$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/27bda6dc-9063-3dcc-afd5-cc773c661064.roa File: 27bda6dc-9063-3dcc-afd5-cc773c661064.roa (raw, json) Hash identifier: UGUUfXbgBWfCtH58+JFLizcPhhbeDc6nUAnC3znMdcs= Subject key identifier: 92:5D:C2:28:01:96:F5:88:9C:D0:99:49:9A:43:66:37:BF:6E:00:3A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A612B092C351B3483E7234380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/27bda6dc-9063-3dcc-afd5-cc773c661064.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.153.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:09:2c:35:1b:34:83:e7:23:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=ffb1e301-ff72-4fa7-91a8-bc03fcd1b5df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ad:be:9a:2c:3d:8a:34:80:01:66:4b:88:c8: 67:3c:dc:ed:7e:fc:b4:f0:27:db:92:cb:cd:61:d0: 16:75:30:5e:9c:3e:d4:33:88:f7:37:9d:ed:50:81: 79:41:90:bf:f8:17:9a:2c:b3:d7:b9:97:b0:ab:33: 1b:6d:04:a8:2e:da:a9:56:b9:a7:dc:75:10:b2:e6: 55:10:68:d1:29:99:b6:79:c9:50:88:dc:56:6f:9c: 5e:7c:b0:65:d0:be:1a:c9:db:97:6f:14:2e:65:51: aa:ab:b3:d0:34:89:4d:a6:0b:70:3d:32:e7:71:a1: a1:0b:b0:c4:1e:88:2c:e2:24:85:81:c2:3f:c0:ec: 50:2f:37:66:51:1f:69:1f:84:03:5a:6a:8f:f1:21: 1a:f0:2e:4a:8b:10:57:9c:fa:60:49:7a:24:9d:b8: 35:26:1c:d1:c1:98:a3:d2:64:a5:1c:50:fd:ff:42: 03:81:3c:03:47:bf:cf:8a:f5:48:d0:3a:14:4b:94: b7:37:c3:fa:5d:83:28:b4:75:25:95:5f:e0:98:95: b9:70:26:ce:62:8a:8f:ef:52:15:34:fc:40:d3:01: 01:7a:1c:02:13:9b:a4:f4:dc:d1:1e:8b:6a:e2:ac: 81:b8:34:14:d5:2f:3a:f4:0d:70:c1:a5:38:8e:45: 50:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5D:C2:28:01:96:F5:88:9C:D0:99:49:9A:43:66:37:BF:6E:00:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/27bda6dc-9063-3dcc-afd5-cc773c661064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:dc:c6:21:2d:d9:25:0f:fc:38:85:69:a3:64:a4:35:89:40: a0:c5:12:a0:45:ee:51:b9:35:22:66:81:4c:4b:bb:f0:e1:31: d5:5b:04:7c:b8:e4:b5:31:90:f4:bb:0c:31:f3:57:f0:20:d4: 11:de:95:9d:66:27:4e:e0:c9:b9:c8:ad:95:8c:56:f4:4f:54: 13:86:94:92:49:26:46:5d:71:24:4e:cc:39:d7:ec:e1:a0:fe: c8:e2:35:cf:7d:80:27:eb:67:b4:09:62:99:a1:0c:47:d7:fa: 38:45:b3:f8:35:0e:79:a9:9b:c9:ac:6e:c9:89:ea:d1:49:35: c5:4c:b2:55:74:94:2a:bb:b6:06:6d:81:f5:49:b3:52:86:8e: 45:7e:cd:30:e9:d1:21:4f:1e:8e:0c:69:c2:a4:46:56:cb:be: b2:78:4d:4b:95:b3:6b:25:da:64:c9:f7:4e:61:57:56:e8:dc: 3b:a3:df:04:0c:42:87:2d:a3:ad:66:ba:9f:a6:41:85:7a:c9: af:f9:fa:c1:e0:27:63:aa:5a:bc:14:46:9c:1b:7c:2f:d5:56: d2:85:3b:c8:d5:3b:01:9d:67:e3:7a:93:1e:ca:0e:5f:d9:c7: 24:0a:1d:aa:97:eb:c8:d0:93:59:88:4e:c6:c4:ef:1e:40:fe: 51:d4:c7:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKwksNRs0g+cjQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk ZmZiMWUzMDEtZmY3Mi00ZmE3LTkxYTgtYmMwM2ZjZDFiNWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK2+miw9ijSAAWZLiMhnPNztfvy08CfbksvN YdAWdTBenD7UM4j3N53tUIF5QZC/+BeaLLPXuZewqzMbbQSoLtqpVrmn3HUQsuZV EGjRKZm2eclQiNxWb5xefLBl0L4ayduXbxQuZVGqq7PQNIlNpgtwPTLncaGhC7DE Hogs4iSFgcI/wOxQLzdmUR9pH4QDWmqP8SEa8C5KixBXnPpgSXoknbg1JhzRwZij 0mSlHFD9/0IDgTwDR7/PivVI0DoUS5S3N8P6XYMotHUllV/gmJW5cCbOYoqP71IV NPxA0wEBehwCE5uk9NzRHotq4qyBuDQU1S869A1wwaU4jkVQzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJdwigBlvWInNCZSZpDZje/bgA6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjdiZGE2ZGMtOTA2My0z ZGNjLWFmZDUtY2M3NzNjNjYxMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzcxiEt2SUP/DiFaaNkpDWJQKDFEqBF7lG5NSJmgUxLu/DhMdVbBHy4 5LUxkPS7DDHzV/Ag1BHelZ1mJ07gybnIrZWMVvRPVBOGlJJJJkZdcSROzDnX7OGg /sjiNc99gCfrZ7QJYpmhDEfX+jhFs/g1Dnmpm8msbsmJ6tFJNcVMslV0lCq7tgZt gfVJs1KGjkV+zTDp0SFPHo4MacKkRlbLvrJ4TUuVs2sl2mTJ905hV1bo3Duj3wQM Qocto61mup+mQYV6ya/5+sHgJ2OqWrwURpwbfC/VVtKFO8jVOwGdZ+N6kx7KDl/Z xyQKHaqX68jQk1mITsbE7x5A/lHUxwk= -----END CERTIFICATE-----Generated at Thu Jul 10 03:25:14 2025 by rpki-client