$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/12e863b8-a466-3f52-bbf0-c497cc958095.roa File: 12e863b8-a466-3f52-bbf0-c497cc958095.roa (raw, json) Hash identifier: Xu9FOyg/cpz18cUlYUPWkdyc8r+3MGkVIe06vnqL3oc= Subject key identifier: 0C:B1:64:33:6D:00:03:35:C6:53:3E:F2:FA:85:A6:3E:44:9D:FE:62 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328583F9717CE3A21FC552514A46700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/12e863b8-a466-3f52-bbf0-c497cc958095.roa Signing time: Sat 15 Oct 2022 12:00:00 +0000 ROA not before: Sat 15 Oct 2022 12:00:00 +0000 ROA not after: Wed 06 Mar 2030 05:00:00 +0000 asID: 8069 IP address blocks: 52.122.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3f:97:17:ce:3a:21:fc:55:25:14:a4:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 15 12:00:00 2022 GMT Not After : Mar 6 05:00:00 2030 GMT Subject: CN=e84d5109-48ac-42bd-aa8d-8a9905f196c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:25:14:27:70:31:25:80:ec:af:cf:7d:a8:5b: b4:68:28:b8:1d:cd:4a:6b:09:c4:0b:8e:bc:5d:b1: cc:58:ae:19:62:98:76:c5:62:d9:10:fa:fd:f0:cf: 82:1d:45:74:55:d9:0c:fe:3d:c4:21:a1:92:38:03: 57:db:e9:43:7b:f2:a8:4f:ba:ad:14:7e:1f:d4:b0: bf:64:eb:08:9d:a2:95:0c:68:92:28:d6:e6:60:73: be:5f:96:a9:5b:9d:11:22:13:43:7a:0f:8d:0c:e7: 09:9e:96:53:ad:87:3b:64:41:4b:a9:d4:f3:e4:1f: 07:4d:da:d0:fd:10:ce:2e:4a:6b:03:82:f3:b6:fb: 22:db:d4:ef:4e:80:56:4d:6a:e1:a1:46:f7:67:26: cb:e8:69:4a:f7:b4:b6:5b:29:77:52:4c:bc:6b:f0: 86:d9:24:4a:13:95:99:18:0c:ab:22:69:32:c3:21: 6e:cd:6a:7e:bf:ee:51:df:ae:c2:01:35:30:ce:89: 78:fb:53:fd:03:f2:bc:e5:9a:9a:6e:88:df:87:ad: 8f:1d:23:74:b3:7b:c6:11:1a:77:41:84:ed:a3:e7: d2:05:d3:3f:8b:26:4a:ed:4e:e8:ce:ab:0a:9f:3a: dc:ad:fe:95:fb:fb:dc:14:70:4a:7d:35:46:20:12: e9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B1:64:33:6D:00:03:35:C6:53:3E:F2:FA:85:A6:3E:44:9D:FE:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/12e863b8-a466-3f52-bbf0-c497cc958095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:12:98:a1:1e:6c:2d:57:a6:a5:7c:4e:25:a5:9d:ed:ef:0e: da:dc:f7:5a:ae:08:44:c2:29:b2:c0:03:0b:79:a3:e7:85:b1: 1a:28:a7:8f:8c:d6:7c:25:d4:82:30:2b:ae:6d:3b:f2:2d:25: 6c:17:32:0b:fb:1f:27:65:84:74:d9:3b:d0:0e:36:f7:28:9f: fc:ab:03:77:b0:37:8b:a8:4f:b0:86:7c:83:01:4f:4f:59:21: d3:a1:86:33:61:84:41:4d:71:78:53:6f:16:8f:78:23:d8:41: 36:5f:80:18:70:96:da:42:8c:5b:dc:6b:49:a7:4e:cf:22:63: 7b:8c:13:3e:29:3e:99:46:23:01:80:de:f9:e9:37:d3:b4:b3: ed:75:32:91:ed:e0:2c:f6:9c:24:b9:82:94:2c:f9:02:c3:76: 0c:f4:25:d5:48:4d:75:d0:81:9b:76:2b:c5:24:49:8e:70:ea: 23:70:e3:8e:ea:7b:84:71:5a:f4:62:70:14:bd:4d:09:ed:02: 8d:9d:21:52:ba:e9:f0:6a:88:be:81:1b:7a:be:c3:b4:4b:fe: a0:78:cd:79:2a:bf:8b:b2:30:58:59:7d:7b:5d:52:97:86:d1: d1:8c:c8:12:21:ae:f1:16:8f:bb:25:6e:54:17:27:51:8f:f5: c4:5c:8d:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+XF846IfxVJRSkZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTIyMTAxNTEyMDAwMFoXDTMwMDMwNjA1MDAwMFowLzEtMCsGA1UEAxMk ZTg0ZDUxMDktNDhhYy00MmJkLWFhOGQtOGE5OTA1ZjE5NmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyUUJ3AxJYDsr899qFu0aCi4Hc1KawnEC468 XbHMWK4ZYph2xWLZEPr98M+CHUV0VdkM/j3EIaGSOANX2+lDe/KoT7qtFH4f1LC/ ZOsInaKVDGiSKNbmYHO+X5apW50RIhNDeg+NDOcJnpZTrYc7ZEFLqdTz5B8HTdrQ /RDOLkprA4Lztvsi29TvToBWTWrhoUb3ZybL6GlK97S2Wyl3Uky8a/CG2SRKE5WZ GAyrImkywyFuzWp+v+5R367CATUwzol4+1P9A/K85Zqabojfh62PHSN0s3vGERp3 QYTto+fSBdM/iyZK7U7ozqsKnzrcrf6V+/vcFHBKfTVGIBLpGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyxZDNtAAM1xlM+8vqFpj5Enf5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTJlODYzYjgtYTQ2Ni0z ZjUyLWJiZjAtYzQ5N2NjOTU4MDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoSmKEebC1XpqV8TiWlne3vDtrc91quCETCKbLAAwt5o+eFsRoop4+M 1nwl1IIwK65tO/ItJWwXMgv7HydlhHTZO9AONvcon/yrA3ewN4uoT7CGfIMBT09Z IdOhhjNhhEFNcXhTbxaPeCPYQTZfgBhwltpCjFvca0mnTs8iY3uMEz4pPplGIwGA 3vnpN9O0s+11MpHt4Cz2nCS5gpQs+QLDdgz0JdVITXXQgZt2K8UkSY5w6iNw447q e4RxWvRicBS9TQntAo2dIVK66fBqiL6BG3q+w7RL/qB4zXkqv4uyMFhZfXtdUpeG 0dGMyBIhrvEWj7slblQXJ1GP9cRcje8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:20 2025 by rpki-client