$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa File: 10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa (raw, json) Hash identifier: 93cxBW8SyEQU2MzTdPbR1rZPaCU8BuF9gnQXKK7tMPc= Subject key identifier: 3C:86:7B:33:FF:7A:95:E8:99:B6:EE:42:FA:1D:C1:41:E0:D8:8F:4E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848F22C2688E40F1F342BC1CFC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 8069 IP address blocks: 52.122.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:26:88:e4:0f:1f:34:2b:c1:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=eb03dc5d-752b-4263-b03c-c87fd16f4701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7f:4b:d0:ed:ae:c0:b2:11:63:d0:f5:55:b4: 8a:f4:68:b8:64:63:55:23:4c:43:3b:9a:2c:73:45: c9:2c:3d:17:6c:88:ba:c3:ec:11:33:6c:99:ed:01: be:6a:c7:cf:13:17:43:f0:97:30:ff:64:62:ec:cb: 96:73:d9:14:44:4b:d5:8a:d0:79:16:34:df:3a:ba: 71:2e:4a:48:61:df:f6:f2:b5:1f:e8:59:5d:fd:a5: d6:18:87:da:fd:c5:df:7d:a0:15:4e:2f:1d:72:8e: 54:9d:9c:42:10:8d:87:e4:13:be:19:01:a4:0a:0d: 12:71:63:9f:a5:01:7c:f2:b2:94:46:0a:0a:28:76: 7f:3a:36:16:72:51:68:7a:68:0f:fd:4b:d2:c3:75: f4:92:1e:52:5b:a0:e3:24:50:cb:37:e3:a2:12:5f: 67:4f:6e:0f:c1:cb:9a:21:3d:73:4b:05:46:ef:25: dc:df:0d:a3:10:8c:bc:61:2a:c6:78:6f:fe:e9:de: 7d:d7:7b:53:7e:ee:79:f1:90:e2:a9:a6:18:31:b6: ef:f2:70:37:17:46:ca:53:dc:ac:25:47:ba:39:34: 7b:60:3f:4e:47:c8:f4:02:4a:e4:f8:f4:0c:fe:7b: 5d:ca:a9:de:71:55:08:29:e3:07:50:46:7b:0d:f7: 6a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:86:7B:33:FF:7A:95:E8:99:B6:EE:42:FA:1D:C1:41:E0:D8:8F:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/10bf3d54-383f-3127-bc4e-1bb93b8f8b8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:3f:85:e0:30:20:e2:53:75:42:d2:0e:52:06:6d:f0:c6:da: c5:c6:85:d8:09:ab:5e:01:4f:f1:0e:80:d2:e0:f1:40:b7:9c: db:fd:83:18:bf:f5:9c:32:65:75:d1:fe:ff:2a:a4:74:ba:28: 85:19:19:97:e5:2b:f8:09:b4:e6:9a:b1:e1:3d:68:01:50:2f: c7:36:f0:03:ff:71:fa:00:9d:a2:74:c5:08:44:2a:65:eb:d7: 00:20:10:b2:ae:1b:d2:cf:db:42:ab:21:a4:b6:2d:39:a4:a5: 41:e7:5f:4d:a6:15:46:37:d6:1b:bb:e8:4e:09:f1:d2:ba:1b: 56:e1:fb:d0:76:aa:bf:9c:f0:b0:26:c0:f3:22:c6:0d:8f:16: 13:79:e8:b2:f6:25:6d:b2:08:1d:e0:75:84:31:5b:70:58:37: 5e:12:01:1e:74:c9:e8:e0:f0:0f:1d:3e:c2:49:9c:1c:b2:6a: 18:05:c8:31:a2:a8:fb:3b:6a:b3:c7:38:1e:31:2c:ed:88:8d: 92:3b:61:7b:f5:a4:9d:a5:e1:b1:af:77:5c:83:1c:77:37:6f: 2a:32:dc:13:f9:b2:76:c2:2c:f4:21:f0:4f:dc:c5:a3:b4:65: da:24:7a:2e:e6:6f:d4:37:d1:3b:c1:da:56:d3:fd:62:47:44: 20:e1:68:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLCaI5A8fNCvBz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZWIwM2RjNWQtNzUyYi00MjYzLWIwM2MtYzg3ZmQxNmY0NzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH9L0O2uwLIRY9D1VbSK9Gi4ZGNVI0xDO5os c0XJLD0XbIi6w+wRM2yZ7QG+asfPExdD8Jcw/2Ri7MuWc9kUREvVitB5FjTfOrpx LkpIYd/28rUf6Fld/aXWGIfa/cXffaAVTi8dco5UnZxCEI2H5BO+GQGkCg0ScWOf pQF88rKURgoKKHZ/OjYWclFoemgP/UvSw3X0kh5SW6DjJFDLN+OiEl9nT24Pwcua IT1zSwVG7yXc3w2jEIy8YSrGeG/+6d5913tTfu558ZDiqaYYMbbv8nA3F0bKU9ys JUe6OTR7YD9OR8j0Akrk+PQM/ntdyqnecVUIKeMHUEZ7DfdqWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyGezP/epXombbuQvodwUHg2I9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTBiZjNkNTQtMzgzZi0z MTI3LWJjNGUtMWJiOTNiOGY4YjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE/heAwIOJTdULSDlIGbfDG2sXGhdgJq14BT/EOgNLg8UC3nNv9gxi/ 9ZwyZXXR/v8qpHS6KIUZGZflK/gJtOaaseE9aAFQL8c28AP/cfoAnaJ0xQhEKmXr 1wAgELKuG9LP20KrIaS2LTmkpUHnX02mFUY31hu76E4J8dK6G1bh+9B2qr+c8LAm wPMixg2PFhN56LL2JW2yCB3gdYQxW3BYN14SAR50yejg8A8dPsJJnByyahgFyDGi qPs7arPHOB4xLO2IjZI7YXv1pJ2l4bGvd1yDHHc3byoy3BP5snbCLPQh8E/cxaO0 Zdokei7mb9Q30TvB2lbT/WJHRCDhaEY= -----END CERTIFICATE-----Generated at Sat Apr 5 09:37:13 2025 by rpki-client