$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24153ac8-c42a-3350-ba03-71aa1847a666.roa File: 24153ac8-c42a-3350-ba03-71aa1847a666.roa (raw, json) Hash identifier: znDG8nVomgaOkiLt5+ujSCQPR1TQ698IsP2IcWmaqnc= Subject key identifier: 07:92:EA:11:19:79:F7:E6:A7:FB:DE:A5:7C:52:B6:3E:36:9F:CD:9E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A15CA93F9E754096EB64EF400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24153ac8-c42a-3350-ba03-71aa1847a666.roa Signing time: Thu 05 Jun 2025 01:00:51 +0000 ROA not before: Thu 05 Jun 2025 01:00:51 +0000 ROA not after: Wed 03 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 52.122.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:ca:93:f9:e7:54:09:6e:b6:4e:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 5 01:00:51 2025 GMT Not After : Sep 3 01:00:51 2025 GMT Subject: CN=61f15cf0-bba5-4516-9a79-8c404a915f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:22:20:bc:2d:ab:a4:5a:ad:c9:00:09:70:d9: 69:a7:29:9d:dd:02:40:9a:42:b8:8d:d8:d4:6f:f2: ed:46:e2:51:98:d9:80:15:a4:68:fa:14:38:58:c8: 45:44:13:4c:ca:31:17:9a:b1:0d:43:25:b0:bd:01: 1d:36:d5:a9:a5:07:16:5d:05:b9:7b:ff:2f:db:99: 3b:a8:28:ac:dc:35:63:90:43:3a:87:96:0d:27:0b: b4:0e:37:75:b9:08:11:7e:c0:ce:e7:5f:20:1a:cf: b6:28:06:36:82:1d:9a:a4:3f:d5:e1:c9:44:81:82: b4:fb:d1:ae:ab:b0:32:57:c8:b6:d8:4f:30:45:08: f1:93:70:49:ee:a8:ad:4c:cb:d7:8b:f9:f1:b6:f3: c4:5a:28:ce:00:01:9a:3f:74:1d:67:57:ea:c4:e1: 2b:df:0d:9c:49:f3:f7:ba:33:3a:28:b5:bd:17:e5: 89:c5:5b:54:a9:f7:e4:25:b7:90:06:fc:89:79:f9: b6:c6:c5:3d:da:18:79:66:e9:0f:52:67:23:4a:13: 94:eb:dc:2c:55:b5:82:0f:1c:c4:03:09:b4:1a:ee: 42:4d:4e:6e:e7:45:8b:35:52:92:0f:b0:11:88:77: be:4e:95:ff:11:ab:32:af:45:bf:80:31:27:4e:86: b3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:92:EA:11:19:79:F7:E6:A7:FB:DE:A5:7C:52:B6:3E:36:9F:CD:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24153ac8-c42a-3350-ba03-71aa1847a666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:e8:9f:6b:5c:08:ac:e9:97:a8:90:ca:a5:fd:83:e5:be:2a: c7:83:57:06:78:5b:a3:48:87:8a:6e:f7:0d:e1:30:f6:73:2b: 99:42:49:49:de:f5:05:4b:d4:d6:72:e4:69:dd:03:37:84:b8: 73:f1:02:73:a5:e7:bd:e3:eb:10:d4:77:5a:de:44:22:c5:6a: 8e:30:85:21:cb:a2:7b:8c:51:5c:f7:3a:37:ba:95:bf:91:71: 72:0a:a1:81:8c:cd:4b:fb:35:58:91:65:f6:59:5c:b6:c2:ba: 0f:1e:1d:3a:0c:2c:12:1a:24:15:f4:30:83:fb:00:ab:00:36: 4a:c8:5f:0c:77:60:d4:87:8f:3e:55:48:1e:9f:d1:76:82:5b: 69:cf:7c:23:fb:b2:38:f2:52:f4:f8:c6:d6:f5:bf:ab:73:75: 53:63:03:3d:a4:02:37:d3:76:a9:9d:2e:94:6b:0e:15:71:73: ff:54:ea:4d:09:b9:3a:ec:bf:5a:01:03:d4:5d:b7:7c:ba:86: 35:d0:c1:67:e4:e3:03:cc:02:af:9c:47:f1:7d:ae:61:96:8a: 51:e9:5a:b6:fe:79:09:4e:70:aa:41:84:0a:0a:2e:90:0c:16: 3d:ca:82:c4:29:79:89:90:0a:72:c3:1d:33:02:39:03:b8:d8: 96:62:a8:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoVypP551QJbrZO9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNTAxMDA1MVoXDTI1MDkwMzAxMDA1MVowLzEtMCsGA1UEAxMk NjFmMTVjZjAtYmJhNS00NTE2LTlhNzktOGM0MDRhOTE1Zjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyIgvC2rpFqtyQAJcNlppymd3QJAmkK4jdjU b/LtRuJRmNmAFaRo+hQ4WMhFRBNMyjEXmrENQyWwvQEdNtWppQcWXQW5e/8v25k7 qCis3DVjkEM6h5YNJwu0Djd1uQgRfsDO518gGs+2KAY2gh2apD/V4clEgYK0+9Gu q7AyV8i22E8wRQjxk3BJ7qitTMvXi/nxtvPEWijOAAGaP3QdZ1fqxOEr3w2cSfP3 ujM6KLW9F+WJxVtUqffkJbeQBvyJefm2xsU92hh5ZukPUmcjShOU69wsVbWCDxzE Awm0Gu5CTU5u50WLNVKSD7ARiHe+TpX/Easyr0W/gDEnToazwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeS6hEZeffmp/vepXxStj42n82eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjQxNTNhYzgtYzQyYS0z MzUwLWJhMDMtNzFhYTE4NDdhNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPon2tcCKzpl6iQyqX9g+W+KseDVwZ4W6NIh4pu9w3hMPZzK5lCSUne 9QVL1NZy5GndAzeEuHPxAnOl573j6xDUd1reRCLFao4whSHLonuMUVz3Oje6lb+R cXIKoYGMzUv7NViRZfZZXLbCug8eHToMLBIaJBX0MIP7AKsANkrIXwx3YNSHjz5V SB6f0XaCW2nPfCP7sjjyUvT4xtb1v6tzdVNjAz2kAjfTdqmdLpRrDhVxc/9U6k0J uTrsv1oBA9Rdt3y6hjXQwWfk4wPMAq+cR/F9rmGWilHpWrb+eQlOcKpBhAoKLpAM Fj3KgsQpeYmQCnLDHTMCOQO42JZiqLU= -----END CERTIFICATE-----Generated at Sun Jun 15 23:12:51 2025 by rpki-client