$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9080567e-8841-3aba-94e4-aae5e2d5fb75.roa File: 9080567e-8841-3aba-94e4-aae5e2d5fb75.roa (raw, json) Hash identifier: bh13RDAVbxyiVmsDk17nqP69ssgtmQq+8Mn5HUybsc4= Subject key identifier: 30:A9:BC:DF:CA:CF:79:23:C2:FF:FE:11:F4:0C:27:56:EC:AF:37:47 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A612B09086688A804595437A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9080567e-8841-3aba-94e4-aae5e2d5fb75.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.153.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:09:08:66:88:a8:04:59:54:37:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=57e6692f-971d-4297-b548-d5032b3ff5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:92:6a:b9:99:3a:bb:d2:a7:1b:b2:59:d5:8b: 52:c8:9c:8f:09:0c:5a:88:bc:de:92:f4:93:7e:9c: 5c:f6:cf:e8:f0:e6:07:78:b9:b2:b6:5d:22:25:b4: a8:a4:da:b9:08:a8:1d:8e:e9:e0:84:8d:3d:4c:1f: f3:77:cf:6e:26:5e:b1:48:bb:19:77:cf:b8:36:d3: f3:3d:1b:86:09:4c:17:b1:ae:73:51:b2:c6:26:47: cf:3d:66:e5:2c:97:b7:f4:2a:49:59:8f:1f:69:96: 5a:46:0d:53:76:89:93:49:6a:1c:27:c8:96:cf:28: a0:5d:45:df:cc:53:d7:31:fe:80:e4:bd:f3:38:ed: a8:fa:73:7a:44:33:4a:ff:61:69:c1:31:af:49:bb: d2:e1:33:56:d7:1f:99:85:10:fd:69:28:23:19:99: 4e:93:b9:99:14:92:8a:cc:7c:be:54:38:47:1c:3d: dd:f9:a4:42:f6:4c:b2:17:21:cc:ef:8a:64:82:89: 50:36:7b:d8:7d:c4:e7:22:67:12:06:1f:c6:1c:04: 2c:96:c9:41:8c:5e:3f:21:dc:bf:30:8c:b7:e6:37: 8d:24:46:58:e4:f3:38:85:76:4c:6e:12:39:aa:fa: 17:6d:bb:79:ae:f5:90:67:8e:1b:1d:d4:8b:71:ce: e0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A9:BC:DF:CA:CF:79:23:C2:FF:FE:11:F4:0C:27:56:EC:AF:37:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9080567e-8841-3aba-94e4-aae5e2d5fb75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:29:12:32:21:86:7c:ed:7d:3a:6a:2a:9d:64:44:62:f6:1c: d9:1e:ad:32:b5:ae:10:12:ea:92:08:1e:6c:21:7c:73:ea:a6: 77:ef:4a:42:a8:53:c0:f2:66:7b:b6:f8:ed:f0:6a:29:ab:0c: 29:78:d9:c5:52:e9:a3:45:d6:d2:fa:43:9c:6e:a9:59:25:02: 15:bf:49:4b:15:07:c9:72:a0:e4:a5:53:33:7f:bc:b4:39:1b: 64:ef:bf:96:8c:49:d8:81:2d:6d:8d:f0:57:6f:47:18:eb:26: 3a:2f:09:57:ab:fb:78:ab:ad:46:e9:c0:14:cc:0a:bf:cb:e1: e2:cd:2f:ab:50:a5:45:d7:49:a7:12:4c:93:00:1e:73:05:07: 6b:02:0c:ac:6f:93:98:3e:9b:cd:f2:f5:fd:fa:4d:de:b5:27: 5e:69:1f:72:fd:8c:15:70:dc:f5:19:4b:1d:86:52:6b:ac:20: 0a:b6:6d:7c:22:f1:6f:55:fe:c7:b8:f9:2c:0b:1c:e7:a9:ac: 3f:2f:e0:8b:d1:e9:ef:2d:17:90:2d:c4:8f:f8:ad:ba:82:01: ee:de:c6:6b:b5:ff:ec:e6:1e:fe:32:c7:a7:a4:d0:73:5a:27: 3c:05:16:54:89:36:d4:b7:f2:b3:5c:a9:81:6e:37:41:9e:ce: cb:5d:d9:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKwkIZoioBFlUN6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk NTdlNjY5MmYtOTcxZC00Mjk3LWI1NDgtZDUwMzJiM2ZmNWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpJquZk6u9KnG7JZ1YtSyJyPCQxaiLzekvST fpxc9s/o8OYHeLmytl0iJbSopNq5CKgdjunghI09TB/zd89uJl6xSLsZd8+4NtPz PRuGCUwXsa5zUbLGJkfPPWblLJe39CpJWY8faZZaRg1TdomTSWocJ8iWzyigXUXf zFPXMf6A5L3zOO2o+nN6RDNK/2FpwTGvSbvS4TNW1x+ZhRD9aSgjGZlOk7mZFJKK zHy+VDhHHD3d+aRC9kyyFyHM74pkgolQNnvYfcTnImcSBh/GHAQslslBjF4/Idy/ MIy35jeNJEZY5PM4hXZMbhI5qvoXbbt5rvWQZ44bHdSLcc7gjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCpvN/Kz3kjwv/+EfQMJ1bsrzdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTA4MDU2N2UtODg0MS0z YWJhLTk0ZTQtYWFlNWUyZDVmYjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYpEjIhhnztfTpqKp1kRGL2HNkerTK1rhAS6pIIHmwhfHPqpnfvSkKo U8DyZnu2+O3waimrDCl42cVS6aNF1tL6Q5xuqVklAhW/SUsVB8lyoOSlUzN/vLQ5 G2Tvv5aMSdiBLW2N8FdvRxjrJjovCVer+3irrUbpwBTMCr/L4eLNL6tQpUXXSacS TJMAHnMFB2sCDKxvk5g+m83y9f36Td61J15pH3L9jBVw3PUZSx2GUmusIAq2bXwi 8W9V/se4+SwLHOeprD8v4IvR6e8tF5AtxI/4rbqCAe7exmu1/+zmHv4yx6ek0HNa JzwFFlSJNtS38rNcqYFuN0Gezstd2W8= -----END CERTIFICATE-----Generated at Thu Jul 10 01:53:15 2025 by rpki-client