$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/51de0f90-d04b-3ee5-8cd9-8de517542b74.roa File: 51de0f90-d04b-3ee5-8cd9-8de517542b74.roa (raw, json) Hash identifier: P2LFADZq59wPwgnP2x3ABQ3Yp3wRJ9xXy6XFDdEnm1Q= Subject key identifier: 5F:A6:53:8A:C4:8D:FC:3B:56:28:B8:73:27:61:3B:CD:86:16:98:71 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858496A19B0F3742AF34A14D22180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/51de0f90-d04b-3ee5-8cd9-8de517542b74.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 8069 IP address blocks: 20.157.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b0:f3:74:2a:f3:4a:14:d2:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=c841d434-c70d-48af-b8b1-ab595b3145c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c9:54:2c:8e:ff:54:94:6b:c7:5d:f4:c9:63: a3:96:e1:7f:96:1d:29:b5:f7:f3:00:34:3e:14:5b: 48:bf:fe:eb:61:e2:d9:b7:2c:8d:a4:67:81:f3:2a: d8:99:08:59:a5:3f:98:ab:c9:84:c6:d4:a2:56:57: f5:1f:96:23:6d:b8:4c:7f:55:54:65:93:b8:07:a7: 4e:cd:25:0e:d1:ed:80:3b:2c:d9:f4:bf:be:07:2c: b4:b0:2f:50:71:6c:7c:84:8c:76:18:0e:e3:fe:1d: 9c:2f:7f:b0:f5:97:75:d1:0b:6a:85:df:a2:a3:4c: 07:5b:ec:bb:38:5f:d0:11:f1:23:bf:a7:00:4f:ca: 33:5d:0b:0a:8f:22:02:75:83:b3:da:b9:b7:a7:ef: d9:86:a4:c1:84:8e:ea:33:31:3d:5b:01:8d:06:43: 57:c8:06:7b:f5:17:79:ce:49:a5:67:d6:67:5a:7c: ec:3a:e4:88:bf:d3:b7:80:74:d0:e7:7d:5d:6b:e9: b5:40:03:34:7f:7c:14:e2:c5:56:f8:36:4a:ce:93: c5:0f:01:29:77:18:99:d6:cc:80:55:6d:25:54:18: 9d:6b:b3:66:16:9b:01:fd:2a:d4:c9:a5:8f:39:34: 58:64:17:79:5c:70:62:79:6e:86:fd:18:1b:46:a9: 55:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A6:53:8A:C4:8D:FC:3B:56:28:B8:73:27:61:3B:CD:86:16:98:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/51de0f90-d04b-3ee5-8cd9-8de517542b74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:53:09:a3:8b:df:ab:2d:4f:bc:38:30:14:4a:1b:69:fb:04: 43:77:6c:86:8f:45:2c:17:16:7d:f8:14:bc:67:97:8b:2a:c4: b3:fd:47:ef:59:df:c6:e2:23:01:de:48:37:ea:57:70:40:39: eb:a7:de:c8:ae:86:0e:6b:5f:9e:97:aa:ca:ed:c1:5c:1b:88: 53:03:8e:6d:2e:a6:68:b3:60:b4:84:41:7a:5e:66:73:11:b7: 9f:11:34:b0:ac:e3:be:45:ce:4e:5b:fb:cc:92:e2:bb:ec:da: ff:85:eb:40:b3:28:40:e5:6a:8f:fe:27:74:e5:73:3c:96:39: 26:c0:4e:cd:35:8f:8c:c9:f0:e9:c4:f1:1b:2f:b3:ff:a7:b7: fc:01:b9:01:e2:68:12:35:60:9f:85:8a:84:93:84:bf:e2:72: d7:09:3c:c3:42:02:c8:90:49:af:11:e8:f8:55:3f:34:57:8a: 60:76:eb:a2:d5:5b:77:e2:47:50:1b:ec:4d:51:45:69:02:a3: 88:4a:d4:02:90:64:6f:11:89:0e:a5:9d:5e:47:85:80:22:5e: c3:4e:48:19:99:1c:e8:42:ca:3a:ae:11:fe:bb:06:b0:17:37: 7a:c4:93:ec:5a:f4:a7:c5:fd:01:da:50:96:66:ed:63:5f:ef: 81:3e:0c:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbDzdCrzShTSIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk Yzg0MWQ0MzQtYzcwZC00OGFmLWI4YjEtYWI1OTViMzE0NWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMlULI7/VJRrx130yWOjluF/lh0ptffzADQ+ FFtIv/7rYeLZtyyNpGeB8yrYmQhZpT+Yq8mExtSiVlf1H5YjbbhMf1VUZZO4B6dO zSUO0e2AOyzZ9L++Byy0sC9QcWx8hIx2GA7j/h2cL3+w9Zd10Qtqhd+io0wHW+y7 OF/QEfEjv6cAT8ozXQsKjyICdYOz2rm3p+/ZhqTBhI7qMzE9WwGNBkNXyAZ79Rd5 zkmlZ9ZnWnzsOuSIv9O3gHTQ531da+m1QAM0f3wU4sVW+DZKzpPFDwEpdxiZ1syA VW0lVBida7NmFpsB/SrUyaWPOTRYZBd5XHBieW6G/RgbRqlVSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+mU4rEjfw7Vii4cydhO82GFphxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTFkZTBmOTAtZDA0Yi0z ZWU1LThjZDktOGRlNTE3NTQyYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNTCaOL36stT7w4MBRKG2n7BEN3bIaPRSwXFn34FLxnl4sqxLP9R+9Z 38biIwHeSDfqV3BAOeun3siuhg5rX56XqsrtwVwbiFMDjm0upmizYLSEQXpeZnMR t58RNLCs475Fzk5b+8yS4rvs2v+F60CzKEDlao/+J3TlczyWOSbATs01j4zJ8OnE 8Rsvs/+nt/wBuQHiaBI1YJ+FioSThL/ictcJPMNCAsiQSa8R6PhVPzRXimB266LV W3fiR1Ab7E1RRWkCo4hK1AKQZG8RiQ6lnV5HhYAiXsNOSBmZHOhCyjquEf67BrAX N3rEk+xa9KfF/QHaUJZm7WNf74E+DGY= -----END CERTIFICATE-----Generated at Sat Apr 5 09:40:15 2025 by rpki-client