$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b330196c-6f21-379d-b6e0-7f192e1dd93e.roa File: b330196c-6f21-379d-b6e0-7f192e1dd93e.roa (raw, json) Hash identifier: 47fIfAJ9VFohv+n9iys3FEmhEdS2873BQXElVTuV7MI= Subject key identifier: B2:02:15:81:9F:71:54:23:BB:8F:27:14:81:6D:20:9B:AC:87:3E:A5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584944694FB4F4B45E0250F2C400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b330196c-6f21-379d-b6e0-7f192e1dd93e.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 8069 IP address blocks: 52.122.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4f:b4:f4:b4:5e:02:50:f2:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=dce6032b-3f44-4242-8135-2962103551b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:7f:51:0b:b7:ce:98:0f:e8:dd:f7:99:6a: 09:a1:04:b1:18:e4:05:7a:3a:d4:ae:a4:55:35:ca: ed:3a:f9:23:7b:ff:eb:05:2b:1e:5e:0f:50:dd:45: 2e:2e:c5:1d:4a:21:21:0d:ad:f0:f4:af:81:ee:1c: 64:27:bc:9c:3c:3b:33:e4:34:40:9f:e0:ec:43:a3: dd:8c:56:d5:35:6b:b6:97:24:bb:3a:34:20:f0:d8: 09:6c:41:22:5c:51:ec:aa:9c:c4:34:bd:2b:73:02: 19:7e:27:56:9a:02:eb:71:36:6a:84:c4:a7:c4:4d: 9e:c7:4a:dd:4a:39:0f:e4:34:3f:c3:6b:63:89:ab: 97:1c:54:1d:14:d9:05:c5:ea:2b:54:35:95:a4:02: e6:c4:37:e8:ad:ef:d0:94:d7:fa:5f:89:34:6a:95: 91:93:2c:64:59:56:6e:03:69:db:e9:e8:87:d3:49: f1:ec:68:13:0a:14:34:0a:36:48:98:ab:e6:f8:94: c5:f3:02:7d:a5:71:b8:69:0f:ad:09:17:5d:8d:6f: 68:53:0f:6e:36:37:06:a8:83:7b:77:3c:30:5b:1d: 19:4e:f4:1d:e3:e6:47:da:4f:94:c2:93:b2:85:a4: fa:db:eb:bb:3c:58:ff:6c:4f:fb:00:ea:8a:b4:1f: 1d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:02:15:81:9F:71:54:23:BB:8F:27:14:81:6D:20:9B:AC:87:3E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b330196c-6f21-379d-b6e0-7f192e1dd93e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9a:f1:6b:cc:16:63:a6:c8:15:5c:d7:68:d3:0b:0b:87:e3: 20:6f:c2:23:4c:21:6c:e2:bc:c9:ed:1a:f5:fe:02:cf:e2:64: 9b:c8:ba:c5:08:43:1c:b6:26:be:8d:86:0c:ca:46:fe:22:75: ae:50:79:27:a6:5b:e3:56:12:bd:c2:07:13:88:7b:df:9f:af: 4e:c7:9d:59:8a:ed:bb:f8:e1:14:d3:9c:1e:0d:79:fc:4d:4b: cc:42:2e:01:ea:99:d0:a9:e8:91:b8:47:bd:0c:a4:5c:e0:8a: 8c:81:cd:e7:bf:39:76:07:63:dd:0b:45:17:9c:ae:87:35:ec: 7e:5e:4f:aa:af:02:fd:2e:e1:6a:14:eb:c0:f9:70:39:a3:b2: b1:96:e0:74:a9:05:7e:51:b6:a5:fc:f3:3a:78:41:30:80:ed: 86:e3:c4:d7:92:02:b1:a2:62:87:df:b8:e2:e0:b9:c7:d0:b5: e2:99:bd:5c:cb:e0:19:95:43:b8:69:e7:f8:3c:8a:32:ba:dd: fe:94:26:4f:ff:00:71:9f:9d:4b:db:87:ed:4f:9c:53:51:44: bf:ed:f7:eb:78:31:93:0f:6f:41:00:96:13:71:43:c0:36:8f: 42:e7:19:d3:27:18:bd:fe:02:f1:a5:2d:67:de:89:cc:38:91: 59:9c:da:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaU+09LReAlDyxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZGNlNjAzMmItM2Y0NC00MjQyLTgxMzUtMjk2MjEwMzU1MWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGB/UQu3zpgP6N33mWoJoQSxGOQFejrUrqRV NcrtOvkje//rBSseXg9Q3UUuLsUdSiEhDa3w9K+B7hxkJ7ycPDsz5DRAn+DsQ6Pd jFbVNWu2lyS7OjQg8NgJbEEiXFHsqpzENL0rcwIZfidWmgLrcTZqhMSnxE2ex0rd SjkP5DQ/w2tjiauXHFQdFNkFxeorVDWVpALmxDfore/QlNf6X4k0apWRkyxkWVZu A2nb6eiH00nx7GgTChQ0CjZImKvm+JTF8wJ9pXG4aQ+tCRddjW9oUw9uNjcGqIN7 dzwwWx0ZTvQd4+ZH2k+UwpOyhaT62+u7PFj/bE/7AOqKtB8d1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLICFYGfcVQju48nFIFtIJushz6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjMzMDE5NmMtNmYyMS0z NzlkLWI2ZTAtN2YxOTJlMWRkOTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqa8WvMFmOmyBVc12jTCwuH4yBvwiNMIWzivMntGvX+As/iZJvIusUI Qxy2Jr6NhgzKRv4ida5QeSemW+NWEr3CBxOIe9+fr07HnVmK7bv44RTTnB4NefxN S8xCLgHqmdCp6JG4R70MpFzgioyBzee/OXYHY90LRRecroc17H5eT6qvAv0u4WoU 68D5cDmjsrGW4HSpBX5RtqX88zp4QTCA7YbjxNeSArGiYoffuOLgucfQteKZvVzL 4BmVQ7hp5/g8ijK63f6UJk//AHGfnUvbh+1PnFNRRL/t9+t4MZMPb0EAlhNxQ8A2 j0LnGdMnGL3+AvGlLWfeicw4kVmc2q0= -----END CERTIFICATE-----Generated at Sat Apr 5 09:40:02 2025 by rpki-client