$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5951a557-2405-3a54-aed0-03f0f4e73edc.roa File: 5951a557-2405-3a54-aed0-03f0f4e73edc.roa (raw, json) Hash identifier: BfYV05m4FS6H/t/p5zcP7l6lSSmzFuFn+FfSKH7FSQ4= Subject key identifier: 96:05:95:4C:18:85:40:47:7F:5E:F8:73:DC:79:8E:59:F6:C9:99:D3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A14657F6F61E1F3BCE4E595C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5951a557-2405-3a54-aed0-03f0f4e73edc.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 8069 IP address blocks: 52.122.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7f:6f:61:e1:f3:bc:e4:e5:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=4af553ef-7b51-4004-87de-99da8a6edb25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:84:bd:58:e2:3f:da:06:2b:30:c1:75:3a:7d: cf:bc:63:03:7b:97:e6:31:d8:74:07:87:82:d2:d4: 0e:23:15:61:2b:ef:13:aa:63:43:aa:f4:7f:bc:69: 30:97:c5:65:ca:2e:69:9a:20:b6:cb:90:78:1d:2b: e3:7d:19:3f:81:49:a6:c4:35:94:12:2e:ee:76:9a: f7:80:5f:f0:71:16:12:5a:32:f5:c6:e7:83:a6:d5: aa:be:16:21:4d:8a:d6:e8:4f:6a:1a:aa:c7:f7:bd: ad:2d:e1:f3:70:20:0f:4b:43:1c:8f:4a:1a:c7:c3: 80:70:f0:3a:b1:10:2a:f8:25:81:61:b3:79:8d:07: f9:24:6e:35:ce:9f:8d:99:d0:0a:ee:7e:95:5d:2d: c3:e0:02:41:8a:0a:c7:68:50:62:0f:ed:85:53:68: fc:3a:c6:e3:d7:c8:d9:2d:8e:39:ee:ea:a0:9e:c1: 64:65:b6:53:07:08:b1:e8:bc:4f:f3:9e:69:cd:43: 1f:88:08:df:7f:f4:b9:63:9f:7b:41:13:62:08:3a: 89:8d:8d:ca:f1:33:72:fe:89:0c:70:d2:8e:fb:c7: 2d:a6:a3:03:3c:f7:ab:64:de:6f:48:75:03:9f:de: db:db:71:a6:5d:98:51:db:8d:85:1c:53:24:84:48: 37:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:05:95:4C:18:85:40:47:7F:5E:F8:73:DC:79:8E:59:F6:C9:99:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5951a557-2405-3a54-aed0-03f0f4e73edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:13:2d:d2:a8:4b:e3:f6:ed:87:5a:45:f0:41:a1:2b:aa:60: 85:5d:e4:24:27:15:4c:46:e0:54:f1:9f:b1:c5:40:44:14:f6: a5:35:74:ad:7e:91:24:7c:0d:c0:46:e6:a2:c7:f0:9e:a2:ff: 71:63:04:a3:9d:c1:c6:03:7a:20:8b:24:fd:56:30:4e:b8:fc: c3:40:81:69:3a:8c:9f:f8:4b:d7:e7:56:d1:64:24:2f:6b:89: bb:a0:cf:32:6f:5e:d7:b7:65:90:68:7e:0a:f7:f0:7e:32:1c: d4:b9:c8:5b:bd:cb:6d:89:e1:ec:41:09:03:58:57:89:bf:8c: b5:14:34:a2:21:b3:4e:cc:f0:94:49:1f:e2:40:8a:40:53:77: 8d:2a:f7:dc:0c:ec:7c:e6:bc:54:a5:96:50:56:6c:43:31:33: de:7b:2d:00:c3:c5:c4:88:52:b9:76:ae:95:40:c2:b7:11:69: 86:1e:42:4c:e5:6c:69:4b:62:48:b6:9b:ef:f3:3c:7e:3c:eb: 27:2d:e5:03:a8:4c:85:47:ee:00:ed:8d:e5:a6:e7:b9:77:51: 33:c7:f1:8d:da:2d:51:c0:99:f2:e7:28:e2:4b:80:00:18:af: d2:03:d6:30:11:b0:5b:f1:2b:2e:f8:32:91:54:74:1c:90:58: a1:9d:eb:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZX9vYeHzvOTllcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NGFmNTUzZWYtN2I1MS00MDA0LTg3ZGUtOTlkYThhNmVkYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIS9WOI/2gYrMMF1On3PvGMDe5fmMdh0B4eC 0tQOIxVhK+8TqmNDqvR/vGkwl8Vlyi5pmiC2y5B4HSvjfRk/gUmmxDWUEi7udpr3 gF/wcRYSWjL1xueDptWqvhYhTYrW6E9qGqrH972tLeHzcCAPS0Mcj0oax8OAcPA6 sRAq+CWBYbN5jQf5JG41zp+NmdAK7n6VXS3D4AJBigrHaFBiD+2FU2j8Osbj18jZ LY457uqgnsFkZbZTBwix6LxP855pzUMfiAjff/S5Y597QRNiCDqJjY3K8TNy/okM cNKO+8ctpqMDPPerZN5vSHUDn97b23GmXZhR242FHFMkhEg3IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYFlUwYhUBHf174c9x5jln2yZnTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTk1MWE1NTctMjQwNS0z YTU0LWFlZDAtMDNmMGY0ZTczZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDNHqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8TLdKoS+P27YdaRfBBoSuqYIVd5CQnFUxG4FTxn7HFQEQU9qU1dK1+ kSR8DcBG5qLH8J6i/3FjBKOdwcYDeiCLJP1WME64/MNAgWk6jJ/4S9fnVtFkJC9r ibugzzJvXte3ZZBofgr38H4yHNS5yFu9y22J4exBCQNYV4m/jLUUNKIhs07M8JRJ H+JAikBTd40q99wM7HzmvFSlllBWbEMxM957LQDDxcSIUrl2rpVAwrcRaYYeQkzl bGlLYki2m+/zPH486yct5QOoTIVH7gDtjeWm57l3UTPH8Y3aLVHAmfLnKOJLgAAY r9ID1jARsFvxKy74MpFUdByQWKGd69s= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:48 2025 by rpki-client