$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f41ae493-596f-3b0d-863e-061030a2e329.roa File: f41ae493-596f-3b0d-863e-061030a2e329.roa (raw, json) Hash identifier: 9ryEv2F/pDgHvKhHhbamPnbu3uYdpUjulAkrGm4ERbA= Subject key identifier: 08:76:A8:63:5A:D8:03:0A:20:87:9D:30:9F:06:B8:A2:CB:EE:90:28 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858486D9060128C944D103378BB80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f41ae493-596f-3b0d-863e-061030a2e329.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 52.122.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:60:12:8c:94:4d:10:33:78:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=7d414561-647f-4851-a5e3-3d07451267d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2d:3e:89:64:a2:1f:c7:74:88:bb:52:d2:07: 1e:b9:bb:4d:68:ea:e4:eb:b1:8c:2e:b6:db:92:33: 5e:54:8a:59:06:ff:99:be:65:7a:81:c4:e9:40:75: 8f:1b:20:e9:d9:60:c3:19:16:32:0d:d3:d3:8e:b6: 7a:10:67:e8:8a:89:c1:78:48:fb:e8:cc:9c:49:61: 63:36:6d:b1:46:cd:29:d1:a4:8b:b3:cb:4d:8a:0c: b4:48:4a:62:e2:de:78:e1:b2:3e:d2:9d:a6:2e:c7: d9:a2:9c:36:7d:8d:43:56:e1:c4:02:46:3f:45:5b: 3e:95:49:78:16:c7:d2:87:21:6d:5e:9c:59:d6:37: 3c:09:4e:01:17:27:20:ca:31:8c:3c:5a:5f:c4:32: 07:1a:4a:b1:d2:34:35:72:4a:6b:50:84:7a:38:a7: f7:29:b9:9b:b4:b1:6c:7e:1c:77:e7:e9:17:fd:52: ff:9a:be:71:95:0d:5d:62:d8:dc:70:68:39:8d:f0: 93:36:72:4c:17:4a:5a:b2:be:68:4d:2a:ab:ce:d8: 95:9e:48:3e:b5:93:57:a4:59:db:c5:b2:98:65:b7: cd:d5:1c:08:bd:95:36:b2:d1:ed:52:32:08:cb:be: 2c:ec:07:f7:36:51:6f:cd:90:a2:05:24:89:16:1c: ae:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:76:A8:63:5A:D8:03:0A:20:87:9D:30:9F:06:B8:A2:CB:EE:90:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f41ae493-596f-3b0d-863e-061030a2e329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:cd:68:bc:f6:3f:df:3a:b8:dc:b0:06:36:03:c5:56:85:85: 17:19:c6:9f:e2:19:a8:9e:74:7f:9f:0e:a9:dd:7e:8e:69:e7: 17:31:4b:39:50:cb:2a:d9:94:4a:99:e9:e0:8d:a3:6c:ef:3d: 37:6a:33:dc:35:0c:9e:1f:46:e3:38:82:ab:4a:37:f2:8f:d7: b2:d3:1c:d8:92:34:05:32:b4:5f:b3:c7:7b:1c:16:b2:3c:c7: ed:e2:a8:46:11:74:86:f9:03:49:58:7b:68:56:05:82:3f:bd: 47:16:7d:89:ae:a4:1f:d2:c3:af:f4:d3:4a:78:b8:a3:8a:5c: d0:36:17:17:60:c5:26:ca:b7:51:59:9e:64:43:93:8f:74:55: d0:26:4f:2b:42:5b:63:d7:2b:b7:c9:a3:ae:be:a2:f4:e2:3b: d5:8d:13:e8:c2:0b:b9:e1:35:1e:3e:7d:a1:b7:09:d3:ce:60: 14:25:87:23:8f:af:ed:97:6f:49:61:22:1e:a7:93:ef:e4:84: f0:da:f7:6f:73:2b:e8:9d:b7:ff:72:86:58:fc:87:58:35:06: 20:c7:8d:16:4e:ac:80:59:48:d0:44:12:29:a5:4b:6c:16:65: eb:f8:b7:32:e8:c5:b3:9f:31:a3:93:8a:34:e7:43:55:73:eb: c8:a9:8c:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkGASjJRNEDN4u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk N2Q0MTQ1NjEtNjQ3Zi00ODUxLWE1ZTMtM2QwNzQ1MTI2N2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri0+iWSiH8d0iLtS0gceubtNaOrk67GMLrbb kjNeVIpZBv+ZvmV6gcTpQHWPGyDp2WDDGRYyDdPTjrZ6EGfoionBeEj76MycSWFj Nm2xRs0p0aSLs8tNigy0SEpi4t544bI+0p2mLsfZopw2fY1DVuHEAkY/RVs+lUl4 FsfShyFtXpxZ1jc8CU4BFycgyjGMPFpfxDIHGkqx0jQ1ckprUIR6OKf3KbmbtLFs fhx35+kX/VL/mr5xlQ1dYtjccGg5jfCTNnJMF0pasr5oTSqrztiVnkg+tZNXpFnb xbKYZbfN1RwIvZU2stHtUjIIy74s7Af3NlFvzZCiBSSJFhyugwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAh2qGNa2AMKIIedMJ8GuKLL7pAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjQxYWU0OTMtNTk2Zi0z YjBkLTg2M2UtMDYxMDMwYTJlMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXNaLz2P986uNywBjYDxVaFhRcZxp/iGaiedH+fDqndfo5p5xcxSzlQ yyrZlEqZ6eCNo2zvPTdqM9w1DJ4fRuM4gqtKN/KP17LTHNiSNAUytF+zx3scFrI8 x+3iqEYRdIb5A0lYe2hWBYI/vUcWfYmupB/Sw6/000p4uKOKXNA2FxdgxSbKt1FZ nmRDk490VdAmTytCW2PXK7fJo66+ovTiO9WNE+jCC7nhNR4+faG3CdPOYBQlhyOP r+2Xb0lhIh6nk+/khPDa929zK+idt/9yhlj8h1g1BiDHjRZOrIBZSNBEEimlS2wW Zev4tzLoxbOfMaOTijTnQ1Vz68ipjD4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:34 2025 by rpki-client