$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a83b2356-d220-35a8-ac0c-e8f69259c4e3.roa File: a83b2356-d220-35a8-ac0c-e8f69259c4e3.roa (raw, json) Hash identifier: 3WtGd6vjBfgn1e//zWQ6O3OvnY/IXfvRrahK48zeUsw= Subject key identifier: 52:7D:BD:2F:8F:5D:C0:F9:26:68:4F:02:1E:06:99:2B:F3:C5:EE:2A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858495447773A3725D705FD64C400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a83b2356-d220-35a8-ac0c-e8f69259c4e3.roa Signing time: Thu 27 Mar 2025 17:25:43 +0000 ROA not before: Thu 27 Mar 2025 17:25:43 +0000 ROA not after: Wed 25 Jun 2025 17:25:43 +0000 asID: 8069 IP address blocks: 20.153.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:54:47:77:3a:37:25:d7:05:fd:64:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 27 17:25:43 2025 GMT Not After : Jun 25 17:25:43 2025 GMT Subject: CN=e8bf7b1f-b3c5-4e9c-b54d-c372e573bf39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e2:03:59:fe:1e:3d:2e:b3:e5:8a:af:f9:24: d2:60:de:3a:b3:97:e1:f2:fc:3d:71:a2:8d:f0:f9: fb:35:7d:3e:8d:bb:64:18:97:f8:61:37:7d:ac:60: 67:9c:1d:ca:c9:ba:f6:1c:f8:0e:69:8c:29:0b:3b: cd:9c:70:de:f2:23:50:2b:2f:df:f5:80:44:c3:52: bf:48:85:5c:2d:e6:47:e3:91:8a:08:e6:da:5a:55: b5:7c:89:66:33:83:88:9d:31:72:87:63:0e:67:10: ab:bd:96:51:71:f9:8e:48:18:5e:3e:40:1e:54:38: 96:cd:c3:d4:db:10:61:66:d7:97:04:5f:3f:c5:c5: 98:4a:09:89:38:9d:ce:85:bb:55:6b:c1:09:d8:c0: a8:03:39:fd:5c:14:35:c3:84:d8:ca:11:d8:51:f4: 57:c8:cd:3e:0d:0e:00:4a:a0:97:c9:8d:f3:88:2a: 89:f9:a6:bd:2a:30:81:c8:6d:bf:83:f3:41:6f:af: f6:39:61:b7:68:be:49:cf:ad:68:d7:de:ce:17:25: e9:6d:dd:62:e2:e8:76:0f:16:3e:44:1a:d0:0e:17: 71:2b:f3:4a:f1:f9:a3:00:54:c9:bf:b0:39:0d:ef: 9d:f1:70:aa:02:84:80:71:19:f2:84:42:4c:ec:76: 01:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7D:BD:2F:8F:5D:C0:F9:26:68:4F:02:1E:06:99:2B:F3:C5:EE:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a83b2356-d220-35a8-ac0c-e8f69259c4e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:57:c6:d7:91:9d:e3:13:f3:9e:9c:40:11:46:44:98:7c:5d: f2:f4:31:00:7e:17:3f:15:82:ab:6e:69:e5:60:39:78:88:d6: 9c:55:71:0b:d5:f7:62:2c:a8:23:eb:29:9d:2b:de:ec:e8:11: 20:4d:d5:3e:0b:7f:f2:23:a3:67:f4:ad:c5:76:69:c6:c5:c5: b9:d7:f4:84:fd:03:9d:e9:74:be:5e:b6:7a:06:22:45:12:6f: 82:84:42:fb:d3:25:20:0d:f7:ad:75:37:7d:3c:72:9f:14:b7: 50:62:ab:04:c3:42:3a:5c:9b:73:73:70:38:cc:b4:00:6b:c4: c7:8f:ab:7a:8c:cd:60:be:26:fa:c5:dc:98:e1:98:d1:14:2e: 57:23:ed:bc:84:2f:5c:b6:16:3c:d9:60:1f:12:e4:ef:43:2b: 6a:7d:51:a7:90:67:6b:a5:54:e9:3d:c5:1b:ee:8c:88:da:63: 18:ef:a3:6d:4a:09:8b:ff:65:3f:21:e4:ce:5f:cf:bc:89:e0: 4c:0c:1b:b5:e5:5b:fb:6c:7f:a2:92:f7:eb:84:d6:9d:e1:57: 9f:7e:fc:ea:8b:54:de:b1:ce:85:e6:37:04:4a:15:0b:57:6e: 4e:7e:0e:2e:ca:5a:28:0b:85:2a:11:84:c8:b6:d3:75:39:bf: ac:71:25:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElUR3c6NyXXBf1kxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyNzE3MjU0M1oXDTI1MDYyNTE3MjU0M1owLzEtMCsGA1UEAxMk ZThiZjdiMWYtYjNjNS00ZTljLWI1NGQtYzM3MmU1NzNiZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuIDWf4ePS6z5Yqv+STSYN46s5fh8vw9caKN 8Pn7NX0+jbtkGJf4YTd9rGBnnB3Kybr2HPgOaYwpCzvNnHDe8iNQKy/f9YBEw1K/ SIVcLeZH45GKCObaWlW1fIlmM4OInTFyh2MOZxCrvZZRcfmOSBhePkAeVDiWzcPU 2xBhZteXBF8/xcWYSgmJOJ3OhbtVa8EJ2MCoAzn9XBQ1w4TYyhHYUfRXyM0+DQ4A SqCXyY3ziCqJ+aa9KjCByG2/g/NBb6/2OWG3aL5Jz61o197OFyXpbd1i4uh2DxY+ RBrQDhdxK/NK8fmjAFTJv7A5De+d8XCqAoSAcRnyhEJM7HYB0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ9vS+PXcD5JmhPAh4GmSvzxe4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTgzYjIzNTYtZDIyMC0z NWE4LWFjMGMtZThmNjkyNTljNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBXxteRneMT856cQBFGRJh8XfL0MQB+Fz8VgqtuaeVgOXiI1pxVcQvV 92IsqCPrKZ0r3uzoESBN1T4Lf/Ijo2f0rcV2acbFxbnX9IT9A53pdL5etnoGIkUS b4KEQvvTJSAN9611N308cp8Ut1BiqwTDQjpcm3NzcDjMtABrxMePq3qMzWC+JvrF 3JjhmNEULlcj7byEL1y2FjzZYB8S5O9DK2p9UaeQZ2ulVOk9xRvujIjaYxjvo21K CYv/ZT8h5M5fz7yJ4EwMG7XlW/tsf6KS9+uE1p3hV59+/OqLVN6xzoXmNwRKFQtX bk5+Di7KWigLhSoRhMi203U5v6xxJe4= -----END CERTIFICATE-----Generated at Sat Apr 5 09:40:17 2025 by rpki-client