$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/57f2deb9-d376-3299-b275-f4d5aa42beec.roa File: 57f2deb9-d376-3299-b275-f4d5aa42beec.roa (raw, json) Hash identifier: vNfsSG4rsKvW6+HReqcbmn85q3tAYOYS87oOQQ/7GcA= Subject key identifier: 0D:C7:C9:C8:5D:B0:94:03:1A:08:9F:CE:6A:1E:0E:75:43:A3:84:1E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584954477D292CFA8FB80DB62D40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/57f2deb9-d376-3299-b275-f4d5aa42beec.roa Signing time: Thu 27 Mar 2025 17:25:46 +0000 ROA not before: Thu 27 Mar 2025 17:25:46 +0000 ROA not after: Wed 25 Jun 2025 17:25:46 +0000 asID: 8069 IP address blocks: 20.153.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:54:47:7d:29:2c:fa:8f:b8:0d:b6:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 27 17:25:46 2025 GMT Not After : Jun 25 17:25:46 2025 GMT Subject: CN=c073a531-d5e8-41e5-a9fb-e5855b0c52fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0c:12:b7:a2:05:df:eb:d8:53:98:9d:2b:7a: 5b:1c:2b:3e:66:69:26:7f:1c:8d:cf:70:e3:cb:bf: 17:17:b3:a0:7b:92:4b:f5:95:32:ca:e3:2f:83:36: b0:fa:b5:8d:12:bc:b5:d4:1a:05:d9:3c:3b:01:13: aa:8f:98:2e:db:54:27:01:07:2c:93:86:c9:28:06: 99:33:08:d3:da:2b:7a:c9:a4:62:28:e5:35:a5:7c: f7:66:24:2a:3a:9a:a6:e7:6b:c3:12:65:3d:5f:72: 62:33:a9:d7:2b:40:69:a2:9c:53:0e:bd:30:b5:88: a1:ac:49:c0:87:c9:51:8e:10:2a:75:83:91:01:27: 82:8d:34:b3:1f:61:11:4f:fa:14:26:e6:47:cf:e4: 5f:39:0e:41:ea:56:cc:8f:ce:20:03:5a:f7:a1:70: 83:21:f9:f0:7f:dc:81:28:c2:bb:52:76:fd:de:be: 9b:0c:2f:9e:3e:c1:85:e1:cd:75:c0:b2:90:ad:c4: 55:64:b0:32:fc:60:31:69:ae:5f:fd:ca:e1:23:f8: 0f:cb:bb:a4:75:68:54:e6:5c:cf:de:c1:7b:fd:04: 3c:6d:31:6a:41:9c:76:85:5b:02:fb:1b:a7:12:73: 9c:a5:5d:a0:aa:d6:eb:5d:3b:e9:81:1d:fb:d6:3e: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C7:C9:C8:5D:B0:94:03:1A:08:9F:CE:6A:1E:0E:75:43:A3:84:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/57f2deb9-d376-3299-b275-f4d5aa42beec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:71:83:b7:d5:d7:42:36:81:ab:38:f5:b3:1e:f4:00:3c:1b: e5:a1:0e:cf:62:5f:e0:40:4d:49:fa:b2:96:30:a1:70:9a:44: 99:e2:da:66:9f:96:81:73:f4:eb:c4:0b:a8:fc:ec:06:95:e7: 9d:e4:8d:fe:0c:65:fe:39:de:7f:de:06:3a:70:04:1a:8f:c6: 0c:7b:10:d5:41:21:53:79:2d:6b:c3:53:88:66:7c:d1:5d:80: 2f:4e:c7:23:02:09:5a:1c:97:cc:12:01:23:21:f6:70:9c:fb: 40:00:3c:1f:27:79:41:89:e0:24:c4:c0:2c:82:fa:7a:e3:cb: b7:4c:3d:0a:d4:b9:df:95:0b:f0:d3:0b:b6:f2:b3:d1:5e:11: 66:b5:0b:db:17:92:78:9e:a3:ef:3d:72:1b:2b:48:dc:65:9e: d8:23:98:54:1e:64:db:16:fb:f1:e3:c0:25:d5:cb:3f:12:10: 46:12:db:6a:37:bb:ab:9a:c5:2d:76:1a:60:8b:c3:1e:17:af: 48:89:04:8b:38:82:51:98:86:0a:95:ca:ed:27:01:88:4b:46: 30:e9:d5:80:9e:8b:57:51:90:c3:5a:52:a6:81:d4:4e:bb:a0: a0:85:1c:d7:59:07:7a:73:97:e7:03:1f:b2:34:ac:7b:4e:a7: f4:78:ee:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElUR30pLPqPuA22LUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyNzE3MjU0NloXDTI1MDYyNTE3MjU0NlowLzEtMCsGA1UEAxMk YzA3M2E1MzEtZDVlOC00MWU1LWE5ZmItZTU4NTViMGM1MmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQwSt6IF3+vYU5idK3pbHCs+ZmkmfxyNz3Dj y78XF7Oge5JL9ZUyyuMvgzaw+rWNEry11BoF2Tw7AROqj5gu21QnAQcsk4bJKAaZ MwjT2it6yaRiKOU1pXz3ZiQqOpqm52vDEmU9X3JiM6nXK0BpopxTDr0wtYihrEnA h8lRjhAqdYORASeCjTSzH2ERT/oUJuZHz+RfOQ5B6lbMj84gA1r3oXCDIfnwf9yB KMK7Unb93r6bDC+ePsGF4c11wLKQrcRVZLAy/GAxaa5f/crhI/gPy7ukdWhU5lzP 3sF7/QQ8bTFqQZx2hVsC+xunEnOcpV2gqtbrXTvpgR371j7jeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3HychdsJQDGgifzmoeDnVDo4QeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTdmMmRlYjktZDM3Ni0z Mjk5LWIyNzUtZjRkNWFhNDJiZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRxg7fV10I2gas49bMe9AA8G+WhDs9iX+BATUn6spYwoXCaRJni2maf loFz9OvEC6j87AaV553kjf4MZf453n/eBjpwBBqPxgx7ENVBIVN5LWvDU4hmfNFd gC9OxyMCCVocl8wSASMh9nCc+0AAPB8neUGJ4CTEwCyC+nrjy7dMPQrUud+VC/DT C7bys9FeEWa1C9sXknieo+89chsrSNxlntgjmFQeZNsW+/HjwCXVyz8SEEYS22o3 u6uaxS12GmCLwx4Xr0iJBIs4glGYhgqVyu0nAYhLRjDp1YCei1dRkMNaUqaB1E67 oKCFHNdZB3pzl+cDH7I0rHtOp/R47rE= -----END CERTIFICATE-----Generated at Sat Apr 5 09:50:20 2025 by rpki-client