$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15aab450-cc46-39b5-be1c-5166f6befaba.roa File: 15aab450-cc46-39b5-be1c-5166f6befaba.roa (raw, json) Hash identifier: mDMnfp1tTuxB4ej4A1hWp95AF3BBDWl0TggVXu9gQIc= Subject key identifier: 89:DF:30:91:CE:66:67:24:DD:B8:81:EC:95:48:61:6E:D6:8F:51:73 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858495447721BF66FB421CFE90600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15aab450-cc46-39b5-be1c-5166f6befaba.roa Signing time: Thu 27 Mar 2025 17:25:41 +0000 ROA not before: Thu 27 Mar 2025 17:25:41 +0000 ROA not after: Wed 25 Jun 2025 17:25:41 +0000 asID: 8069 IP address blocks: 20.153.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:54:47:72:1b:f6:6f:b4:21:cf:e9:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 27 17:25:41 2025 GMT Not After : Jun 25 17:25:41 2025 GMT Subject: CN=8bf049f9-96bc-4b40-9eae-753b07316349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9a:a2:1e:63:13:ee:0d:38:24:b2:18:0f:a0: fb:8b:cc:7a:94:c4:33:45:be:be:ab:19:0f:8a:36: 68:ea:e4:4b:f4:ad:bc:da:55:55:72:fe:ab:b0:5b: 34:0e:1a:f6:64:b1:af:0f:7f:40:cb:19:47:d5:3e: 7d:95:00:83:a6:4f:7f:c8:2c:be:b5:0e:81:b9:82: 34:48:8b:4e:a2:4c:32:1f:df:0e:ab:e0:8c:63:ae: 34:29:e8:48:56:c0:d7:f7:23:4a:a4:72:01:f3:04: 80:f4:10:3e:45:40:e4:cb:2a:00:d6:ad:17:1b:74: 34:e0:b7:b9:bc:82:c9:71:94:c0:e5:fb:d0:78:6d: b9:22:e9:73:8b:b0:1f:f3:6e:43:0f:68:b0:2a:a5: 9c:67:ce:0c:56:0c:3f:a4:ab:0d:52:95:95:4d:19: 19:7f:2b:23:df:17:56:7a:79:d6:17:bf:76:63:86: ae:b7:6e:63:01:f0:e8:1b:59:cf:c3:27:89:28:65: 87:42:63:10:32:ef:fd:68:79:c7:b0:35:31:aa:44: 99:18:89:d5:ec:09:88:8a:46:a3:1b:15:d9:f0:14: ed:9b:e9:23:3c:be:09:6b:22:1d:46:fc:62:c5:44: 27:4e:a8:f2:ec:32:2b:94:06:d0:7b:41:c9:28:db: b9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DF:30:91:CE:66:67:24:DD:B8:81:EC:95:48:61:6E:D6:8F:51:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15aab450-cc46-39b5-be1c-5166f6befaba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d8:84:e1:c5:f4:e5:07:ad:b9:ac:ce:9b:dd:c7:c9:91:45: 43:b1:f3:e6:13:5a:f3:52:f8:96:d0:e6:8e:11:c7:cb:9c:75: 9d:9a:9b:64:f2:07:11:05:b4:2d:3e:d0:b0:88:90:c2:40:5e: dc:52:65:00:d9:a7:c9:6a:df:10:79:a5:89:d5:ad:f9:6f:fd: ae:0b:63:33:65:ce:07:dc:59:a4:14:a0:af:9f:85:30:39:44: 15:1b:39:d0:c6:02:47:5d:dd:92:d3:08:e7:e9:7c:64:f8:b3: 48:c2:50:cb:8f:df:ac:8e:4f:16:cb:28:38:fd:fd:e4:e0:d3: fb:35:9f:a8:33:a4:be:52:53:dd:c6:84:ee:c1:72:34:c6:fd: 85:f0:cb:e0:7d:e8:4e:a6:bb:94:22:80:00:f1:87:92:b0:51: d3:1d:b5:65:92:98:7a:a3:a5:73:e8:89:05:2c:80:a7:e7:92: ca:e0:d8:ed:c2:2e:dc:57:b2:ad:1d:65:db:4a:c2:55:98:f0: 00:20:77:20:e2:b8:2d:a1:c9:f4:b9:d9:af:f4:ea:c3:f1:ef: 5c:d0:9d:7d:4d:15:d8:66:33:95:70:7a:df:3a:db:ed:4d:66: 0b:4e:db:09:16:8b:c4:44:fc:ec:70:58:f3:ef:dd:65:d3:d3: e9:ca:24:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElUR3Ib9m+0Ic/pBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyNzE3MjU0MVoXDTI1MDYyNTE3MjU0MVowLzEtMCsGA1UEAxMk OGJmMDQ5ZjktOTZiYy00YjQwLTllYWUtNzUzYjA3MzE2MzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJqiHmMT7g04JLIYD6D7i8x6lMQzRb6+qxkP ijZo6uRL9K282lVVcv6rsFs0Dhr2ZLGvD39AyxlH1T59lQCDpk9/yCy+tQ6BuYI0 SItOokwyH98Oq+CMY640KehIVsDX9yNKpHIB8wSA9BA+RUDkyyoA1q0XG3Q04Le5 vILJcZTA5fvQeG25Iulzi7Af825DD2iwKqWcZ84MVgw/pKsNUpWVTRkZfysj3xdW ennWF792Y4aut25jAfDoG1nPwyeJKGWHQmMQMu/9aHnHsDUxqkSZGInV7AmIikaj GxXZ8BTtm+kjPL4JayIdRvxixUQnTqjy7DIrlAbQe0HJKNu5WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInfMJHOZmck3biB7JVIYW7Wj1FzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTVhYWI0NTAtY2M0Ni0z OWI1LWJlMWMtNTE2NmY2YmVmYWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHYhOHF9OUHrbmszpvdx8mRRUOx8+YTWvNS+JbQ5o4Rx8ucdZ2am2Ty BxEFtC0+0LCIkMJAXtxSZQDZp8lq3xB5pYnVrflv/a4LYzNlzgfcWaQUoK+fhTA5 RBUbOdDGAkdd3ZLTCOfpfGT4s0jCUMuP36yOTxbLKDj9/eTg0/s1n6gzpL5SU93G hO7BcjTG/YXwy+B96E6mu5QigADxh5KwUdMdtWWSmHqjpXPoiQUsgKfnksrg2O3C LtxXsq0dZdtKwlWY8AAgdyDiuC2hyfS52a/06sPx71zQnX1NFdhmM5Vwet862+1N ZgtO2wkWi8RE/OxwWPPv3WXT0+nKJMA= -----END CERTIFICATE-----Generated at Sat Apr 5 09:42:28 2025 by rpki-client