$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa File: d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa (raw, json) Hash identifier: afnATWAETcsMYEmZrWPNolHno/E7hxrK/GEkbuYSpoI= Subject key identifier: 84:2E:53:0E:51:90:9C:00:1B:42:E8:CB:67:51:50:EF:EF:7D:4B:CF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584867FAEC905D0304DFC3A384C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa Signing time: Thu 02 Jan 2025 02:00:39 +0000 ROA not before: Thu 02 Jan 2025 02:00:39 +0000 ROA not after: Wed 02 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 52.122.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:67:fa:ec:90:5d:03:04:df:c3:a3:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 2 02:00:39 2025 GMT Not After : Apr 2 01:00:39 2025 GMT Subject: CN=a49111dc-15a2-4ae6-8aeb-884e4b65c41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:22:3f:4e:3c:09:ce:4d:45:5d:00:5c:3a: 74:d4:6d:3d:62:26:68:70:d2:dc:af:df:8e:5e:17: 0f:07:df:5e:2c:1b:ee:31:28:28:83:b7:87:89:5b: 66:33:d5:e2:f2:2b:fc:bb:57:17:69:e2:f3:18:2a: 9a:6b:7d:8b:26:0b:48:f5:b0:30:a6:f1:e3:47:5e: bb:5f:2b:07:2c:c7:84:cb:ef:18:09:8b:ce:52:b7: 37:d4:e6:48:de:be:ba:b3:65:23:85:31:80:eb:52: ac:ba:83:a5:16:54:85:eb:41:5f:6d:f6:ba:fa:a5: 6c:9e:8b:0d:d0:bb:91:17:7b:02:32:05:28:40:a1: 66:68:a0:68:89:68:d3:1b:95:db:cd:97:d8:3f:34: fb:f0:6b:51:9e:f5:e0:95:69:79:5e:19:57:9a:57: 80:d4:d6:d5:a7:f1:a8:d6:82:79:3f:71:92:f0:7a: 6a:6f:83:29:45:61:2f:07:41:88:93:a7:2c:80:43: e0:40:e7:54:32:dd:c0:07:59:13:58:e2:78:de:f2: 5e:5a:9d:db:8f:19:f0:37:4b:08:6f:29:7c:4a:09: 79:ae:5f:64:11:08:94:a7:7c:2e:bf:42:e2:b0:e3: 7b:24:1a:2c:29:8d:77:41:fa:f2:d4:66:62:3e:13: 34:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2E:53:0E:51:90:9C:00:1B:42:E8:CB:67:51:50:EF:EF:7D:4B:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d157ea2c-b07d-32fb-bcfe-40c56f00b0de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:b7:69:fa:00:b2:75:14:47:7d:2b:93:c5:52:aa:6c:fd:a6: 6e:5c:b4:08:eb:c2:00:0e:eb:65:68:5f:3d:ad:ed:68:af:fc: d9:fe:da:b0:bd:eb:fb:08:38:36:50:d5:dc:86:37:e0:26:b8: 19:c3:d2:92:ec:c5:89:d2:72:08:08:a5:a9:99:d9:47:d0:5b: 47:24:b5:5d:36:6d:66:b9:bd:f1:26:4e:b8:84:1f:1f:b0:b7: 7f:55:04:b3:f6:37:97:70:52:60:4b:fd:1c:c2:d4:79:fd:a8: 98:b9:73:a3:37:e5:4b:e0:5e:31:69:59:61:be:71:28:39:7a: f8:ba:4f:49:6b:e8:9b:95:cf:e5:02:fb:ad:20:ac:42:5c:90: 40:fd:96:90:a6:06:e0:75:40:52:d8:fd:26:e2:0f:e2:d4:7d: c1:47:12:37:aa:5e:91:19:b5:3f:ec:96:8c:53:0b:d9:8e:04: e9:28:67:a2:9c:36:6f:51:db:a1:bd:23:8c:83:84:76:73:76: 5c:fb:ee:6c:78:c5:00:59:e0:4b:93:ce:e8:e2:4c:50:d0:e5: bc:ce:0b:0a:97:ce:86:f8:07:87:95:09:15:54:1b:99:1e:40: 7e:a1:e6:24:99:93:ea:20:9f:3c:8d:5f:73:ec:40:2b:b8:cd: 66:2c:e0:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhn+uyQXQME38OjhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEwMjAyMDAzOVoXDTI1MDQwMjAxMDAzOVowLzEtMCsGA1UEAxMk YTQ5MTExZGMtMTVhMi00YWU2LThhZWItODg0ZTRiNjVjNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoMiP048Cc5NRV0AXDp01G09YiZocNLcr9+O XhcPB99eLBvuMSgog7eHiVtmM9Xi8iv8u1cXaeLzGCqaa32LJgtI9bAwpvHjR167 XysHLMeEy+8YCYvOUrc31OZI3r66s2UjhTGA61KsuoOlFlSF60Ffbfa6+qVsnosN 0LuRF3sCMgUoQKFmaKBoiWjTG5XbzZfYPzT78GtRnvXglWl5XhlXmleA1NbVp/Go 1oJ5P3GS8Hpqb4MpRWEvB0GIk6csgEPgQOdUMt3AB1kTWOJ43vJeWp3bjxnwN0sI byl8Sgl5rl9kEQiUp3wuv0LisON7JBosKY13Qfry1GZiPhM0KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQuUw5RkJwAG0Loy2dRUO/vfUvPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDE1N2VhMmMtYjA3ZC0z MmZiLWJjZmUtNDBjNTZmMDBiMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKi3afoAsnUUR30rk8VSqmz9pm5ctAjrwgAO62VoXz2t7Wiv/Nn+2rC9 6/sIODZQ1dyGN+AmuBnD0pLsxYnScggIpamZ2UfQW0cktV02bWa5vfEmTriEHx+w t39VBLP2N5dwUmBL/RzC1Hn9qJi5c6M35UvgXjFpWWG+cSg5evi6T0lr6JuVz+UC +60grEJckED9lpCmBuB1QFLY/SbiD+LUfcFHEjeqXpEZtT/sloxTC9mOBOkoZ6Kc Nm9R26G9I4yDhHZzdlz77mx4xQBZ4EuTzujiTFDQ5bzOCwqXzob4B4eVCRVUG5ke QH6h5iSZk+ognzyNX3PsQCu4zWYs4NQ= -----END CERTIFICATE-----Generated at Fri Mar 14 09:17:55 2025 by rpki-client