$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa File: 10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa (raw, json) Hash identifier: 1+yPHwzhnDzRyGjgrZgH99OBJsHaMt4yReAnpuQ3bN8= Subject key identifier: 6E:9C:3F:3E:DF:5F:6B:DB:A9:E6:5F:2A:D5:13:58:F9:54:35:C0:8A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AB2212BD8BB498938E4AF7D80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 8069 IP address blocks: 52.122.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:2b:d8:bb:49:89:38:e4:af:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=f8b0966d-3eda-4ab0-9c73-f92042d5caf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:00:ff:32:10:c5:2c:42:69:06:87:71:79:69: 5a:1c:5e:06:89:de:d8:74:8f:2d:c0:ee:4a:b5:0e: 8e:6d:0f:f8:5b:c7:55:3a:2b:2d:e1:a4:80:bd:6e: bf:c8:d4:ab:35:0b:30:d2:58:d6:61:65:b1:0f:ea: 0c:dc:98:bf:06:47:30:b8:a1:fe:dc:fd:9c:4d:24: 46:59:d2:fe:5e:61:7b:0f:ed:ad:c3:de:90:2f:27: 32:72:d6:94:9c:15:67:33:fb:44:f1:a0:74:ae:68: c0:b6:3d:0f:d1:69:d6:52:9b:a6:6b:ed:ba:c6:95: a0:5e:82:d0:17:2b:9c:8b:f0:6e:fa:45:ae:5f:42: 7e:03:e9:e0:da:99:6e:e8:5a:a3:ad:d4:78:fc:87: 44:4d:3a:83:6b:0d:fb:f6:3a:ec:b5:88:9d:32:f6: 48:26:07:f2:2b:28:ec:08:3f:1c:11:a1:06:49:7e: 89:28:59:11:9a:4c:c9:df:6b:e5:9b:23:1d:7a:5d: 23:3f:4f:f7:0d:a0:61:aa:e1:dd:2d:e4:5d:8c:ec: f1:04:04:46:fe:be:dc:e6:11:52:d9:3b:31:60:20: df:74:80:72:38:4e:5d:df:ff:de:8c:41:95:fc:30: 0b:fe:ca:d2:b8:3c:09:74:7f:f4:33:48:5e:f1:13: e1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9C:3F:3E:DF:5F:6B:DB:A9:E6:5F:2A:D5:13:58:F9:54:35:C0:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:40:3c:58:b1:0d:a6:12:fd:95:a3:9b:c7:ea:47:5d:bb:2c: 8e:cd:14:04:88:70:2e:83:ad:ca:0c:fa:d0:af:59:1a:c2:6e: 3c:47:6e:47:f8:e2:4e:48:1d:3c:3c:a4:99:a9:9f:01:96:69: db:f6:da:10:e4:23:30:9e:e3:35:31:b9:63:6d:bb:a2:e7:ec: 62:ec:7e:cf:84:63:ce:8c:f2:15:79:7f:85:d6:09:bd:d6:df: 3f:5c:8e:a0:e8:73:96:ae:3a:1b:fe:13:64:0f:a0:c7:a3:4f: 0e:a4:d9:51:90:3a:8c:64:c2:e4:3a:d0:57:4f:d9:5c:a9:87: 67:2f:0b:e8:de:0d:2b:c4:5d:09:64:51:18:f6:8c:b5:b0:47: a6:26:2f:7e:f3:5c:8c:0d:1b:53:94:2e:92:dc:9e:2b:e0:fe: fe:a0:09:03:fc:eb:31:d4:8a:cf:cd:ed:cf:61:88:86:c9:e8: bc:04:07:3e:67:ab:36:fb:4e:37:04:c1:2a:3f:c4:68:70:ab: c2:db:73:2e:18:f4:75:ef:a1:2a:ad:92:09:1e:61:11:5f:3a: 50:64:35:91:75:b7:e1:e3:a5:e5:64:49:ac:38:41:42:c3:de: 2c:4d:ca:5c:b2:6f:e1:14:48:43:dc:f3:dd:ab:ba:10:ee:41: 0a:00:70:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyISvYu0mJOOSvfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjhiMDk2NmQtM2VkYS00YWIwLTljNzMtZjkyMDQyZDVjYWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAD/MhDFLEJpBodxeWlaHF4Gid7YdI8twO5K tQ6ObQ/4W8dVOist4aSAvW6/yNSrNQsw0ljWYWWxD+oM3Ji/BkcwuKH+3P2cTSRG WdL+XmF7D+2tw96QLycyctaUnBVnM/tE8aB0rmjAtj0P0WnWUpuma+26xpWgXoLQ Fyuci/Bu+kWuX0J+A+ng2plu6FqjrdR4/IdETTqDaw379jrstYidMvZIJgfyKyjs CD8cEaEGSX6JKFkRmkzJ32vlmyMdel0jP0/3DaBhquHdLeRdjOzxBARG/r7c5hFS 2TsxYCDfdIByOE5d3//ejEGV/DAL/srSuDwJdH/0M0he8RPhnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6cPz7fX2vbqeZfKtUTWPlUNcCKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTBiZjNkNTQtMzgzZi0z MTI3LWJjNGUtMWJiOTNiOGY4YjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpAPFixDaYS/ZWjm8fqR127LI7NFASIcC6DrcoM+tCvWRrCbjxHbkf4 4k5IHTw8pJmpnwGWadv22hDkIzCe4zUxuWNtu6Ln7GLsfs+EY86M8hV5f4XWCb3W 3z9cjqDoc5auOhv+E2QPoMejTw6k2VGQOoxkwuQ60FdP2Vyph2cvC+jeDSvEXQlk URj2jLWwR6YmL37zXIwNG1OULpLcnivg/v6gCQP86zHUis/N7c9hiIbJ6LwEBz5n qzb7TjcEwSo/xGhwq8Lbcy4Y9HXvoSqtkgkeYRFfOlBkNZF1t+HjpeVkSaw4QULD 3ixNylyyb+EUSEPc892ruhDuQQoAcAQ= -----END CERTIFICATE-----Generated at Mon Aug 4 18:23:50 2025 by rpki-client