$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa File: 5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa (raw, json) Hash identifier: Y+/NJ3T3TBa5WpARqqOZ0hJ296RAYrd0K6jXOTnJ/Mg= Subject key identifier: 80:9F:DB:23:B9:9D:22:34:83:D5:AF:FC:53:0B:DC:0F:78:C6:F1:65 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858493673BB9A0FD0F4578BBBE400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa Signing time: Mon 17 Mar 2025 01:00:37 +0000 ROA not before: Mon 17 Mar 2025 01:00:37 +0000 ROA not after: Sun 15 Jun 2025 01:00:37 +0000 asID: 8069 IP address blocks: 20.153.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:36:73:bb:9a:0f:d0:f4:57:8b:bb:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 17 01:00:37 2025 GMT Not After : Jun 15 01:00:37 2025 GMT Subject: CN=760d511b-df29-4d23-b160-abc41d533b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:41:6e:92:4b:4e:c4:99:2a:62:aa:5a:d4:ce: 81:36:87:96:c0:a6:ee:7f:ea:5e:08:fc:87:e5:76: 5e:d5:b2:e5:f2:a1:85:4a:92:f9:b1:44:45:0e:c3: 9c:be:10:3a:06:07:66:85:39:af:9d:fd:99:2c:f5: f0:11:db:e2:87:80:38:65:64:31:77:8e:aa:fe:66: 82:97:7b:0b:73:5d:88:d1:f5:bd:bd:10:85:97:42: ab:98:73:a5:e1:b2:2d:a7:22:70:cb:cf:79:29:86: 9b:5d:fb:3f:1b:d4:e3:e0:77:e1:ea:a9:58:9d:56: 40:26:8f:cf:ab:80:5b:27:f9:dc:8f:28:72:c9:43: 9b:a1:0b:21:9f:75:56:f1:a3:2f:eb:a0:0f:13:6f: 00:1b:52:8a:5a:49:c9:b8:8a:ac:c1:ce:8d:8a:45: 30:70:46:5d:8c:84:11:d8:2c:1a:d9:58:6b:30:28: 0e:cb:c1:8b:2d:2e:ca:aa:23:d5:a6:f2:13:0c:3e: ea:fc:9c:1c:eb:95:c4:fd:55:e2:d9:e6:75:c8:04: 4c:1c:62:ef:43:0a:0b:c6:87:46:ba:a7:7a:2f:29: 14:34:bb:b5:2b:f8:f5:8c:82:f0:b6:40:79:16:4b: 2d:89:e2:aa:a9:4e:dd:e1:78:e8:1b:13:e9:a1:e3: c7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9F:DB:23:B9:9D:22:34:83:D5:AF:FC:53:0B:DC:0F:78:C6:F1:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:5b:63:03:25:c2:ba:91:8d:6e:27:d5:a1:e2:ed:07:79:6b: 3f:52:98:35:03:ac:58:49:f0:67:fa:7d:a8:ae:30:b8:18:1c: 3b:b1:9d:43:63:01:f1:d3:6c:bb:14:26:45:fc:11:27:3a:ae: 2a:40:a3:ef:e1:15:7c:66:33:9f:2f:4a:d8:51:82:14:c1:96: 2f:d8:6b:d5:9e:50:e4:9f:93:7c:dd:01:d0:75:97:46:fc:fe: 3e:7e:ff:82:30:bb:00:a1:fc:ab:26:28:d0:c5:8c:87:c5:dd: dd:e3:20:77:9e:58:dd:2f:05:e0:77:d3:47:cd:e1:f6:d4:7c: c9:27:40:96:0c:21:80:02:57:f6:cc:b9:b6:e8:ae:84:d2:d6: a7:a5:8f:2a:3b:b7:e5:c8:18:dd:68:ce:51:8c:2e:88:cf:dd: 1b:e1:68:d6:02:3c:a9:e5:2b:22:18:2a:d4:56:dc:13:8c:ef: 0b:52:86:d2:74:85:21:ec:85:c1:87:1e:a9:e7:f3:9a:57:84: 9f:0a:79:11:2f:ef:31:ed:d7:0b:65:5b:9c:07:79:21:6a:cf: 35:54:e8:b7:03:7b:d8:a5:22:49:05:bb:08:90:5e:78:99:4d: 47:05:62:85:9a:9d:10:ce:3a:ab:b4:80:9e:cc:df:1b:09:4b: 56:39:8f:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk2c7uaD9D0V4u75AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxNzAxMDAzN1oXDTI1MDYxNTAxMDAzN1owLzEtMCsGA1UEAxMk NzYwZDUxMWItZGYyOS00ZDIzLWIxNjAtYWJjNDFkNTMzYjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0FukktOxJkqYqpa1M6BNoeWwKbuf+peCPyH 5XZe1bLl8qGFSpL5sURFDsOcvhA6BgdmhTmvnf2ZLPXwEdvih4A4ZWQxd46q/maC l3sLc12I0fW9vRCFl0KrmHOl4bItpyJwy895KYabXfs/G9Tj4Hfh6qlYnVZAJo/P q4BbJ/ncjyhyyUOboQshn3VW8aMv66APE28AG1KKWknJuIqswc6NikUwcEZdjIQR 2Cwa2VhrMCgOy8GLLS7KqiPVpvITDD7q/Jwc65XE/VXi2eZ1yARMHGLvQwoLxodG uqd6LykUNLu1K/j1jILwtkB5FkstieKqqU7d4XjoGxPpoePHywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICf2yO5nSI0g9Wv/FML3A94xvFlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWZiNTJkN2MtNzVkOC0z ZjhiLWIwMzMtNjVhNTM3NmM0MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdbYwMlwrqRjW4n1aHi7Qd5az9SmDUDrFhJ8Gf6faiuMLgYHDuxnUNj AfHTbLsUJkX8ESc6ripAo+/hFXxmM58vSthRghTBli/Ya9WeUOSfk3zdAdB1l0b8 /j5+/4IwuwCh/KsmKNDFjIfF3d3jIHeeWN0vBeB300fN4fbUfMknQJYMIYACV/bM ubboroTS1qeljyo7t+XIGN1ozlGMLojP3RvhaNYCPKnlKyIYKtRW3BOM7wtShtJ0 hSHshcGHHqnn85pXhJ8KeREv7zHt1wtlW5wHeSFqzzVU6LcDe9ilIkkFuwiQXniZ TUcFYoWanRDOOqu0gJ7M3xsJS1Y5jyg= -----END CERTIFICATE-----Generated at Sat Apr 5 09:40:08 2025 by rpki-client