$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f41ae493-596f-3b0d-863e-061030a2e329.roa File: f41ae493-596f-3b0d-863e-061030a2e329.roa (raw, json) Hash identifier: w87RmesL3JJ50YpXRXzYLmfpCku/p1P2HuHu7RKaW1Y= Subject key identifier: C1:2F:FE:CF:04:AB:80:54:73:EC:9A:AF:FA:FF:EA:C1:7E:2D:05:39 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858494CC954AAB7441E565DD31280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f41ae493-596f-3b0d-863e-061030a2e329.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 8069 IP address blocks: 52.122.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:54:aa:b7:44:1e:56:5d:d3:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=58078c05-5e36-44a5-bba7-456786ec69be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ea:ba:f5:97:ea:14:a3:50:64:8e:07:b3:a1: 4f:ec:a0:fa:b1:53:2c:c8:5f:04:2c:63:51:88:e7: 55:be:2a:b0:6a:98:c9:78:a7:f4:83:6d:9d:68:10: 01:b8:69:8b:2a:43:6d:62:a6:b7:fe:fc:fc:23:1d: 22:4b:c0:50:57:b9:cd:c9:de:17:2b:2e:63:58:c8: fc:ff:ff:fe:c5:61:db:50:a1:86:1d:f3:2f:80:9d: aa:56:8b:e2:a5:9b:83:be:b8:b6:9f:6e:0a:c3:ea: 8e:f8:e1:d1:c8:d1:47:02:6a:7d:d6:da:39:24:6e: 0f:38:31:5d:d9:fe:7c:e9:59:e2:ba:d9:40:9e:35: fe:f2:59:19:c5:6d:84:1c:7e:26:e1:af:0d:ec:da: fe:ba:91:4d:1f:79:b1:b7:14:85:6e:35:73:cd:e8: 72:f1:bd:da:b3:62:c0:2f:70:55:80:08:23:27:99: 1f:45:51:d6:70:d9:73:cb:62:90:ad:4e:65:28:92: 69:b1:7b:79:65:f5:ed:55:4b:4f:be:c3:e3:d2:28: d2:3b:71:f6:83:41:41:c7:d5:d1:f4:d3:7e:59:9b: 0a:ec:c7:07:d3:19:19:29:ee:40:3d:5f:ca:47:95: 49:3f:40:48:31:ef:fc:47:8c:74:9e:f0:62:bb:6b: 6f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2F:FE:CF:04:AB:80:54:73:EC:9A:AF:FA:FF:EA:C1:7E:2D:05:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f41ae493-596f-3b0d-863e-061030a2e329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:da:82:90:a0:e2:67:99:c3:a0:93:da:09:9c:b4:ca:80:5f: 91:a0:e7:a0:44:98:06:a1:c2:50:dc:d5:89:8f:0f:92:92:c7: 31:06:36:09:bc:b2:75:ec:3c:8d:55:9f:fd:0e:46:e0:1d:e7: 31:25:ee:9d:08:48:c9:2e:8c:99:7f:9c:3d:b2:42:1f:ec:9c: 4d:68:a3:41:16:eb:35:d3:fc:7a:d7:d1:8d:df:1d:af:47:36: fb:57:16:07:43:de:3e:f3:ca:68:43:2e:32:c2:bf:27:70:dd: 81:be:20:5a:cc:8e:44:78:6c:4d:96:c0:57:97:64:82:c6:50: 1e:d1:44:f1:d2:6a:e0:96:6a:e1:dc:b9:b4:df:48:74:34:e9: ec:86:1b:bf:0f:e9:4d:0d:03:ad:4e:02:7d:da:22:67:7d:14: 34:8a:d2:ee:8b:f1:c7:45:ac:a8:7c:07:8d:36:e1:09:82:04: d4:bd:a7:99:a5:94:87:03:d0:0c:49:33:ec:02:60:84:d0:3a: e9:09:89:43:cb:6a:b1:d9:9b:6d:42:99:1e:99:6b:5c:f0:23: 6e:19:d2:13:3a:8d:14:b6:06:58:36:18:dc:65:b5:e0:1d:f9: ec:51:c3:e5:65:77:64:39:bf:68:fa:92:ca:8e:3b:c7:e2:4c: ae:b7:a1:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVSqt0QeVl3TEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NTgwNzhjMDUtNWUzNi00NGE1LWJiYTctNDU2Nzg2ZWM2OWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Oq69ZfqFKNQZI4Hs6FP7KD6sVMsyF8ELGNR iOdVviqwapjJeKf0g22daBABuGmLKkNtYqa3/vz8Ix0iS8BQV7nNyd4XKy5jWMj8 ///+xWHbUKGGHfMvgJ2qVovipZuDvri2n24Kw+qO+OHRyNFHAmp91to5JG4PODFd 2f586VniutlAnjX+8lkZxW2EHH4m4a8N7Nr+upFNH3mxtxSFbjVzzehy8b3as2LA L3BVgAgjJ5kfRVHWcNlzy2KQrU5lKJJpsXt5ZfXtVUtPvsPj0ijSO3H2g0FBx9XR 9NN+WZsK7McH0xkZKe5APV/KR5VJP0BIMe/8R4x0nvBiu2tvQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEv/s8Eq4BUc+yar/r/6sF+LQU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjQxYWU0OTMtNTk2Zi0z YjBkLTg2M2UtMDYxMDMwYTJlMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXagpCg4meZw6CT2gmctMqAX5Gg56BEmAahwlDc1YmPD5KSxzEGNgm8 snXsPI1Vn/0ORuAd5zEl7p0ISMkujJl/nD2yQh/snE1oo0EW6zXT/HrX0Y3fHa9H NvtXFgdD3j7zymhDLjLCvydw3YG+IFrMjkR4bE2WwFeXZILGUB7RRPHSauCWauHc ubTfSHQ06eyGG78P6U0NA61OAn3aImd9FDSK0u6L8cdFrKh8B4024QmCBNS9p5ml lIcD0AxJM+wCYITQOukJiUPLarHZm21CmR6Za1zwI24Z0hM6jRS2Blg2GNxlteAd +exRw+Vld2Q5v2j6ksqOO8fiTK63oVs= -----END CERTIFICATE-----Generated at Sun Apr 27 05:35:57 2025 by rpki-client