$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa File: f0c78555-959f-3406-a67f-c1b8b75f63c0.roa (raw, json) Hash identifier: HubSkNEmwF/BJvY8n6uZ0HU8ZEQZloFALTdeK3gjCoA= Subject key identifier: AD:59:4D:18:40:51:F7:47:04:1D:58:C2:73:EF:BC:5A:D2:AE:48:47 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858494CC954FA645617816CB9F480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.157.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:54:fa:64:56:17:81:6c:b9:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=3af0b631-8fac-4abb-bc87-dcc4f9a44d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:19:8a:08:bc:93:39:44:f3:f6:4e:bc:f0:12: ac:e1:6c:ce:2b:d3:35:2c:7f:e0:3c:27:3e:ef:fa: 49:5d:21:d7:f3:4a:c2:ee:7a:b4:5a:09:9b:97:4e: da:0d:e5:fe:e6:3d:11:18:bf:f3:71:02:f8:cb:64: dd:80:6f:3d:c1:77:ca:0a:cf:71:19:b5:80:b5:55: 18:04:d2:fc:8b:a3:93:e9:b6:28:47:be:3a:a7:00: 80:f9:f8:f6:89:e8:75:78:4d:7b:4f:9c:a7:0f:a9: 61:f2:2b:fc:8e:da:1e:9e:80:96:23:fa:fc:9d:33: 98:b8:26:7a:1a:c4:aa:b6:f2:c8:b4:0f:54:8e:e8: a2:f0:56:bc:2b:4e:f2:a5:e9:f6:e2:c8:0c:35:7e: 0d:48:3b:3e:94:e6:e7:72:40:89:ad:48:2a:98:43: cc:b9:b2:06:af:f9:1d:80:94:a1:82:16:f9:af:51: d2:04:93:48:74:d7:8b:9e:34:6f:4a:8d:41:60:73: 67:10:b9:ce:eb:de:a5:26:ae:b7:fa:14:ca:69:7b: 41:4f:4b:84:e1:96:5e:29:e8:30:bf:ad:86:9b:fe: 39:51:29:0a:fb:77:be:e6:18:80:85:42:01:11:10: 18:10:90:e7:1a:89:b6:4f:b6:70:e4:89:7e:6b:e4: 87:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:59:4D:18:40:51:F7:47:04:1D:58:C2:73:EF:BC:5A:D2:AE:48:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6e:6a:94:1d:a9:be:d1:d1:2e:b5:d8:46:83:23:4d:33:8a: 28:b9:b8:16:8f:33:2e:4e:bd:e5:b8:4c:db:b9:29:a9:49:a0: 82:18:b1:79:97:55:87:86:5b:e9:04:31:07:e3:ee:5a:be:80: ed:cc:1d:fe:5f:9c:90:4b:7f:52:45:70:d7:7a:2e:46:db:e2: 98:8a:84:dc:fb:a4:29:b0:b7:2c:30:2f:e7:4e:14:6a:4e:f7: 2f:a4:b9:92:b6:07:4f:07:89:8d:c0:0f:09:b9:94:17:85:da: a3:d7:1a:a7:d4:31:77:f5:be:34:3d:97:ef:c4:e4:26:92:d6: e1:38:88:24:d2:bd:a1:89:29:b7:bd:2f:26:58:3e:f3:d3:5e: 3f:10:4c:78:e7:4f:a0:e3:b3:1d:55:b7:c9:aa:54:2d:9c:d0: 6f:4c:7c:5c:9b:06:e2:35:8a:37:ad:8f:28:b6:ce:0b:04:e4: 60:2e:c3:c3:ac:f3:3d:4d:46:25:a7:15:7a:c1:8f:7e:41:f2: 62:55:14:29:89:15:69:3c:fe:31:f6:5f:0a:23:af:e5:73:4c: 15:9b:14:72:3e:a9:dd:60:30:3b:ec:ff:4a:47:3d:1f:c4:94: 45:33:19:b4:6f:80:38:45:79:e1:b7:73:a7:20:9e:42:5c:7b: 61:a6:3c:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVT6ZFYXgWy59IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk M2FmMGI2MzEtOGZhYy00YWJiLWJjODctZGNjNGY5YTQ0ZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhmKCLyTOUTz9k688BKs4WzOK9M1LH/gPCc+ 7/pJXSHX80rC7nq0Wgmbl07aDeX+5j0RGL/zcQL4y2TdgG89wXfKCs9xGbWAtVUY BNL8i6OT6bYoR746pwCA+fj2ieh1eE17T5ynD6lh8iv8jtoenoCWI/r8nTOYuCZ6 GsSqtvLItA9Ujuii8Fa8K07ypen24sgMNX4NSDs+lObnckCJrUgqmEPMubIGr/kd gJShghb5r1HSBJNIdNeLnjRvSo1BYHNnELnO696lJq63+hTKaXtBT0uE4ZZeKegw v62Gm/45USkK+3e+5hiAhUIBERAYEJDnGom2T7Zw5Il+a+SHfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1ZTRhAUfdHBB1YwnPvvFrSrkhHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjBjNzg1NTUtOTU5Zi0z NDA2LWE2N2YtYzFiOGI3NWY2M2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtuapQdqb7R0S612EaDI00ziii5uBaPMy5OveW4TNu5KalJoIIYsXmX VYeGW+kEMQfj7lq+gO3MHf5fnJBLf1JFcNd6Lkbb4piKhNz7pCmwtywwL+dOFGpO 9y+kuZK2B08HiY3ADwm5lBeF2qPXGqfUMXf1vjQ9l+/E5CaS1uE4iCTSvaGJKbe9 LyZYPvPTXj8QTHjnT6Djsx1Vt8mqVC2c0G9MfFybBuI1ijetjyi2zgsE5GAuw8Os 8z1NRiWnFXrBj35B8mJVFCmJFWk8/jH2Xwojr+VzTBWbFHI+qd1gMDvs/0pHPR/E lEUzGbRvgDhFeeG3c6cgnkJce2GmPMI= -----END CERTIFICATE-----Generated at Sat Apr 5 09:37:09 2025 by rpki-client