2f:21:3d:75:80:f0:91:24:60: c5:41:08:11:99:c2:9f:d1:6b:41:c8:98:56:57:15: 32:70:9e:33:20:af:6f:a3:43:11:1a:9f:b9:66:d0: 69:48:d4:b2:a5:c5:f7:39:3e:8f:93:c6:c7:a1:a2: e5:d3:18:25:1f:0b:23:85:ff:d3:6f:21:1f:b1:bc: 0b:e8:21:79:bb:af:f1:f0:58:58:4f:61:77:0f:fd: 9e:ed:b1:4d:a3:f1:40:c9:19:ad:0a:15:43:3d:c7: df:78:fb:c7:fb:a5:e2:36:1a:f9:b6:3b:83:30:08: 5d:cc:23:94:97:8f:a1:80:4a:95:2a:65:ff:b0:7e: e7:cf:d9:be:0d:cb:cf:56:0b:76:ff:83:2f:9f:50: ea:fd:0e:75:6b:b7:e1:5b:10:b8:c3:c1:3e:e5:3c: a0:8b:ba:f0:f6:64:24:6b:8f:fc:cc:eb:dc:47:4b: 53:0c:92:c8:1f:af:b6:10:98:05:ff:c3:bc:0c:ef: de:60:46:d2:a7:2d:c4:68:75:f5:43:4b:19:81:57: 07:9b:75:7f:e2:17:b2:4b:f0:67:8d:99:08:83:fd: 3c:4b:4b:49:c0:82:f6:0f:7e:7e:8a:79:fc:fb:2a: 52:71:87:0c:4b:5b:19:60:b5:28:0a:c0:c6:2d:0f: e8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:82:76:6A:32:1B:B2:8E:B9:74:D6:C2:F0:5E:18:37:BF:9F:E6:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea538004-6f2f-32c7-aa95-11998a593420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:56:de:97:b1:af:96:fa:49:6c:f8:d6:bf:8d:80:4a:32:51: 36:e2:6f:d7:2b:a4:35:df:40:66:a4:44:cb:7e:13:78:c1:e9: de:c1:34:f9:cb:30:5a:20:5c:83:ce:60:f1:56:04:bc:fa:74: 90:cc:bf:c9:70:33:da:d3:e3:aa:f3:65:01:bb:29:79:76:b3: dd:c5:58:7d:e4:79:7e:c3:97:bc:6a:43:ab:4e:76:df:d1:07: 42:4a:0b:57:b8:57:21:43:3a:18:e1:79:f5:f5:a3:29:b8:a8: 2a:16:25:73:11:ea:de:32:94:ad:4d:9f:a4:a2:15:7c:e8:06: 2f:1b:34:16:fe:b7:24:52:88:43:bd:15:69:8a:66:c6:e1:64: 91:2a:c4:fd:9b:8b:e4:f8:39:cb:11:05:97:44:de:c8:89:e8: f1:db:37:f2:c4:e9:4d:ae:51:c0:84:48:79:95:f7:8c:37:ef: 8f:90:f2:76:74:8b:f9:7f:4d:94:c8:c3:2b:ba:2a:cb:52:1b: 34:30:c6:38:02:d3:57:c8:92:3f:ab:34:54:d5:cb:b9:27:58: d1:ba:e5:9f:98:3c:7d:73:fc:c3:f3:1b:1d:a7:30:52:c1:d5: a0:f1:24:d6:f9:27:b5:63:80:5e:2a:39:14:e7:84:6b:30:73: 86:bc:f6:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBg+u8mSbKkU5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk OWI2Y2JlOTEtYjJkYi00YTkwLTk2YmMtOTFkNGU1Y2I1ZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmcp4JEvIT11gPCRJGDFQQgRmcKf0WtByJhW VxUycJ4zIK9vo0MRGp+5ZtBpSNSypcX3OT6Pk8bHoaLl0xglHwsjhf/TbyEfsbwL 6CF5u6/x8FhYT2F3D/2e7bFNo/FAyRmtChVDPcffePvH+6XiNhr5tjuDMAhdzCOU l4+hgEqVKmX/sH7nz9m+DcvPVgt2/4Mvn1Dq/Q51a7fhWxC4w8E+5Tygi7rw9mQk a4/8zOvcR0tTDJLIH6+2EJgF/8O8DO/eYEbSpy3EaHX1Q0sZgVcHm3V/4heyS/Bn jZkIg/08S0tJwIL2D35+inn8+ypScYcMS1sZYLUoCsDGLQ/oaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGCdmoyG7KOuXTWwvBeGDe/n+YBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWE1MzgwMDQtNmYyZi0z MmM3LWFhOTUtMTE5OThhNTkzNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5W3pexr5b6SWz41r+NgEoyUTbib9crpDXfQGakRMt+E3jB6d7BNPnL MFogXIPOYPFWBLz6dJDMv8lwM9rT46rzZQG7KXl2s93FWH3keX7Dl7xqQ6tOdt/R B0JKC1e4VyFDOhjhefX1oym4qCoWJXMR6t4ylK1Nn6SiFXzoBi8bNBb+tyRSiEO9 FWmKZsbhZJEqxP2bi+T4OcsRBZdE3siJ6PHbN/LE6U2uUcCESHmV94w374+Q8nZ0 i/l/TZTIwyu6KstSGzQwxjgC01fIkj+rNFTVy7knWNG65Z+YPH1z/MPzGx2nMFLB 1aDxJNb5J7VjgF4qORTnhGswc4a89sU= -----END CERTIFICATE-----Generated at Mon Jun 30 06:13:14 2025 by rpki-client