$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ac33e084-14c8-3912-b024-0e8df49402d3.roa File: ac33e084-14c8-3912-b024-0e8df49402d3.roa (raw, json) Hash identifier: 0K8FRhiiZS18liDHdNlIKvk9pU7ksQjFDs9RpthH3Ag= Subject key identifier: 4C:B8:57:CC:DD:BC:4C:38:2D:A0:65:58:31:03:1D:04:1E:4A:A0:7E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A612B09578C809B2A00B123A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ac33e084-14c8-3912-b024-0e8df49402d3.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 8069 IP address blocks: 20.153.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:09:57:8c:80:9b:2a:00:b1:23:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=1065198b-0a83-4436-9253-18fb3c449b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:48:c9:2e:74:e3:8a:22:d1:86:24:f6:a9:dd: 8d:4c:c5:4b:a8:1b:36:2a:16:6e:85:56:8a:27:98: 0b:86:f7:59:28:e6:12:3b:1a:1f:16:fc:ee:b2:89: 08:a3:de:25:5d:d8:22:e7:8a:02:45:19:e7:d9:c0: 78:63:17:aa:36:5a:d7:8d:0a:9c:d8:dd:fb:a6:e9: a9:c5:96:2d:4d:42:b4:3f:76:16:f2:be:cc:b6:ac: fb:46:3a:b9:16:23:7b:ea:08:8e:9e:11:17:e7:6c: 2c:a5:2f:25:23:e2:23:ba:43:58:05:68:0e:77:78: df:9d:36:04:44:8d:86:3f:7a:bb:16:85:e8:94:14: d6:95:af:90:dd:91:11:04:01:bd:5a:7c:e0:9f:d4: 12:0f:72:33:ba:a8:27:22:1a:18:d0:b1:68:9e:0a: af:de:e4:a2:36:72:32:f4:69:9f:c7:b6:c7:03:ec: 8e:af:8c:73:27:1e:38:92:f8:2f:23:3b:d6:4e:99: d1:2b:4c:ba:ee:1f:32:f8:59:c9:c6:9f:0d:78:76: c0:a7:d8:ba:eb:bc:ad:77:59:8a:cd:38:53:2b:2b: f8:84:a5:16:2d:65:8a:23:1e:5f:95:f1:3d:10:d8: 1f:91:38:75:86:49:46:54:dc:b0:54:18:8c:7a:4f: 2c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B8:57:CC:DD:BC:4C:38:2D:A0:65:58:31:03:1D:04:1E:4A:A0:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ac33e084-14c8-3912-b024-0e8df49402d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:33:0a:1f:9d:35:b2:ed:77:71:fa:83:e5:4a:92:64:e0:5d: 2b:45:83:ea:a3:55:03:ed:60:4d:d2:ac:8f:bf:f9:c9:2b:f0: b4:31:64:26:b7:79:ce:4e:7b:92:0a:f2:ee:f4:b5:1f:31:a4: 35:88:dc:aa:94:e2:3c:8f:6f:6a:03:32:f2:ae:f8:1b:1e:c3: fa:d0:84:8b:19:a1:23:26:48:77:f8:0e:a6:68:ff:c7:5d:ee: a3:c2:3c:a8:b7:7a:26:f6:95:c1:46:17:1f:6c:2e:77:f9:7a: e2:ba:f5:1b:85:89:1a:6c:2a:ff:6c:c7:f2:f4:ec:5a:be:09: f0:ac:19:c3:4b:e5:ad:6d:63:f4:e0:59:47:65:e7:5b:25:60: 41:54:f9:4c:64:2e:a1:8e:3a:34:7a:72:20:18:7f:64:6e:e8: b3:2e:12:6d:94:e8:eb:cb:4e:81:8f:97:4a:bd:52:32:d6:d4: 3f:66:ea:60:b3:06:22:c2:25:6a:3f:e1:2a:5b:23:1a:fa:15: 2d:73:fd:ed:f1:87:4c:a1:62:26:38:9b:49:1d:c4:3e:a9:61: c4:19:e6:44:c5:db:c1:50:ba:0d:c1:52:c1:ed:07:17:d2:bc: df:dd:02:cf:58:6f:38:9e:25:e1:8b:d1:c9:8d:16:37:a1:d8: 4b:ef:04:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKwlXjICbKgCxI6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk MTA2NTE5OGItMGE4My00NDM2LTkyNTMtMThmYjNjNDQ5YjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEjJLnTjiiLRhiT2qd2NTMVLqBs2KhZuhVaK J5gLhvdZKOYSOxofFvzusokIo94lXdgi54oCRRnn2cB4YxeqNlrXjQqc2N37pump xZYtTUK0P3YW8r7Mtqz7Rjq5FiN76giOnhEX52wspS8lI+IjukNYBWgOd3jfnTYE RI2GP3q7FoXolBTWla+Q3ZERBAG9Wnzgn9QSD3IzuqgnIhoY0LFongqv3uSiNnIy 9Gmfx7bHA+yOr4xzJx44kvgvIzvWTpnRK0y67h8y+FnJxp8NeHbAp9i667ytd1mK zThTKyv4hKUWLWWKIx5flfE9ENgfkTh1hklGVNywVBiMek8svQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEy4V8zdvEw4LaBlWDEDHQQeSqB+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWMzM2UwODQtMTRjOC0z OTEyLWIwMjQtMGU4ZGY0OTQwMmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADozCh+dNbLtd3H6g+VKkmTgXStFg+qjVQPtYE3SrI+/+ckr8LQxZCa3 ec5Oe5IK8u70tR8xpDWI3KqU4jyPb2oDMvKu+Bsew/rQhIsZoSMmSHf4DqZo/8dd 7qPCPKi3eib2lcFGFx9sLnf5euK69RuFiRpsKv9sx/L07Fq+CfCsGcNL5a1tY/Tg WUdl51slYEFU+UxkLqGOOjR6ciAYf2Ru6LMuEm2U6OvLToGPl0q9UjLW1D9m6mCz BiLCJWo/4SpbIxr6FS1z/e3xh0yhYiY4m0kdxD6pYcQZ5kTF28FQug3BUsHtBxfS vN/dAs9YbzieJeGL0cmNFjeh2EvvBEU= -----END CERTIFICATE-----Generated at Thu Jul 10 01:54:55 2025 by rpki-client