$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea538004-6f2f-32c7-aa95-11998a593420.roa File: ea538004-6f2f-32c7-aa95-11998a593420.roa (raw, json) Hash identifier: fm76TVCHTspbUR+9rcsMDYkEJ0ns7uT4PsIc83h9NLM= Subject key identifier: 02:2B:7B:78:BA:E7:4D:8A:C6:AA:4B:E7:F8:32:7D:DE:00:AA:97:94 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584954477149A3895B74B8D89100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea538004-6f2f-32c7-aa95-11998a593420.roa Signing time: Thu 27 Mar 2025 17:25:40 +0000 ROA not before: Thu 27 Mar 2025 17:25:40 +0000 ROA not after: Wed 25 Jun 2025 17:25:40 +0000 asID: 8069 IP address blocks: 20.153.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:54:47:71:49:a3:89:5b:74:b8:d8:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 27 17:25:40 2025 GMT Not After : Jun 25 17:25:40 2025 GMT Subject: CN=3a913a61-bec1-47fb-8243-363a38cd30a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b6:eb:bd:99:32:63:23:ef:ad:61:36:92:3f: a7:9e:24:90:62:e6:fa:bc:82:8d:f3:72:ea:cb:c4: c6:a9:e7:49:26:28:75:fc:91:b4:0b:cf:98:74:c6: 7e:77:f5:e2:f4:b6:1c:d6:96:e2:26:a6:e2:65:83: df:f3:d0:bd:1c:5b:09:ee:72:cb:54:0f:85:88:c8: eb:5f:83:c6:aa:8b:60:b9:7a:42:27:02:3d:e7:32: d8:a1:b7:ea:0c:a5:86:16:3e:86:6d:04:7d:7b:c6: fe:57:f4:09:d5:f9:d9:e9:2e:39:c8:b7:53:5a:f9: 55:a8:ab:54:fc:f5:7e:e2:9e:ac:4d:f8:e1:c7:37: 40:8b:dd:c3:9d:a2:b2:4c:8a:b8:b2:68:74:e6:e1: 10:a9:90:49:42:00:dc:c0:bc:ac:fb:74:f6:a6:c7: af:37:e1:a5:0e:3d:dc:e7:7e:04:33:26:27:c6:c3: 41:a1:63:46:5f:e9:49:1f:35:4e:57:7b:fc:ed:15: 48:46:61:dd:e2:f0:f2:14:b5:51:5c:ae:f9:84:e3: 7f:e9:7e:3f:73:bc:c8:a8:17:5c:71:d1:79:d3:55: a5:da:96:8f:20:f6:31:9a:f0:3e:65:ae:2b:57:be: a2:a2:e5:0d:00:80:bc:51:b7:af:72:95:47:13:e3: 0a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2B:7B:78:BA:E7:4D:8A:C6:AA:4B:E7:F8:32:7D:DE:00:AA:97:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea538004-6f2f-32c7-aa95-11998a593420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:23:a1:34:a5:1b:c7:65:b5:04:59:d7:2d:27:a5:74:79:d6: cd:57:a3:6f:7d:e1:40:fd:da:47:c6:a7:94:32:e8:83:7f:bf: af:ee:a3:df:cf:46:92:dd:6a:d1:91:23:3d:7b:19:0e:e0:23: 1f:60:8d:34:79:22:14:93:41:be:76:4d:34:19:15:93:93:10: 34:10:95:a8:06:86:5c:bf:53:d5:ee:05:bb:42:6d:48:26:5a: dc:d8:83:c0:4b:ce:f6:0c:c7:05:13:7e:19:e6:04:0a:99:c3: f1:99:47:2f:a2:6e:0a:e2:99:fb:a2:71:21:41:90:56:49:f8: 45:7b:ba:69:d3:02:bb:5e:91:cd:e1:e2:dc:24:e8:87:cc:45: d7:75:f8:28:cc:45:91:75:75:bf:4f:db:aa:e3:af:68:da:48: bd:33:6c:58:14:35:44:35:1f:31:1d:9e:da:b1:26:e1:21:db: ba:fe:a4:7a:84:4f:56:5e:6f:6c:98:37:47:3b:b4:55:34:b8: e4:50:99:20:ca:a4:9b:cd:4d:0f:a3:23:c0:e2:68:e9:74:67: f6:c4:7b:2a:90:01:32:cf:47:6a:3d:72:57:b9:17:eb:b7:19: 52:83:64:17:a5:e8:22:72:cd:80:b1:5c:b9:7c:ce:03:cf:60: ba:c4:7b:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElUR3FJo4lbdLjYkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyNzE3MjU0MFoXDTI1MDYyNTE3MjU0MFowLzEtMCsGA1UEAxMk M2E5MTNhNjEtYmVjMS00N2ZiLTgyNDMtMzYzYTM4Y2QzMGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrbrvZkyYyPvrWE2kj+nniSQYub6vIKN83Lq y8TGqedJJih1/JG0C8+YdMZ+d/Xi9LYc1pbiJqbiZYPf89C9HFsJ7nLLVA+FiMjr X4PGqotguXpCJwI95zLYobfqDKWGFj6GbQR9e8b+V/QJ1fnZ6S45yLdTWvlVqKtU /PV+4p6sTfjhxzdAi93DnaKyTIq4smh05uEQqZBJQgDcwLys+3T2psevN+GlDj3c 534EMyYnxsNBoWNGX+lJHzVOV3v87RVIRmHd4vDyFLVRXK75hON/6X4/c7zIqBdc cdF501Wl2paPIPYxmvA+Za4rV76iouUNAIC8UbevcpVHE+MKOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIre3i6502KxqpL5/gyfd4AqpeUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWE1MzgwMDQtNmYyZi0z MmM3LWFhOTUtMTE5OThhNTkzNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsjoTSlG8dltQRZ1y0npXR51s1Xo2994UD92kfGp5Qy6IN/v6/uo9/P RpLdatGRIz17GQ7gIx9gjTR5IhSTQb52TTQZFZOTEDQQlagGhly/U9XuBbtCbUgm WtzYg8BLzvYMxwUTfhnmBAqZw/GZRy+ibgrimfuicSFBkFZJ+EV7umnTArtekc3h 4twk6IfMRdd1+CjMRZF1db9P26rjr2jaSL0zbFgUNUQ1HzEdntqxJuEh27r+pHqE T1Zeb2yYN0c7tFU0uORQmSDKpJvNTQ+jI8DiaOl0Z/bEeyqQATLPR2o9cle5F+u3 GVKDZBel6CJyzYCxXLl8zgPPYLrEe60= -----END CERTIFICATE-----Generated at Sat Apr 5 09:47:34 2025 by rpki-client