$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa File: cd786728-d6f2-3414-abfc-112e58503c9a.roa (raw, json) Hash identifier: IXme9Y+Zp98tYjtlNMg1ByWHcWifvzTDni1c3X2RNLs= Subject key identifier: BF:91:79:94:F1:2B:6D:31:E3:1C:8D:65:E3:2C:12:9D:F6:56:91:3A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849350EB23E5B1FEC5A0DC12760 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 8069 IP address blocks: 20.157.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:b2:3e:5b:1f:ec:5a:0d:c1:27:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=a9f0ce0b-c94e-4abf-9106-df1a666055fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:38:d6:4e:ae:fc:9f:20:0c:6a:63:33:52:c8: 06:63:34:17:fc:05:ee:3f:5b:ce:db:33:eb:44:f4: 36:fc:5f:f9:9f:4f:64:d5:ae:4e:48:17:b0:f6:01: 27:39:fa:5e:f7:79:0d:f3:ea:1f:f0:64:12:97:1d: 95:3f:52:34:9f:94:01:b7:05:ea:1a:f5:7a:4d:09: 58:b6:fe:7c:64:9a:1d:f0:74:b3:4a:3b:a7:2b:1e: ec:af:59:82:07:ca:e7:4e:05:b0:98:b6:ec:bd:5a: e2:93:ba:fd:f5:41:bb:3f:73:96:d6:a8:40:ab:f6: 78:0a:97:0a:ae:36:cc:a3:3c:d7:12:2c:70:ad:7f: c4:a7:cd:49:41:94:24:da:df:01:3b:ab:de:03:d4: c4:75:ef:64:fe:0a:83:8a:5a:91:a3:aa:5a:36:ec: 5c:42:a5:74:69:94:69:8e:a1:34:27:4b:00:27:6a: a5:c0:fb:1a:b2:2c:c0:4b:2c:ab:ea:16:f9:17:ed: a9:8b:a5:3e:c4:cd:4e:2f:f4:91:19:35:bd:97:ac: 12:c5:6e:d1:a8:9c:f8:04:33:7c:5b:60:2b:d9:38: 5b:06:9d:1b:19:aa:92:95:e8:24:1c:f9:b7:1c:e3: fe:2f:9e:78:f1:b8:38:fe:c9:97:20:a7:7e:ec:d3: 6a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:91:79:94:F1:2B:6D:31:E3:1C:8D:65:E3:2C:12:9D:F6:56:91:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:7c:c9:28:9a:96:8b:8f:37:d0:b6:31:f1:3a:e9:80:6e:0b: b0:dd:1b:58:8c:36:23:38:bd:9b:7e:38:8f:e0:19:e5:57:69: e1:50:62:02:45:d6:c4:ea:30:0e:8a:38:b0:68:61:a4:a8:30: da:2b:31:33:37:bf:5a:cb:ea:11:1c:b8:7e:13:d9:2c:a8:cd: ae:42:0c:a9:d2:ef:ad:1d:07:70:35:5b:c9:fd:f2:7b:4e:ff: 19:5b:ab:c9:71:3b:60:6f:fe:56:a6:33:cf:e3:c9:29:78:94: 14:ed:85:4a:85:af:5a:63:58:7c:a7:00:7d:4b:9a:ca:eb:78: f3:55:0d:c1:c5:15:c6:f3:9c:f6:de:56:ed:28:d6:cd:3e:db: 66:8d:f8:5f:a4:5b:3d:e4:3b:4a:39:f2:cf:49:b6:49:29:0c: 79:48:e5:e0:14:64:c4:5e:61:62:24:52:ec:88:46:cf:ad:91: 01:47:b0:92:33:02:94:3d:02:08:6d:56:02:23:fd:7b:4a:95: c5:86:ed:c4:9d:66:f5:01:36:05:c1:80:b0:1a:c6:90:20:c9: 3b:e4:16:60:a1:a5:d5:18:a5:d0:ef:da:db:7c:78:6d:de:ba: ab:6b:47:7e:05:e0:f4:45:a5:6b:05:b2:80:67:8c:70:d1:22: 54:63:77:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrI+Wx/sWg3BJ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YTlmMGNlMGItYzk0ZS00YWJmLTkxMDYtZGYxYTY2NjA1NWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzjWTq78nyAMamMzUsgGYzQX/AXuP1vO2zPr RPQ2/F/5n09k1a5OSBew9gEnOfpe93kN8+of8GQSlx2VP1I0n5QBtwXqGvV6TQlY tv58ZJod8HSzSjunKx7sr1mCB8rnTgWwmLbsvVrik7r99UG7P3OW1qhAq/Z4CpcK rjbMozzXEixwrX/Ep81JQZQk2t8BO6veA9TEde9k/gqDilqRo6paNuxcQqV0aZRp jqE0J0sAJ2qlwPsasizASyyr6hb5F+2pi6U+xM1OL/SRGTW9l6wSxW7RqJz4BDN8 W2Ar2ThbBp0bGaqSlegkHPm3HOP+L5548bg4/smXIKd+7NNq5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+ReZTxK20x4xyNZeMsEp32VpE6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2Q3ODY3MjgtZDZmMi0z NDE0LWFiZmMtMTEyZTU4NTAzYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHd8ySialouPN9C2MfE66YBuC7DdG1iMNiM4vZt+OI/gGeVXaeFQYgJF 1sTqMA6KOLBoYaSoMNorMTM3v1rL6hEcuH4T2Syoza5CDKnS760dB3A1W8n98ntO /xlbq8lxO2Bv/lamM8/jySl4lBTthUqFr1pjWHynAH1LmsrrePNVDcHFFcbznPbe Vu0o1s0+22aN+F+kWz3kO0o58s9JtkkpDHlI5eAUZMReYWIkUuyIRs+tkQFHsJIz ApQ9AghtVgIj/XtKlcWG7cSdZvUBNgXBgLAaxpAgyTvkFmChpdUYpdDv2tt8eG3e uqtrR34F4PRFpWsFsoBnjHDRIlRjdxo= -----END CERTIFICATE-----Generated at Sat Apr 5 09:42:35 2025 by rpki-client