$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3aea2d5a-a0be-3cd0-b9a3-8eec3a150793.roa File: 3aea2d5a-a0be-3cd0-b9a3-8eec3a150793.roa (raw, json) Hash identifier: YkpR1B5hY5sbynYZoPojQAlk8Dup7Kirm3n70qp767o= Subject key identifier: F5:7B:93:0F:1B:2D:6A:ED:C0:E8:28:4B:3C:33:34:81:F8:2D:8C:68 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858494CC954CAA94BEF3CC8B09AF0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3aea2d5a-a0be-3cd0-b9a3-8eec3a150793.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.157.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:54:ca:a9:4b:ef:3c:c8:b0:9a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=94aea1d9-4167-4c95-af1a-b67d5e53999d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1b:e2:eb:67:fb:6d:62:20:66:97:0e:e0:fc: 38:ae:66:f6:25:df:c7:7f:e9:00:c4:fa:18:d1:e5: ee:a2:88:37:e2:ac:73:77:7f:f0:e4:4e:12:1a:53: 62:04:f1:39:91:bb:d4:0b:3e:0f:66:63:d6:87:b8: d7:cd:af:b9:8b:6c:88:9c:09:a8:4a:6e:83:7a:c5: 78:19:22:ee:61:7c:e0:d3:b8:2a:20:cc:fa:32:c7: 34:84:cb:24:b1:84:9a:5b:16:4f:62:84:45:4f:2d: 7b:fa:e0:3e:69:25:99:35:5a:7c:53:b3:ed:fc:80: ca:a6:21:8f:b3:d2:dd:c1:6b:c3:02:03:4e:34:c1: eb:77:09:23:c6:48:26:e9:83:05:fe:87:8e:c8:9d: 32:22:01:0d:41:9e:94:f9:09:b8:2d:bc:c3:93:6e: 96:42:a8:92:6a:f3:c9:2d:ac:cc:fc:c0:05:e8:0f: a1:64:cd:4e:fb:e6:2f:13:81:33:6d:77:b8:0e:00: 2d:55:a2:e2:04:77:f8:14:c9:d0:fa:fd:92:dd:3d: 76:17:d4:9a:16:fe:e1:38:c4:0c:7d:65:4b:08:f9: 4a:8b:d4:27:1e:f9:d3:68:6c:c5:22:de:93:55:aa: 35:b6:6d:d9:fd:92:44:4d:f2:75:8e:4e:a0:2f:1d: 88:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7B:93:0F:1B:2D:6A:ED:C0:E8:28:4B:3C:33:34:81:F8:2D:8C:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3aea2d5a-a0be-3cd0-b9a3-8eec3a150793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:e6:0f:ec:14:51:85:7b:e7:da:11:b4:33:f1:04:a6:37:fa: ed:f1:95:98:7f:7c:69:92:d2:bd:58:cd:a4:b2:59:c8:00:7f: ec:91:1d:71:6e:28:46:aa:db:a5:73:07:8f:27:45:23:d6:1d: 14:1c:62:2a:10:ac:c6:f9:84:3f:0d:af:4c:c4:cb:46:a9:40: 0a:fc:d9:bf:d6:40:6b:2e:e8:0a:fc:67:43:ad:d9:d2:8e:d7: cb:b6:1a:24:6d:16:99:5f:9a:0a:0f:2d:43:19:53:d3:87:27: 80:d2:7d:38:6e:01:f8:d1:23:bb:85:aa:52:be:a4:9a:3b:b0: 41:61:b4:4c:9f:2a:ee:8f:c8:4d:9a:04:e7:c7:7c:bf:ea:85: 18:8c:3c:a1:0c:90:14:ac:ef:b0:e6:53:b1:8f:a7:b8:43:10: f8:e3:c0:73:98:63:28:f9:e7:00:9a:b4:e8:d7:84:e7:da:dc: 45:e0:1b:c6:3d:2a:eb:85:17:04:f2:9e:89:15:c1:11:98:4b: 4d:e7:5a:ef:05:ba:9c:9b:49:92:58:b3:35:b5:7e:b8:ec:5c: 24:a8:ed:af:17:b5:c4:32:d8:15:9e:a8:09:91:16:36:cc:5b: 9b:c6:a5:a2:5b:ba:a1:cb:70:39:cb:1d:b9:b2:0c:92:66:4b: eb:c4:cf:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVTKqUvvPMiwmvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk OTRhZWExZDktNDE2Ny00Yzk1LWFmMWEtYjY3ZDVlNTM5OTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBvi62f7bWIgZpcO4Pw4rmb2Jd/Hf+kAxPoY 0eXuoog34qxzd3/w5E4SGlNiBPE5kbvUCz4PZmPWh7jXza+5i2yInAmoSm6DesV4 GSLuYXzg07gqIMz6Msc0hMsksYSaWxZPYoRFTy17+uA+aSWZNVp8U7Pt/IDKpiGP s9LdwWvDAgNONMHrdwkjxkgm6YMF/oeOyJ0yIgENQZ6U+Qm4LbzDk26WQqiSavPJ LazM/MAF6A+hZM1O++YvE4EzbXe4DgAtVaLiBHf4FMnQ+v2S3T12F9SaFv7hOMQM fWVLCPlKi9QnHvnTaGzFIt6TVao1tm3Z/ZJETfJ1jk6gLx2IvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPV7kw8bLWrtwOgoSzwzNIH4LYxoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2FlYTJkNWEtYTBiZS0z Y2QwLWI5YTMtOGVlYzNhMTUwNzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/mD+wUUYV759oRtDPxBKY3+u3xlZh/fGmS0r1YzaSyWcgAf+yRHXFu KEaq26VzB48nRSPWHRQcYioQrMb5hD8Nr0zEy0apQAr82b/WQGsu6Ar8Z0Ot2dKO 18u2GiRtFplfmgoPLUMZU9OHJ4DSfThuAfjRI7uFqlK+pJo7sEFhtEyfKu6PyE2a BOfHfL/qhRiMPKEMkBSs77DmU7GPp7hDEPjjwHOYYyj55wCatOjXhOfa3EXgG8Y9 KuuFFwTynokVwRGYS03nWu8FupybSZJYszW1frjsXCSo7a8XtcQy2BWeqAmRFjbM W5vGpaJbuqHLcDnLHbmyDJJmS+vEz+8= -----END CERTIFICATE-----Generated at Sat Apr 5 09:40:15 2025 by rpki-client