$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/519f18f5-97d2-3023-b6ad-9d2079691590.roa File: 519f18f5-97d2-3023-b6ad-9d2079691590.roa (raw, json) Hash identifier: 0VSG47aVWdAXE2Abc95MWmTMLytCGHo0inwc6gvZEr0= Subject key identifier: 71:1D:67:AD:B8:45:C3:1C:7A:D8:B6:F5:B7:03:15:70:7D:3D:F6:26 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858496A19B0D85D31E2CDF06F2000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/519f18f5-97d2-3023-b6ad-9d2079691590.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.157.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b0:d8:5d:31:e2:cd:f0:6f:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=140abb9b-3a8c-4850-9a5a-18c5a8dffed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fa:1f:f0:98:96:95:aa:c6:e5:09:98:1b:35: 2f:98:5b:3d:e3:98:8e:09:3a:39:0c:34:a5:89:d2: 8b:32:62:4c:71:59:7b:20:57:50:9d:10:62:a0:64: 63:39:9a:64:2e:19:0f:86:92:8f:0b:5d:cd:87:44: d7:2c:d2:86:5c:63:5e:84:5a:ce:b1:e6:23:08:f3: 2e:83:8b:2a:6b:c7:b7:bf:d5:9e:c1:96:fd:d1:56: 99:16:98:d6:be:55:b3:40:03:88:7e:14:9c:17:ef: c4:c0:79:cb:96:ba:6f:9d:d8:07:3e:11:ed:8c:e4: f4:7e:cd:69:18:a9:66:32:7b:75:e2:c8:60:6d:22: 67:29:c7:45:e8:e9:e3:4b:6f:20:de:65:3a:8b:17: 27:a0:47:eb:e6:23:3b:55:49:19:27:40:54:53:c4: 35:b6:30:d8:bd:d7:91:e6:da:81:46:37:2a:d8:8a: f3:9c:16:7c:12:e2:56:ff:1e:11:04:b6:b6:17:bc: 02:72:a6:ab:f2:2d:ff:77:56:3e:09:ce:1d:6f:c0: 60:b6:57:05:c8:27:97:5d:ff:f6:25:b4:37:90:e3: f7:de:14:48:7c:4e:36:a7:ed:06:9d:1f:6a:33:2f: ef:3b:92:13:e2:7e:18:c3:03:7b:03:a0:57:ac:08: 20:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1D:67:AD:B8:45:C3:1C:7A:D8:B6:F5:B7:03:15:70:7D:3D:F6:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/519f18f5-97d2-3023-b6ad-9d2079691590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:7a:e4:dd:78:9f:eb:a7:51:ad:f5:a3:86:f3:02:76:a2:66: 95:96:c8:c4:c6:12:1f:6b:10:01:92:76:5c:02:89:62:dd:dc: 4f:6d:0c:2d:47:70:e6:94:61:05:22:c3:55:c9:9e:91:a4:b2: 15:38:73:66:4d:dd:eb:6c:99:a6:6c:1b:e8:55:ea:67:e2:b2: 11:07:ab:d4:42:d8:f3:db:1c:d7:a7:77:ad:2d:5c:27:ae:39: e1:d1:e5:ff:3b:9f:f4:f4:27:7c:71:6f:e1:b2:68:d3:7c:8d: bd:87:98:f5:cf:b6:b8:8d:dd:0b:f5:a4:07:8d:dd:a9:44:18: 62:ea:42:82:77:b5:06:cb:c9:8a:81:70:e4:9b:8d:60:16:f3: c1:c3:43:1e:1c:3b:ff:ea:fb:c4:0c:bb:e6:86:99:69:91:64: 41:a4:5e:6e:3f:5e:89:22:4e:56:04:73:e6:45:5c:50:be:ad: 91:77:41:01:b7:ed:27:9b:4d:6f:c8:9a:57:38:1c:39:55:9f: fd:fa:84:f5:27:0b:ed:da:f1:a5:53:6c:e4:97:c4:25:d3:de: 53:47:24:2d:59:cd:ad:03:f7:2d:ab:82:cb:99:f3:e6:c6:b9: 15:97:b7:ad:76:11:56:cd:bb:1a:ee:82:07:51:98:1c:2e:91: f4:89:69:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbDYXTHizfBvIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk MTQwYWJiOWItM2E4Yy00ODUwLTlhNWEtMThjNWE4ZGZmZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivof8JiWlarG5QmYGzUvmFs945iOCTo5DDSl idKLMmJMcVl7IFdQnRBioGRjOZpkLhkPhpKPC13Nh0TXLNKGXGNehFrOseYjCPMu g4sqa8e3v9WewZb90VaZFpjWvlWzQAOIfhScF+/EwHnLlrpvndgHPhHtjOT0fs1p GKlmMnt14shgbSJnKcdF6OnjS28g3mU6ixcnoEfr5iM7VUkZJ0BUU8Q1tjDYvdeR 5tqBRjcq2IrznBZ8EuJW/x4RBLa2F7wCcqar8i3/d1Y+Cc4db8BgtlcFyCeXXf/2 JbQ3kOP33hRIfE42p+0GnR9qMy/vO5IT4n4YwwN7A6BXrAgg6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEdZ624RcMceti29bcDFXB9PfYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTE5ZjE4ZjUtOTdkMi0z MDIzLWI2YWQtOWQyMDc5NjkxNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ23MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN65N14n+unUa31o4bzAnaiZpWWyMTGEh9rEAGSdlwCiWLd3E9tDC1H cOaUYQUiw1XJnpGkshU4c2ZN3etsmaZsG+hV6mfishEHq9RC2PPbHNend60tXCeu OeHR5f87n/T0J3xxb+GyaNN8jb2HmPXPtriN3Qv1pAeN3alEGGLqQoJ3tQbLyYqB cOSbjWAW88HDQx4cO//q+8QMu+aGmWmRZEGkXm4/XokiTlYEc+ZFXFC+rZF3QQG3 7SebTW/Imlc4HDlVn/36hPUnC+3a8aVTbOSXxCXT3lNHJC1Zza0D9y2rgsuZ8+bG uRWXt612EVbNuxruggdRmBwukfSJadU= -----END CERTIFICATE-----Generated at Thu Apr 17 09:03:13 2025 by rpki-client