$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67b54986-59fc-3f8a-820f-66b7f6929fad.roa File: 67b54986-59fc-3f8a-820f-66b7f6929fad.roa (raw, json) Hash identifier: u2+q+Xju2usfmKWDZsk1C2ExLIbyxUYjpx39loTxrMw= Subject key identifier: 5F:9D:16:22:82:DF:35:F6:C6:0A:B2:33:CF:3C:41:EE:B1:6A:86:34 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858495447817EE4FDD188F8552280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67b54986-59fc-3f8a-820f-66b7f6929fad.roa Signing time: Thu 27 Mar 2025 17:25:48 +0000 ROA not before: Thu 27 Mar 2025 17:25:48 +0000 ROA not after: Wed 25 Jun 2025 17:25:48 +0000 asID: 8069 IP address blocks: 20.153.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:54:47:81:7e:e4:fd:d1:88:f8:55:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 27 17:25:48 2025 GMT Not After : Jun 25 17:25:48 2025 GMT Subject: CN=236aa7a4-b32d-4d34-b53a-f900da9e4ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:e4:52:67:02:e8:9c:c9:b2:f0:f1:b4:73: e5:53:5f:f4:7e:89:92:18:3d:c1:a5:ba:f9:16:5a: ec:f6:25:57:9b:2f:c8:21:a4:fc:2f:2b:17:d1:38: 38:4b:91:c8:0a:01:0a:5a:1e:a1:f2:0c:fe:e3:5a: fc:b8:6d:87:13:f7:ab:d7:3e:24:02:53:04:96:27: aa:1d:b5:f6:18:79:bb:50:84:b3:9a:d6:c0:03:74: 0d:ec:1e:60:cb:5a:e7:68:7e:a8:9b:bb:39:b6:aa: 11:32:3e:e3:d0:09:59:3c:c6:f5:06:4b:ab:73:63: 6b:65:23:7c:a0:68:e4:6c:3e:1d:72:9d:e6:e8:f9: 7b:31:7c:cb:38:9c:ab:d8:17:58:80:f1:1a:55:f5: 92:3b:2e:ac:2c:f9:25:78:38:64:65:26:cc:95:5d: 6f:36:3a:f3:df:b5:03:83:8a:3c:ce:4a:f7:4a:4c: 3e:fe:89:3b:e5:41:5d:72:34:69:5d:b3:95:30:1c: d0:73:54:73:f3:68:c8:70:61:99:3c:c1:05:6d:4c: 79:f6:1c:c2:fe:3d:b4:58:f0:f8:a6:7e:da:58:9a: 85:cd:6c:47:ea:f7:33:64:f6:af:75:f1:b8:fb:51: c4:a6:07:94:ab:fb:4c:49:a2:9e:70:1e:e8:14:55: cf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9D:16:22:82:DF:35:F6:C6:0A:B2:33:CF:3C:41:EE:B1:6A:86:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/67b54986-59fc-3f8a-820f-66b7f6929fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:73:c8:df:8f:4c:93:09:8b:07:11:0f:e1:a9:8c:7a:80:84: 71:0e:95:cf:5b:41:a7:64:5f:ab:02:a1:76:b2:19:68:41:11: 06:c9:e8:33:d7:3a:1b:8b:74:b8:7d:95:af:67:38:f8:55:25: 6e:da:c5:c7:06:f3:8a:de:58:5a:b2:02:1a:da:2b:d6:26:3c: 56:14:3d:f8:12:13:41:19:d4:0b:9d:87:78:83:07:cc:b5:ef: 79:c1:95:c6:6b:ed:42:e2:09:96:5a:33:6d:60:22:ee:0f:3c: 77:3c:46:cb:a6:ad:61:e9:7d:b2:47:ab:24:b5:b8:a5:84:19: b0:b1:56:16:70:03:b6:bf:4a:1a:d8:62:8c:85:e6:67:b7:e6: 9d:23:4a:ac:4c:66:56:f8:41:a2:11:c9:a7:d2:13:98:f2:11: b9:35:c6:62:bf:17:a2:f5:a8:2e:37:2d:e8:d7:28:6d:0f:b4: ca:07:af:2a:5d:8e:82:1e:6a:5a:e0:14:dd:68:4c:7d:cc:4d: 4e:96:87:33:47:76:a1:93:82:29:39:8a:cb:16:2b:bf:17:e3: 84:b8:52:9a:4b:12:04:f9:1e:e3:4c:1c:a0:6f:2a:07:c8:77: 69:03:3e:a8:ad:4c:49:e8:40:bb:be:b2:fd:44:ed:c1:16:6e: 02:da:ad:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElUR4F+5P3RiPhVIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyNzE3MjU0OFoXDTI1MDYyNTE3MjU0OFowLzEtMCsGA1UEAxMk MjM2YWE3YTQtYjMyZC00ZDM0LWI1M2EtZjkwMGRhOWU0ZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/TkUmcC6JzJsvDxtHPlU1/0fomSGD3Bpbr5 Flrs9iVXmy/IIaT8LysX0Tg4S5HICgEKWh6h8gz+41r8uG2HE/er1z4kAlMElieq HbX2GHm7UISzmtbAA3QN7B5gy1rnaH6om7s5tqoRMj7j0AlZPMb1Bkurc2NrZSN8 oGjkbD4dcp3m6Pl7MXzLOJyr2BdYgPEaVfWSOy6sLPkleDhkZSbMlV1vNjrz37UD g4o8zkr3Skw+/ok75UFdcjRpXbOVMBzQc1Rz82jIcGGZPMEFbUx59hzC/j20WPD4 pn7aWJqFzWxH6vczZPavdfG4+1HEpgeUq/tMSaKecB7oFFXPeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+dFiKC3zX2xgqyM888Qe6xaoY0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjdiNTQ5ODYtNTlmYy0z ZjhhLTgyMGYtNjZiN2Y2OTI5ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRzyN+PTJMJiwcRD+GpjHqAhHEOlc9bQadkX6sCoXayGWhBEQbJ6DPX OhuLdLh9la9nOPhVJW7axccG84reWFqyAhraK9YmPFYUPfgSE0EZ1Audh3iDB8y1 73nBlcZr7ULiCZZaM21gIu4PPHc8RsumrWHpfbJHqyS1uKWEGbCxVhZwA7a/ShrY YoyF5me35p0jSqxMZlb4QaIRyafSE5jyEbk1xmK/F6L1qC43LejXKG0PtMoHrypd joIealrgFN1oTH3MTU6WhzNHdqGTgik5issWK78X44S4UppLEgT5HuNMHKBvKgfI d2kDPqitTEnoQLu+sv1E7cEWbgLarVo= -----END CERTIFICATE-----Generated at Sat Apr 5 09:42:22 2025 by rpki-client