$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ac9491f-6036-37fe-816b-d57cc66a212f.roa File: 4ac9491f-6036-37fe-816b-d57cc66a212f.roa (raw, json) Hash identifier: bKazC+o47bApSK1Bvd0GHi9V9Eyp1lE5TQ7YOnD7rC4= Subject key identifier: 65:16:D5:A5:14:63:1B:33:F7:09:C0:22:37:17:8E:54:A9:59:4A:21 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848653044D44765F734F7B93F00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ac9491f-6036-37fe-816b-d57cc66a212f.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 8069 IP address blocks: 52.122.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:44:d4:47:65:f7:34:f7:b9:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=49e69785-3ec5-4e2d-952b-def872b71494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:ea:1f:69:9b:2c:34:ce:44:ce:94:24:47: ca:ce:bc:36:a4:24:e3:69:68:63:14:fa:20:7a:ce: 67:0c:7e:f9:ee:d2:3a:e0:2d:20:56:c7:3a:64:b1: 3a:41:53:90:25:97:9f:92:34:51:87:b4:e3:cf:38: b1:d8:2d:4e:c9:70:47:2c:c4:3b:47:bf:51:e0:ea: 20:37:62:05:ca:15:34:eb:a0:dd:8a:4e:f1:98:ed: 05:cb:d3:df:31:79:d7:9d:71:d6:ee:50:a3:e3:c1: ab:0c:38:ef:fc:f4:7f:87:ed:3f:19:17:1c:32:87: 49:0e:02:8e:9d:9c:8b:4c:6e:4b:0e:4c:e0:cd:1c: 28:a1:6e:d7:3c:b3:d9:80:2c:c5:b3:ad:47:94:4c: dc:41:ce:ac:bd:35:0b:24:b2:a5:42:72:da:dc:7d: 2a:4b:82:3c:af:46:33:85:a4:5f:50:9c:39:ab:03: 29:17:b0:1c:8d:c5:05:f6:3c:64:02:a2:08:c3:7c: 50:c7:fb:8b:55:c0:be:5b:1a:e0:86:14:c2:79:b8: 9b:7d:59:21:fd:0d:cf:d1:29:7b:14:e1:fe:95:c7: 86:1f:eb:11:c8:18:e7:7c:ad:d9:21:fb:fe:8a:ff: f9:29:66:9b:d6:99:9b:a4:7d:bf:dc:bd:be:08:5d: 62:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:16:D5:A5:14:63:1B:33:F7:09:C0:22:37:17:8E:54:A9:59:4A:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4ac9491f-6036-37fe-816b-d57cc66a212f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:34:53:c3:0c:70:03:ef:bd:b8:fb:79:26:31:aa:f7:26:ee: 83:a5:a0:86:80:17:dd:93:4e:00:dd:7b:15:89:0c:d9:e8:91: 5e:61:f8:43:2e:a4:c3:16:04:23:05:02:a2:f9:df:d2:9d:d0: ae:99:00:da:bd:4c:4d:4a:81:f9:0b:50:89:30:61:3c:d5:86: 93:70:aa:39:45:01:49:50:ad:fe:66:63:64:f2:76:60:79:c5: 04:6a:6c:08:9a:25:98:1f:4d:da:75:a3:8b:9a:48:93:cb:98: 4d:67:39:a7:7b:37:f5:13:ab:86:2c:a7:2f:a0:df:6d:e9:97: f2:5f:e5:cb:93:48:1a:f8:db:16:1d:80:06:00:d3:98:ef:43: f5:89:a8:7b:7a:fd:64:ef:b9:a3:75:6b:1a:9b:06:a0:65:e9: 24:89:92:86:14:ef:59:9c:f4:e1:1c:86:4c:11:d6:c9:30:e7: bd:29:b1:b7:7c:15:df:32:78:99:92:25:24:61:80:7a:44:f1: 7a:e8:40:7d:7e:04:1b:75:a1:9c:dc:67:da:23:0c:44:2f:a5: 5d:a2:29:0e:f3:db:6e:ef:74:cc:8e:33:af:f6:1e:2a:90:36: 30:bf:1b:af:f4:82:c4:eb:ed:fc:0a:88:49:d7:23:6f:5f:a0: 7b:56:22:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMETUR2X3NPe5PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk NDllNjk3ODUtM2VjNS00ZTJkLTk1MmItZGVmODcyYjcxNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq7qH2mbLDTORM6UJEfKzrw2pCTjaWhjFPog es5nDH757tI64C0gVsc6ZLE6QVOQJZefkjRRh7Tjzzix2C1OyXBHLMQ7R79R4Oog N2IFyhU066Ddik7xmO0Fy9PfMXnXnXHW7lCj48GrDDjv/PR/h+0/GRccModJDgKO nZyLTG5LDkzgzRwooW7XPLPZgCzFs61HlEzcQc6svTULJLKlQnLa3H0qS4I8r0Yz haRfUJw5qwMpF7AcjcUF9jxkAqIIw3xQx/uLVcC+WxrghhTCebibfVkh/Q3P0Sl7 FOH+lceGH+sRyBjnfK3ZIfv+iv/5KWab1pmbpH2/3L2+CF1iJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUW1aUUYxsz9wnAIjcXjlSpWUohMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGFjOTQ5MWYtNjAzNi0z N2ZlLTgxNmItZDU3Y2M2NmEyMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHq0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA0U8MMcAPvvbj7eSYxqvcm7oOloIaAF92TTgDdexWJDNnokV5h+EMu pMMWBCMFAqL539Kd0K6ZANq9TE1KgfkLUIkwYTzVhpNwqjlFAUlQrf5mY2TydmB5 xQRqbAiaJZgfTdp1o4uaSJPLmE1nOad7N/UTq4Yspy+g323pl/Jf5cuTSBr42xYd gAYA05jvQ/WJqHt6/WTvuaN1axqbBqBl6SSJkoYU71mc9OEchkwR1skw570psbd8 Fd8yeJmSJSRhgHpE8XroQH1+BBt1oZzcZ9ojDEQvpV2iKQ7z227vdMyOM6/2HiqQ NjC/G6/0gsTr7fwKiEnXI29foHtWIoY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:54 2025 by rpki-client