$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ef293231-873b-3358-8b93-472eb143f670.roa File: ef293231-873b-3358-8b93-472eb143f670.roa (raw, json) Hash identifier: LrHq3efYPYi4TYvcd/oB+hL1H05vO2U2YoSZY/SbTpQ= Subject key identifier: 01:C8:54:FD:0C:F7:ED:28:32:44:AB:11:6A:CE:A8:AB:6F:CD:76:72 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584944694FA769D474944BB4B300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ef293231-873b-3358-8b93-472eb143f670.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 8069 IP address blocks: 52.122.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4f:a7:69:d4:74:94:4b:b4:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=6e1dd87d-dd39-466e-ac9a-b3daf0b9cd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:65:ae:56:f7:bc:f5:34:1a:db:80:63:b3: d6:31:9f:80:37:23:d3:89:78:f0:c7:03:df:e2:35: 14:72:96:8b:35:0d:d7:db:fd:7e:00:aa:c2:d3:8c: a4:ce:cf:56:13:9c:ca:59:04:75:da:a9:10:7f:b0: 5f:4f:e2:0f:98:b8:4d:c2:15:a2:bb:c1:ab:49:05: d5:3d:97:ae:d1:0f:c4:aa:f4:0f:26:81:86:16:9b: c8:4f:22:e5:19:c8:98:b9:e0:73:69:57:33:9f:b7: 6a:05:eb:27:d7:a8:21:6d:d3:63:fc:c3:73:9d:24: 33:85:fe:d9:b4:74:50:e7:3f:53:50:49:81:21:99: 73:ad:93:87:ee:9b:6d:ed:e4:fc:90:c9:a9:9e:aa: c6:24:06:de:28:c8:68:9f:d8:78:0c:18:04:94:74: 88:c4:cf:39:7e:60:bf:a4:4c:13:47:20:9d:7e:16: 38:60:24:05:0c:b5:3b:ad:e3:94:cf:df:cf:88:b3: c5:59:94:f4:fe:5e:3b:c8:ff:ba:64:92:96:59:da: ae:57:73:d0:c1:f1:90:ad:87:ba:23:0c:df:ce:08: 2e:81:24:0b:ed:ad:fe:b9:df:b2:0b:3f:22:15:c7: b1:3f:bf:b2:fb:af:9e:de:6f:bd:fc:da:7a:18:c2: 92:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C8:54:FD:0C:F7:ED:28:32:44:AB:11:6A:CE:A8:AB:6F:CD:76:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ef293231-873b-3358-8b93-472eb143f670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:4b:18:04:e3:cf:6a:e5:ca:d0:14:7e:3d:21:57:b3:75:08: 7a:25:19:ab:4b:58:9c:7d:f1:e9:d2:0f:33:96:65:aa:60:3d: 48:a8:9f:be:8f:82:7b:36:be:26:08:08:fb:8a:cd:80:10:10: 22:69:f3:3b:50:07:23:e1:24:4b:02:c8:8a:e3:35:b6:62:1f: 72:e3:46:e9:39:82:8e:14:0c:31:5a:00:22:04:03:ae:49:38: 03:e9:06:d6:a0:b0:3f:76:f2:b6:eb:fb:ea:2b:ec:27:9e:3c: 9e:bc:7d:78:c9:6d:bb:a8:6d:0e:de:c0:08:f8:60:b9:54:25: 90:84:e3:ee:d6:5d:c3:6d:69:36:11:17:d0:5e:5d:36:6f:dd: 55:45:23:52:e0:62:30:b2:f7:ac:1c:7a:3c:2b:ca:3d:17:54: 20:46:e7:5c:ce:27:50:0a:a1:76:fc:56:76:1d:c1:69:0a:c1: dc:de:59:c8:fb:63:03:5d:e7:6b:df:5d:df:85:40:f0:33:0d: f6:c0:9b:77:ec:86:e8:bb:c6:95:f6:c6:ec:b6:eb:bd:82:99: 5b:ef:ea:b6:f2:b5:3f:ae:9f:6f:90:9c:5e:9c:34:65:f7:df: 6b:11:e9:bb:21:17:53:3f:6e:ab:80:3d:95:51:3e:57:8e:2f: fa:8a:74:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaU+nadR0lEu0swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NmUxZGQ4N2QtZGQzOS00NjZlLWFjOWEtYjNkYWYwYjljZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNdlrlb3vPU0GtuAY7PWMZ+ANyPTiXjwxwPf 4jUUcpaLNQ3X2/1+AKrC04ykzs9WE5zKWQR12qkQf7BfT+IPmLhNwhWiu8GrSQXV PZeu0Q/EqvQPJoGGFpvITyLlGciYueBzaVczn7dqBesn16ghbdNj/MNznSQzhf7Z tHRQ5z9TUEmBIZlzrZOH7ptt7eT8kMmpnqrGJAbeKMhon9h4DBgElHSIxM85fmC/ pEwTRyCdfhY4YCQFDLU7reOUz9/PiLPFWZT0/l47yP+6ZJKWWdquV3PQwfGQrYe6 IwzfzggugSQL7a3+ud+yCz8iFcexP7+y+6+e3m+9/Np6GMKSfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHIVP0M9+0oMkSrEWrOqKtvzXZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWYyOTMyMzEtODczYi0z MzU4LThiOTMtNDcyZWIxNDNmNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDNHq4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABLGATjz2rlytAUfj0hV7N1CHolGatLWJx98enSDzOWZapgPUion76P gns2viYICPuKzYAQECJp8ztQByPhJEsCyIrjNbZiH3LjRuk5go4UDDFaACIEA65J OAPpBtagsD928rbr++or7CeePJ68fXjJbbuobQ7ewAj4YLlUJZCE4+7WXcNtaTYR F9BeXTZv3VVFI1LgYjCy96wcejwryj0XVCBG51zOJ1AKoXb8VnYdwWkKwdzeWcj7 YwNd52vfXd+FQPAzDfbAm3fshui7xpX2xuy2672CmVvv6rbytT+un2+QnF6cNGX3 32sR6bshF1M/bquAPZVRPleOL/qKdFo= -----END CERTIFICATE-----Generated at Tue Apr 29 12:13:29 2025 by rpki-client