$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f46de29-540c-3d3d-a447-9150048dd560.roa File: 5f46de29-540c-3d3d-a447-9150048dd560.roa (raw, json) Hash identifier: r+7C+O1iAWiJYs4eodQuBLbgXY33J3AiBmE14hCntrs= Subject key identifier: 64:28:68:D3:9B:F9:BE:DD:AE:A3:44:05:13:80:28:52:F0:AE:1E:12 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328583C8C9A3CB8A31E2A556F34D640 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f46de29-540c-3d3d-a447-9150048dd560.roa Signing time: Mon 10 Jan 2022 05:00:00 +0000 ROA not before: Mon 10 Jan 2022 05:00:00 +0000 ROA not after: Mon 08 Apr 2030 04:00:00 +0000 asID: 8069 IP address blocks: 52.122.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3c:8c:9a:3c:b8:a3:1e:2a:55:6f:34:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 10 05:00:00 2022 GMT Not After : Apr 8 04:00:00 2030 GMT Subject: CN=f54847e4-6188-41a1-b03d-dab3bfadc846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4d:0d:f5:da:24:97:f3:67:4d:44:28:21:90: f3:2e:a7:57:a7:1e:ea:18:99:ce:70:c2:88:94:09: af:3c:86:cb:8c:6f:d7:75:a9:ce:47:20:99:47:93: 77:bd:db:d8:d9:76:87:73:15:59:c5:93:f3:80:3d: a1:27:73:1e:fa:ab:25:ee:dc:d1:11:85:5a:10:7e: 5a:50:14:c6:54:17:04:48:fa:da:cf:63:6d:bb:d3: af:23:24:12:31:34:2e:9d:ab:38:5f:c5:0f:a7:9e: a3:9b:59:53:b5:79:33:e6:ef:4a:10:c5:6b:64:bf: 01:8d:60:9a:5a:bb:9f:5d:28:2e:7b:10:72:37:ea: c6:e4:cb:fd:40:39:a6:82:fb:01:c2:82:a0:0f:c8: b8:ad:b1:37:57:20:6b:15:05:1f:aa:37:6d:31:08: 94:8c:43:9a:e5:9b:ad:fd:e1:8c:16:f8:f8:49:da: dc:78:e0:e1:ac:b6:ad:c7:6d:e7:9d:46:15:a4:06: 8f:33:a2:f9:68:87:6a:5b:c0:06:20:9c:f0:59:7c: fb:31:2e:2b:45:a6:51:2c:8b:83:8f:35:f2:b8:01: 5e:2f:4e:d8:04:eb:95:80:d3:27:16:ea:36:ee:89: fe:e0:91:70:fc:e4:ee:13:1c:4f:2d:b3:b0:5b:46: 00:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:28:68:D3:9B:F9:BE:DD:AE:A3:44:05:13:80:28:52:F0:AE:1E:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f46de29-540c-3d3d-a447-9150048dd560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:a9:58:46:13:c7:33:98:98:1a:25:1a:c9:0a:2c:f1:77:fc: a1:99:86:9b:d0:ce:9f:92:d2:cb:47:30:65:18:04:b8:da:45: f4:5c:a5:5b:6d:28:78:12:b1:af:4b:c2:d4:fe:b1:71:03:63: f8:7d:79:4c:bf:6f:e0:98:0d:02:98:68:a1:e1:9a:86:c0:26: 68:ee:7a:f7:10:b0:bf:68:70:ec:6f:7c:ba:65:40:77:4e:71: d8:fd:93:31:8c:9d:42:f4:40:00:c2:d2:ff:6d:63:f7:b3:e0: 52:37:80:27:27:0a:bc:18:cb:46:03:82:31:8a:69:b8:49:a9: 7b:19:48:88:f4:b1:6e:90:ed:0c:76:b1:6b:04:35:1e:da:f1: 32:48:7c:f9:31:f5:b5:4c:4f:c0:5f:f0:f7:26:b4:7a:2e:3a: 69:1e:c4:af:4d:58:5e:0e:a9:23:33:41:6e:eb:1d:cc:37:ff: fe:2e:68:41:4a:73:6a:59:51:be:fb:96:39:38:25:0d:2a:63: bb:f9:bf:14:7e:b8:3a:39:e7:bf:2c:d2:c4:12:9b:fe:18:1e: cc:4b:bb:ae:04:dd:1f:03:fb:dd:08:c8:1f:b1:fe:a9:a8:03: 59:c3:6f:a1:a1:3a:9a:1d:3d:98:59:0d:fa:1e:ad:25:f6:f4: e9:f3:d6:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDyMmjy4ox4qVW801kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTIyMDExMDA1MDAwMFoXDTMwMDQwODA0MDAwMFowLzEtMCsGA1UEAxMk ZjU0ODQ3ZTQtNjE4OC00MWExLWIwM2QtZGFiM2JmYWRjODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA300N9dokl/NnTUQoIZDzLqdXpx7qGJnOcMKI lAmvPIbLjG/XdanORyCZR5N3vdvY2XaHcxVZxZPzgD2hJ3Me+qsl7tzREYVaEH5a UBTGVBcESPraz2Ntu9OvIyQSMTQunas4X8UPp56jm1lTtXkz5u9KEMVrZL8BjWCa WrufXSguexByN+rG5Mv9QDmmgvsBwoKgD8i4rbE3VyBrFQUfqjdtMQiUjEOa5Zut /eGMFvj4SdrceODhrLatx23nnUYVpAaPM6L5aIdqW8AGIJzwWXz7MS4rRaZRLIuD jzXyuAFeL07YBOuVgNMnFuo27on+4JFw/OTuExxPLbOwW0YA9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQoaNOb+b7drqNEBROAKFLwrh4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWY0NmRlMjktNTQwYy0z ZDNkLWE0NDctOTE1MDA0OGRkNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSpWEYTxzOYmBolGskKLPF3/KGZhpvQzp+S0stHMGUYBLjaRfRcpVtt KHgSsa9LwtT+sXEDY/h9eUy/b+CYDQKYaKHhmobAJmjuevcQsL9ocOxvfLplQHdO cdj9kzGMnUL0QADC0v9tY/ez4FI3gCcnCrwYy0YDgjGKabhJqXsZSIj0sW6Q7Qx2 sWsENR7a8TJIfPkx9bVMT8Bf8PcmtHouOmkexK9NWF4OqSMzQW7rHcw3//4uaEFK c2pZUb77ljk4JQ0qY7v5vxR+uDo5578s0sQSm/4YHsxLu64E3R8D+90IyB+x/qmo A1nDb6GhOpodPZhZDfoerSX29Onz1uo= -----END CERTIFICATE-----Generated at Tue Jun 25 16:22:16 2024 by rpki-client on console-fra.rpki-client.org