$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f69bfe4-fb1c-3313-a550-442c65dc04e8.roa File: 5f69bfe4-fb1c-3313-a550-442c65dc04e8.roa (raw, json) Hash identifier: kgmHFNkCU+QzPMPIoiyN/JoSDf3HZP8pv3Ge6ZKZzho= Subject key identifier: 7D:88:1D:24:37:FF:EA:FF:89:20:A9:3F:DA:A9:68:15:F5:B9:8F:FA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285841D629E94B2AE176F4C5985C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f69bfe4-fb1c-3313-a550-442c65dc04e8.roa Signing time: Tue 09 May 2023 12:42:12 +0000 ROA not before: Tue 09 May 2023 12:42:12 +0000 ROA not after: Mon 08 Apr 2030 04:00:00 +0000 asID: 8069 IP address blocks: 52.122.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:d6:29:e9:4b:2a:e1:76:f4:c5:98:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: May 9 12:42:12 2023 GMT Not After : Apr 8 04:00:00 2030 GMT Subject: CN=8c6b1d3f-9323-42d6-8ad7-889c81c488ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:60:b3:82:52:c3:d0:fe:66:67:e4:41:4c:9d: 74:60:34:51:c9:1f:ef:04:0c:10:43:86:d8:0f:62: 86:33:62:73:c3:fe:86:d8:26:f0:0d:68:f6:aa:eb: e0:f4:a0:a4:a7:0d:27:47:28:e2:d1:88:40:bf:35: 93:7b:d2:18:be:f8:f9:9b:7d:eb:ea:9a:7f:95:04: 76:29:c0:e3:73:33:02:12:eb:d8:78:6a:ad:d8:bb: ea:38:c9:d4:de:6e:80:42:50:6d:d0:a2:dc:c0:37: 0b:d1:f7:8f:8b:54:c6:79:46:8c:3c:a2:49:13:15: b0:70:c6:72:bf:ad:f8:56:4e:fd:f4:d6:ce:9b:9e: 4b:d0:03:64:0d:a9:bf:87:e9:d5:28:12:d0:e4:05: 6d:6b:30:ac:e0:38:56:f9:e1:20:02:e8:8e:1c:8a: 26:b6:bd:5b:bd:06:d3:a4:8e:74:7c:ac:d3:82:69: 58:9d:80:a9:09:d1:35:d6:a3:f4:48:75:47:52:61: 53:54:14:a9:be:0b:43:f9:f6:76:57:d6:b3:66:ea: 30:cc:18:57:4c:06:56:ea:a1:a7:08:9d:94:0f:22: ec:cf:c7:5b:db:7b:62:28:0c:59:ef:a1:d5:08:a1: be:83:2f:5a:20:4b:33:b8:ed:90:41:09:a2:77:40: 28:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:88:1D:24:37:FF:EA:FF:89:20:A9:3F:DA:A9:68:15:F5:B9:8F:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5f69bfe4-fb1c-3313-a550-442c65dc04e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:32:76:65:58:c1:59:37:75:1e:1b:96:2a:a7:ce:c4:f0:c0: 49:c4:b1:c2:79:13:4e:7c:f3:85:19:35:64:03:68:55:a5:84: 84:7a:85:7e:25:b7:91:7c:32:3a:37:2e:1d:9c:59:fc:25:98: 8e:e4:dc:45:1d:50:4d:ed:b1:b0:c0:df:35:ca:52:d3:a5:7d: c2:b7:b7:5c:40:3d:19:a2:20:35:b3:10:bc:c7:a5:cf:eb:e9: 1d:b5:35:d2:03:30:f0:61:6f:9e:7e:f6:36:6d:29:28:14:ab: b5:a9:83:08:51:30:2e:97:fd:c3:11:69:a8:9c:7d:28:59:48: 75:b5:16:cf:c4:f8:11:c2:6a:e4:ea:08:b5:cb:73:5e:90:1c: 1b:eb:47:fb:ec:e5:51:5a:50:cb:05:95:ba:de:38:27:e0:06: 3f:26:67:45:ee:51:08:ff:30:aa:5d:57:43:29:e1:b0:40:70: 80:20:39:a5:11:e7:5b:1a:dd:3a:47:e4:bc:47:8b:d9:a6:e6: fd:98:8b:e9:fb:e9:00:91:d5:47:d3:03:4a:8e:aa:c6:8e:81: 0b:08:4a:c5:1f:2e:c2:1e:71:35:d7:db:ed:41:62:26:cb:de: 06:87:1d:73:61:97:b7:db:5f:3d:56:c2:49:0d:26:cb:47:f9: 5d:e1:19:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHWKelLKuF29MWYXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTIzMDUwOTEyNDIxMloXDTMwMDQwODA0MDAwMFowLzEtMCsGA1UEAxMk OGM2YjFkM2YtOTMyMy00MmQ2LThhZDctODg5YzgxYzQ4OGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGCzglLD0P5mZ+RBTJ10YDRRyR/vBAwQQ4bY D2KGM2Jzw/6G2CbwDWj2quvg9KCkpw0nRyji0YhAvzWTe9IYvvj5m33r6pp/lQR2 KcDjczMCEuvYeGqt2LvqOMnU3m6AQlBt0KLcwDcL0fePi1TGeUaMPKJJExWwcMZy v634Vk799NbOm55L0ANkDam/h+nVKBLQ5AVtazCs4DhW+eEgAuiOHIomtr1bvQbT pI50fKzTgmlYnYCpCdE11qP0SHVHUmFTVBSpvgtD+fZ2V9azZuowzBhXTAZW6qGn CJ2UDyLsz8db23tiKAxZ76HVCKG+gy9aIEszuO2QQQmid0Ao+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2IHSQ3/+r/iSCpP9qpaBX1uY/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWY2OWJmZTQtZmIxYy0z MzEzLWE1NTAtNDQyYzY1ZGMwNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMydmVYwVk3dR4bliqnzsTwwEnEscJ5E05884UZNWQDaFWlhIR6hX4l t5F8Mjo3Lh2cWfwlmI7k3EUdUE3tsbDA3zXKUtOlfcK3t1xAPRmiIDWzELzHpc/r 6R21NdIDMPBhb55+9jZtKSgUq7WpgwhRMC6X/cMRaaicfShZSHW1Fs/E+BHCauTq CLXLc16QHBvrR/vs5VFaUMsFlbreOCfgBj8mZ0XuUQj/MKpdV0Mp4bBAcIAgOaUR 51sa3TpH5LxHi9mm5v2Yi+n76QCR1UfTA0qOqsaOgQsISsUfLsIecTXX2+1BYibL 3gaHHXNhl7fbXz1WwkkNJstH+V3hGew= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:06 2025 by rpki-client