$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16593986-f3e0-304f-86f1-14b7a09e9c5c.roa File: 16593986-f3e0-304f-86f1-14b7a09e9c5c.roa (raw, json) Hash identifier: OcTrb62j0+bXceyFRC8pMv0Z2h5j2h3vfvJgzbyhhK4= Subject key identifier: 87:E8:0D:2E:0C:D7:16:26:7D:0B:EC:63:13:9C:B2:D7:19:9C:6E:69 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858493673BB27AA311726B179E300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16593986-f3e0-304f-86f1-14b7a09e9c5c.roa Signing time: Mon 17 Mar 2025 01:00:37 +0000 ROA not before: Mon 17 Mar 2025 01:00:37 +0000 ROA not after: Sun 15 Jun 2025 01:00:37 +0000 asID: 8069 IP address blocks: 20.153.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:36:73:bb:27:aa:31:17:26:b1:79:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 17 01:00:37 2025 GMT Not After : Jun 15 01:00:37 2025 GMT Subject: CN=dfced524-5be8-49d9-b59b-05aee2b7ad16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f8:c9:18:80:4c:9f:c4:d6:cb:49:0d:ef:31: 8f:f4:4a:30:ed:77:43:24:ee:6c:91:0d:e3:6b:16: 37:57:08:7f:96:e9:7e:9f:8e:9e:82:50:93:21:3d: 47:ee:8d:1d:3c:a1:b3:f2:da:c5:6b:9c:6a:77:2f: 11:94:3a:f3:7c:da:1a:5c:ee:f1:f5:ee:b1:22:cf: a3:b8:fd:f3:bc:b6:01:5a:cc:fd:d1:da:4c:83:13: da:e9:29:16:9b:a6:83:eb:79:d3:f0:89:e3:67:2c: ad:04:f6:b6:1f:d0:f9:34:44:a3:fd:02:cd:84:32: d4:7e:2c:0e:82:76:7b:54:ff:93:a6:4e:56:67:60: e1:a8:8f:5e:bc:5a:2c:a8:4e:fd:25:7e:bc:78:86: 4f:6c:93:3b:b9:0b:18:25:73:26:68:48:4f:18:c2: fe:2b:0e:32:2e:43:1d:f8:6b:3d:4e:55:ef:b5:38: 4e:eb:67:d6:a3:f5:e6:a9:eb:53:9f:4e:d7:89:e1: 22:01:31:08:cb:7e:4d:2c:6c:01:6e:0c:91:cf:8e: 78:86:9f:c6:12:a5:45:54:3f:8a:f3:8d:30:54:89: 07:94:4e:fc:24:f2:76:0c:88:3c:32:e0:62:e9:21: 4b:7c:df:58:cf:07:05:08:8a:fc:4b:a7:fc:09:5e: 94:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E8:0D:2E:0C:D7:16:26:7D:0B:EC:63:13:9C:B2:D7:19:9C:6E:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16593986-f3e0-304f-86f1-14b7a09e9c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b4:31:5b:77:7e:0f:60:29:5b:ca:c3:73:59:83:3d:29:63: 79:30:0e:5a:ff:0f:59:3c:17:ea:5c:c2:db:ba:94:88:e2:cd: db:bd:bb:a5:fa:9f:67:eb:df:d3:3c:d7:0c:16:79:16:ba:58: c9:5f:1a:fc:90:f1:4c:3d:51:84:57:99:c8:38:3e:b0:53:80: c1:db:25:8f:f7:74:41:da:04:27:39:d2:4f:6d:bb:5e:96:17: 35:6b:16:da:27:48:3b:ee:dd:94:2b:14:e6:c8:02:61:30:fb: 23:13:1a:c9:6f:8a:10:8b:f7:3f:51:dd:2e:2f:2f:72:f6:ff: 73:91:3d:af:0d:bf:9e:79:7b:00:a0:34:2a:4a:33:7a:09:77: 09:f0:b9:f0:ee:41:ac:a1:cf:4c:4e:ef:e4:da:94:19:e6:fd: ba:ba:fd:fa:46:fb:4a:a9:55:15:7d:e3:03:04:22:08:db:e9: c1:c5:a9:f5:c7:63:19:32:49:58:34:4e:1c:89:8e:59:8f:79: c9:7a:53:58:f0:95:8a:e2:76:26:2f:8a:7e:74:19:ef:d8:77: 87:f0:ad:ab:a3:27:0f:02:49:cf:a1:d0:ba:47:12:09:6a:81: 77:1c:a8:3e:91:03:d3:6e:a3:d3:b0:00:6c:dc:77:42:07:f9: 0d:b3:38:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk2c7snqjEXJrF54wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxNzAxMDAzN1oXDTI1MDYxNTAxMDAzN1owLzEtMCsGA1UEAxMk ZGZjZWQ1MjQtNWJlOC00OWQ5LWI1OWItMDVhZWUyYjdhZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovjJGIBMn8TWy0kN7zGP9Eow7XdDJO5skQ3j axY3Vwh/lul+n46eglCTIT1H7o0dPKGz8trFa5xqdy8RlDrzfNoaXO7x9e6xIs+j uP3zvLYBWsz90dpMgxPa6SkWm6aD63nT8InjZyytBPa2H9D5NESj/QLNhDLUfiwO gnZ7VP+Tpk5WZ2DhqI9evFosqE79JX68eIZPbJM7uQsYJXMmaEhPGML+Kw4yLkMd +Gs9TlXvtThO62fWo/XmqetTn07XieEiATEIy35NLGwBbgyRz454hp/GEqVFVD+K 840wVIkHlE78JPJ2DIg8MuBi6SFLfN9YzwcFCIr8S6f8CV6U6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfoDS4M1xYmfQvsYxOcstcZnG5pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTY1OTM5ODYtZjNlMC0z MDRmLTg2ZjEtMTRiN2EwOWU5YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+0MVt3fg9gKVvKw3NZgz0pY3kwDlr/D1k8F+pcwtu6lIjizdu9u6X6 n2fr39M81wwWeRa6WMlfGvyQ8Uw9UYRXmcg4PrBTgMHbJY/3dEHaBCc50k9tu16W FzVrFtonSDvu3ZQrFObIAmEw+yMTGslvihCL9z9R3S4vL3L2/3ORPa8Nv555ewCg NCpKM3oJdwnwufDuQayhz0xO7+TalBnm/bq6/fpG+0qpVRV94wMEIgjb6cHFqfXH YxkySVg0ThyJjlmPecl6U1jwlYridiYvin50Ge/Yd4fwraujJw8CSc+h0LpHEglq gXccqD6RA9Nuo9OwAGzcd0IH+Q2zOI4= -----END CERTIFICATE-----Generated at Sat Apr 5 09:40:04 2025 by rpki-client