$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa File: 9682b18d-084f-339c-8a00-ef1f480f78c1.roa (raw, json) Hash identifier: GHlcxWULD4DNkh5FqTyLyX/SZhbKW4dfpbZ29caSrkI= Subject key identifier: B3:99:96:C5:21:AA:7A:1B:37:F7:45:6E:99:2C:35:FA:00:6A:61:E0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858497C3EF2272F36DD26FE074000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 8069 IP address blocks: 20.153.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:f2:27:2f:36:dd:26:fe:07:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=c1097b78-f579-41f1-ac46-c72cc8c66cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:66:e0:10:eb:95:3b:10:08:88:6f:d8:5a: ea:ab:b8:d2:a2:db:89:98:04:9d:4e:95:24:c7:ac: 7c:97:00:43:c4:2e:54:62:d7:e4:85:9b:c0:42:ea: 97:59:00:25:36:60:85:81:03:a1:21:c8:42:25:34: 6c:55:d0:9b:56:f8:89:21:bb:80:6e:e6:9d:03:a1: 95:ac:f3:eb:55:60:fc:dd:aa:29:dc:cd:12:b6:14: 3f:84:44:cb:00:1f:e3:e8:42:23:23:28:c0:89:2a: 96:8b:81:36:63:f8:db:e8:66:5a:b3:73:97:ae:19: 8f:5c:55:9f:bd:e2:8a:9b:a4:d3:59:f9:85:da:de: cd:9e:09:79:8d:70:9d:1d:3e:42:94:59:a5:69:44: 46:bc:b3:99:51:a4:f5:b3:a3:12:a2:cd:a5:08:ef: 5d:11:6d:d5:29:22:79:4c:cb:48:1b:4f:43:00:11: e8:94:15:ea:98:06:ea:09:3a:6e:7f:ff:e8:aa:82: 36:d8:eb:9c:e3:30:a1:f6:2b:d2:f8:db:f8:fa:8d: bb:7a:89:48:ac:8a:0a:d3:2c:f6:5e:4c:dd:77:18: c7:e7:19:04:78:cb:a5:73:6f:c1:4f:0b:6c:be:16: 34:6c:83:62:4f:76:5e:87:6c:f4:e3:e0:99:c7:39: 52:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:99:96:C5:21:AA:7A:1B:37:F7:45:6E:99:2C:35:FA:00:6A:61:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9682b18d-084f-339c-8a00-ef1f480f78c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f1:44:cf:f2:a3:04:e3:f3:ae:32:c4:61:d0:91:b3:1b:aa: 16:a3:6d:d4:5d:e3:17:e5:03:e2:0e:2c:ac:c9:fa:c7:2a:48: 97:05:88:3e:13:60:62:b0:93:23:4b:95:18:27:c0:08:a1:ac: 9f:26:ba:18:e9:aa:10:91:38:bd:33:f4:8c:79:7a:04:6b:8d: 63:46:12:68:1a:4e:d9:70:fa:95:eb:cd:35:0c:6a:38:bd:ef: 30:af:9f:53:36:e6:93:76:32:bf:54:69:3e:68:0e:25:93:43: 15:9a:95:11:31:bf:97:61:09:8d:e0:02:7e:ac:8c:48:31:1a: d9:12:77:41:c4:09:e4:ac:f9:18:d2:f5:5f:37:35:54:11:c5: 1b:12:90:d9:35:06:0b:d9:1e:27:68:34:0b:00:f3:c4:f6:c9: 36:95:cf:ea:b8:97:ca:8a:07:97:64:48:12:ba:94:20:cd:11: dd:9d:2b:da:55:ce:e6:bf:17:a8:e4:50:3c:3e:e7:be:4b:09: 9b:70:a9:22:fd:a6:5f:32:3d:1e:df:b9:85:ca:ef:a5:5f:f4: 64:bb:26:39:26:18:ce:d9:54:e3:85:69:93:bc:1a:96:d9:c0: 84:f9:6b:d1:3c:d5:e0:3d:76:aa:80:e4:d1:cd:2a:5a:51:83: 4d:d9:5b:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvInLzbdJv4HQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk YzEwOTdiNzgtZjU3OS00MWYxLWFjNDYtYzcyY2M4YzY2Y2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt1m4BDrlTsQCIhv2Frqq7jSotuJmASdTpUk x6x8lwBDxC5UYtfkhZvAQuqXWQAlNmCFgQOhIchCJTRsVdCbVviJIbuAbuadA6GV rPPrVWD83aop3M0SthQ/hETLAB/j6EIjIyjAiSqWi4E2Y/jb6GZas3OXrhmPXFWf veKKm6TTWfmF2t7Nngl5jXCdHT5ClFmlaURGvLOZUaT1s6MSos2lCO9dEW3VKSJ5 TMtIG09DABHolBXqmAbqCTpuf//oqoI22Ouc4zCh9ivS+Nv4+o27eolIrIoK0yz2 XkzddxjH5xkEeMulc2/BTwtsvhY0bINiT3Zeh2z04+CZxzlSRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOZlsUhqnobN/dFbpksNfoAamHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTY4MmIxOGQtMDg0Zi0z MzljLThhMDAtZWYxZjQ4MGY3OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTxRM/yowTj864yxGHQkbMbqhajbdRd4xflA+IOLKzJ+scqSJcFiD4T YGKwkyNLlRgnwAihrJ8muhjpqhCROL0z9Ix5egRrjWNGEmgaTtlw+pXrzTUMaji9 7zCvn1M25pN2Mr9UaT5oDiWTQxWalRExv5dhCY3gAn6sjEgxGtkSd0HECeSs+RjS 9V83NVQRxRsSkNk1BgvZHidoNAsA88T2yTaVz+q4l8qKB5dkSBK6lCDNEd2dK9pV zua/F6jkUDw+575LCZtwqSL9pl8yPR7fuYXK76Vf9GS7JjkmGM7ZVOOFaZO8GpbZ wIT5a9E81eA9dqqA5NHNKlpRg03ZW90= -----END CERTIFICATE-----Generated at Thu Apr 17 09:01:56 2025 by rpki-client