$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa File: f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa (raw, json) Hash identifier: 607Kvoca9RsyyXFMAZHb3H0OLKESmDMgJ65MDijJrf8= Subject key identifier: DF:45:C7:27:E4:0F:EB:02:61:72:7B:F2:D3:AF:C6:E2:5B:A7:A9:4B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A14657F7F2057FFD7D2591C00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 8069 IP address blocks: 52.122.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7f:7f:20:57:ff:d7:d2:59:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=b8cacbbe-3c10-4ad8-8c85-e1e90e045dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:87:73:f8:a4:56:9c:2b:22:79:90:49:ef:bb: 93:4e:e4:30:7b:52:3f:b1:bf:83:ed:ce:da:10:1e: 7c:1d:44:61:45:ad:fd:ac:e7:99:2b:ab:e6:51:5c: 34:f8:0b:66:b2:77:45:9c:ff:06:c7:de:f6:7b:f5: 33:2c:b7:fa:84:0c:4d:ac:3c:76:d2:2e:b4:b9:a2: 73:7f:0d:6d:e2:56:07:b5:58:ac:9f:ef:36:e7:e9: a5:81:ac:ab:a4:6b:2a:44:ef:38:8a:be:bc:2f:e6: a0:41:89:be:11:5d:8a:0d:98:99:d9:2e:6c:ce:04: 15:72:ae:be:56:c8:81:df:84:37:f8:f4:31:eb:0a: 3a:68:5f:74:5b:e1:d2:f0:60:10:e2:47:9f:ea:25: 7a:33:18:46:2a:90:3e:28:2b:4a:1a:34:36:97:2c: fe:d8:6d:29:85:6f:b7:f9:e1:36:a3:b5:e9:2f:c4: 12:2d:78:4d:7e:30:79:a5:64:86:b1:79:04:24:76: 78:06:b0:57:32:3c:8b:80:27:92:c5:04:e6:ab:12: de:c9:68:55:24:86:4a:85:83:db:8a:df:e1:68:59: 9d:0f:24:d6:d3:e6:38:6f:58:5e:fe:53:14:f9:52: 22:ab:97:77:bd:4f:98:7f:9e:77:ff:f1:a2:a3:15: e8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:45:C7:27:E4:0F:EB:02:61:72:7B:F2:D3:AF:C6:E2:5B:A7:A9:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:11:4e:6a:40:f7:34:cc:1b:d3:8b:73:d9:b8:86:a9:c6:d5: 25:d2:a7:17:86:24:2b:71:62:51:3a:24:fe:cd:ee:d6:c1:1b: b8:91:27:49:e2:35:c6:a3:ba:05:7f:d1:7d:dd:ef:b5:5f:0b: 45:28:ec:5e:c7:c7:92:4a:6d:e0:1a:96:5c:60:38:15:2d:6f: 85:6d:0c:b8:f2:86:e2:c8:a1:ea:b0:ab:c0:15:11:3c:75:2d: ed:34:aa:09:c3:a8:b6:14:73:a1:cd:b6:90:30:a8:06:07:a5: 88:cf:16:16:0e:60:ff:7c:7d:11:67:c3:a5:10:69:5c:8c:4c: 8e:6b:b0:a3:db:c8:44:19:67:3d:02:1d:c3:4b:e3:90:b4:b2: cf:b9:4a:34:62:25:a1:4d:60:76:52:c5:28:4e:b2:03:14:8b: 50:38:92:d8:58:06:52:29:35:58:3a:1a:f4:33:86:f5:74:11: 73:5c:8c:bc:54:a5:fa:88:d4:bd:4c:f1:df:67:69:fc:1d:6a: 74:4a:e5:ff:6e:c4:62:72:dc:49:18:a8:d1:e0:48:ff:64:03: 37:54:66:54:c3:72:89:cc:da:b9:d7:3a:2a:c1:e2:4b:26:aa: 6f:42:2f:10:89:8d:6b:ec:81:28:5c:63:f5:92:05:ab:ce:87: 34:9e:47:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZX9/IFf/19JZHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk YjhjYWNiYmUtM2MxMC00YWQ4LThjODUtZTFlOTBlMDQ1ZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4dz+KRWnCsieZBJ77uTTuQwe1I/sb+D7c7a EB58HURhRa39rOeZK6vmUVw0+AtmsndFnP8Gx972e/UzLLf6hAxNrDx20i60uaJz fw1t4lYHtVisn+825+mlgayrpGsqRO84ir68L+agQYm+EV2KDZiZ2S5szgQVcq6+ VsiB34Q3+PQx6wo6aF90W+HS8GAQ4kef6iV6MxhGKpA+KCtKGjQ2lyz+2G0phW+3 +eE2o7XpL8QSLXhNfjB5pWSGsXkEJHZ4BrBXMjyLgCeSxQTmqxLeyWhVJIZKhYPb it/haFmdDyTW0+Y4b1he/lMU+VIiq5d3vU+Yf553//GioxXojwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9FxyfkD+sCYXJ78tOvxuJbp6lLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjVlMTQ2MzgtMDJkMS0z NTI5LWJkYzYtYWZhNGM3Mzg2ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDNHp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKERTmpA9zTMG9OLc9m4hqnG1SXSpxeGJCtxYlE6JP7N7tbBG7iRJ0ni NcajugV/0X3d77VfC0Uo7F7Hx5JKbeAallxgOBUtb4VtDLjyhuLIoeqwq8AVETx1 Le00qgnDqLYUc6HNtpAwqAYHpYjPFhYOYP98fRFnw6UQaVyMTI5rsKPbyEQZZz0C HcNL45C0ss+5SjRiJaFNYHZSxShOsgMUi1A4kthYBlIpNVg6GvQzhvV0EXNcjLxU pfqI1L1M8d9nafwdanRK5f9uxGJy3EkYqNHgSP9kAzdUZlTDconM2rnXOirB4ksm qm9CLxCJjWvsgShcY/WSBavOhzSeRyU= -----END CERTIFICATE-----Generated at Sun Jun 15 15:56:03 2025 by rpki-client