$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa File: d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa (raw, json) Hash identifier: y5wLW1UImVAiNvm94HRn6waq5Zv/ZVbu8OnjpEKpIX8= Subject key identifier: C2:3A:F2:E8:58:35:99:76:0D:C9:12:44:A7:6B:62:2B:C6:9C:25:24 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858494734025DC0C87FDCE6358880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 8069 IP address blocks: 52.122.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:34:02:5d:c0:c8:7f:dc:e6:35:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=af6bb6f8-8378-49fb-a492-3c91cb4b85c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3c:61:8c:91:ee:88:dc:90:f8:94:91:0c:33: 3c:f4:ec:47:e6:de:99:45:11:7c:63:cd:7b:b4:d0: 21:57:53:8a:5c:b5:7c:1c:45:d7:8b:86:c2:ce:28: 4a:78:1f:23:98:73:df:79:dc:10:df:8b:dd:09:bd: b7:f4:91:a9:46:10:bf:ae:38:17:11:a2:26:78:ef: bd:23:c0:26:21:07:86:47:a5:30:32:36:1b:8e:5d: a2:df:7c:10:c0:d2:27:84:48:76:dd:a0:c0:c0:76: b3:f0:69:2f:8d:ab:c2:cd:35:9f:13:7e:c0:09:ed: 62:41:82:52:9b:e8:a6:ea:d2:b8:51:cc:2d:90:80: 67:96:d6:ab:23:48:3e:9a:17:c0:55:a3:ae:6e:3e: b3:67:8b:e1:4b:43:77:6d:cf:5d:ad:b2:32:a8:09: 1d:71:0b:ac:47:2c:40:ed:80:4f:4d:4e:83:84:4a: 77:c1:b7:b7:59:6b:53:4f:b2:11:4f:1f:89:b6:74: ab:ea:44:ef:08:71:b6:bd:ab:ee:a4:bd:92:f3:38: a4:82:a2:c2:9f:ac:95:9d:22:d8:ef:29:de:0c:d1: b4:4e:bc:ed:7d:b3:3a:d5:52:3b:1c:34:fc:63:1d: 3d:0e:45:c8:41:ec:8f:2e:fb:cf:2f:da:6a:ec:e6: 19:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3A:F2:E8:58:35:99:76:0D:C9:12:44:A7:6B:62:2B:C6:9C:25:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:21:57:57:b0:e0:22:e8:ab:c5:d5:e6:a7:3e:7c:9d:65:34: 88:08:a3:c8:29:bd:26:d1:68:7f:cc:84:f7:b0:b7:a8:fe:9a: 6c:e0:92:a8:65:f5:1f:60:5e:42:15:f6:b3:a7:73:42:1b:3d: de:c9:99:18:73:ed:f6:1c:68:61:84:c3:4e:c6:04:65:73:f6: 08:56:f1:6d:9c:db:21:22:70:a0:0d:d1:42:db:3f:c9:15:62: bc:72:fe:dc:4a:ee:b1:6d:3f:cd:2e:a9:89:3b:e3:d1:94:27: ca:c0:45:d1:97:fb:6b:a0:68:d8:15:e6:fe:53:c2:65:03:53: 9a:9e:ca:70:2f:65:58:99:5e:37:b3:13:49:4a:ca:25:6e:ca: 46:b0:17:ec:22:81:95:92:eb:2c:99:9d:07:bb:2d:43:9a:0e: 84:8b:ab:7a:46:5a:75:56:34:99:07:aa:09:e4:42:e2:51:0d: 67:05:93:16:09:63:90:c7:88:e1:c4:df:32:1b:39:68:eb:38: d8:07:d0:9e:ba:7a:a6:41:3b:84:8b:27:8d:0d:f1:d1:07:73: 7a:6e:3f:9d:c3:74:47:38:6f:19:ff:f1:ad:5b:d4:13:50:ff: 26:4c:db:c3:d8:00:c5:61:d7:37:51:27:59:6e:ac:db:0c:91: 8c:67:af:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHNAJdwMh/3OY1iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk YWY2YmI2ZjgtODM3OC00OWZiLWE0OTItM2M5MWNiNGI4NWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijxhjJHuiNyQ+JSRDDM89OxH5t6ZRRF8Y817 tNAhV1OKXLV8HEXXi4bCzihKeB8jmHPfedwQ34vdCb239JGpRhC/rjgXEaImeO+9 I8AmIQeGR6UwMjYbjl2i33wQwNInhEh23aDAwHaz8GkvjavCzTWfE37ACe1iQYJS m+im6tK4UcwtkIBnltarI0g+mhfAVaOubj6zZ4vhS0N3bc9drbIyqAkdcQusRyxA 7YBPTU6DhEp3wbe3WWtTT7IRTx+JtnSr6kTvCHG2vavupL2S8zikgqLCn6yVnSLY 7yneDNG0TrztfbM61VI7HDT8Yx09DkXIQeyPLvvPL9pq7OYZhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMI68uhYNZl2DckSRKdrYivGnCUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDE1N2VhMmMtYjA3ZC0z MmZiLWJjZmUtNDBjNTZmMDBiMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMhV1ew4CLoq8XV5qc+fJ1lNIgIo8gpvSbRaH/MhPewt6j+mmzgkqhl 9R9gXkIV9rOnc0IbPd7JmRhz7fYcaGGEw07GBGVz9ghW8W2c2yEicKAN0ULbP8kV Yrxy/txK7rFtP80uqYk749GUJ8rARdGX+2ugaNgV5v5TwmUDU5qeynAvZViZXjez E0lKyiVuykawF+wigZWS6yyZnQe7LUOaDoSLq3pGWnVWNJkHqgnkQuJRDWcFkxYJ Y5DHiOHE3zIbOWjrONgH0J66eqZBO4SLJ40N8dEHc3puP53DdEc4bxn/8a1b1BNQ /yZM28PYAMVh1zdRJ1lurNsMkYxnr/0= -----END CERTIFICATE-----Generated at Sun Apr 27 12:07:11 2025 by rpki-client