$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24153ac8-c42a-3350-ba03-71aa1847a666.roa File: 24153ac8-c42a-3350-ba03-71aa1847a666.roa (raw, json) Hash identifier: +GysU6msdNYatMUI3GMaxedhtGvZ0uZJFSRgBd38TV0= Subject key identifier: 19:90:E2:15:03:85:5D:CF:86:C2:7D:A1:31:83:29:89:C7:0E:85:28 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584AF686900B01BDAF9A4E1B8000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24153ac8-c42a-3350-ba03-71aa1847a666.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 8069 IP address blocks: 52.122.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:90:0b:01:bd:af:9a:4e:1b:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=0d21d082-f066-4764-bb36-f613be5be0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:3c:93:8c:e5:58:a6:35:46:02:37:d6:82: 39:64:df:2a:d4:2e:8a:70:ce:5b:6f:e5:d2:a5:b4: 9e:0d:7e:0c:7f:c5:d9:5f:08:8e:be:ff:5a:a0:dd: d4:3d:df:f6:0a:39:9b:3f:b5:60:0b:1d:01:03:9e: bc:ac:ef:a3:7e:0f:03:24:de:7a:6f:2a:e1:c3:38: 4d:5b:66:bb:c5:b0:39:c7:8f:61:6b:05:6d:57:b0: 7c:7e:a4:3b:5a:5f:b3:90:8f:3d:a8:77:c9:a9:60: 88:bd:b5:e9:37:99:34:c6:d0:e9:b6:55:82:fa:0b: 04:63:ff:2c:8c:d0:14:35:42:8e:af:ac:51:f7:e8: f0:81:d5:8e:81:cf:05:d7:a0:49:a0:a9:7f:62:e0: 23:91:68:ce:6f:f4:c9:cf:58:e6:c2:e3:5b:8e:10: 99:2f:1b:89:ea:7c:2b:c0:4d:bf:27:24:2b:37:69: d8:9f:e9:eb:30:01:7f:fe:00:0a:8c:fa:b2:44:ab: 72:34:bb:98:e2:9f:b5:4a:09:34:8a:e5:d9:cd:ab: 6a:c5:9f:e9:aa:c9:a8:1d:95:65:15:77:97:25:6c: ef:d3:75:ff:83:ca:2c:b9:8b:b3:9a:6f:e4:d0:b9: a0:8f:3d:42:a0:dc:6b:f6:ea:8f:07:c3:33:ac:45: b2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:90:E2:15:03:85:5D:CF:86:C2:7D:A1:31:83:29:89:C7:0E:85:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24153ac8-c42a-3350-ba03-71aa1847a666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:33:2d:cd:81:db:58:fe:9f:25:b4:a0:c2:34:9b:c5:4e:ff: 7c:02:3b:1b:5f:5e:d2:4b:08:77:83:30:84:16:c4:37:94:6e: f5:2e:0a:e5:e8:10:c0:72:cf:b6:04:a7:38:f5:b2:8a:1f:09: 9a:7b:13:3b:a0:bb:00:f3:5c:9c:ed:21:ca:45:fe:bb:2c:d9: 77:bf:7a:ae:a7:59:d0:14:7a:89:ef:f5:31:19:ec:d6:8e:f3: da:f6:38:00:a1:39:3c:4e:3c:47:bf:88:73:48:33:1b:3c:ff: 0c:aa:98:d4:5e:a5:91:d8:9d:0c:53:db:ab:aa:ca:6c:58:db: e6:c5:4f:b3:56:bf:a9:53:a4:11:44:19:e8:b5:60:ac:0e:7c: 04:2d:ad:df:05:67:c4:1b:06:e7:17:60:86:97:d3:9b:87:b5: 47:55:e6:c3:4f:04:c1:37:fb:09:b9:bc:78:22:c1:c0:ad:f5: f8:2b:2e:bb:0d:00:dd:d9:7d:78:71:5c:d4:94:03:39:f3:1d: 36:5e:b8:38:dd:b0:75:65:ce:5b:8a:50:4e:d4:12:58:70:70: 39:09:d6:1f:fb:7b:84:17:05:43:8b:1b:1c:9b:fb:83:ad:20: 9d:ec:51:ed:3e:69:fb:b7:54:8e:90:72:a3:3f:63:37:2f:bd: e4:a2:dc:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpALAb2vmk4bgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk MGQyMWQwODItZjA2Ni00NzY0LWJiMzYtZjYxM2JlNWJlMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/k8k4zlWKY1RgI31oI5ZN8q1C6KcM5bb+XS pbSeDX4Mf8XZXwiOvv9aoN3UPd/2CjmbP7VgCx0BA568rO+jfg8DJN56byrhwzhN W2a7xbA5x49hawVtV7B8fqQ7Wl+zkI89qHfJqWCIvbXpN5k0xtDptlWC+gsEY/8s jNAUNUKOr6xR9+jwgdWOgc8F16BJoKl/YuAjkWjOb/TJz1jmwuNbjhCZLxuJ6nwr wE2/JyQrN2nYn+nrMAF//gAKjPqyRKtyNLuY4p+1Sgk0iuXZzatqxZ/pqsmoHZVl FXeXJWzv03X/g8osuYuzmm/k0Lmgjz1CoNxr9uqPB8MzrEWyJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmQ4hUDhV3PhsJ9oTGDKYnHDoUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjQxNTNhYzgtYzQyYS0z MzUwLWJhMDMtNzFhYTE4NDdhNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEzLc2B21j+nyW0oMI0m8VO/3wCOxtfXtJLCHeDMIQWxDeUbvUuCuXo EMByz7YEpzj1soofCZp7EzuguwDzXJztIcpF/rss2Xe/eq6nWdAUeonv9TEZ7NaO 89r2OAChOTxOPEe/iHNIMxs8/wyqmNRepZHYnQxT26uqymxY2+bFT7NWv6lTpBFE Gei1YKwOfAQtrd8FZ8QbBucXYIaX05uHtUdV5sNPBME3+wm5vHgiwcCt9fgrLrsN AN3ZfXhxXNSUAznzHTZeuDjdsHVlzluKUE7UElhwcDkJ1h/7e4QXBUOLGxyb+4Ot IJ3sUe0+afu3VI6QcqM/YzcvveSi3GQ= -----END CERTIFICATE-----Generated at Tue Aug 26 06:48:16 2025 by rpki-client