$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa File: f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa (raw, json) Hash identifier: WmLohcuNeMZ8hAiwA1xl9+HNNbTESJhJS3hCV5WLonQ= Subject key identifier: F2:63:92:51:FC:BE:5D:DB:40:7D:89:59:7D:70:16:BE:F6:BF:E4:6F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849350EB2692C5E81EAB3AE6708 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 8069 IP address blocks: 52.122.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:b2:69:2c:5e:81:ea:b3:ae:67:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=68ad42ab-80da-4547-ae86-4d3abce6487a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a9:95:eb:88:f6:3d:f6:38:45:c3:f9:88:21: f9:a8:80:af:1b:f4:be:15:ff:af:1f:32:1a:37:86: 51:63:a4:38:d5:6f:04:b1:5b:cd:a3:5d:6a:e3:55: 8a:08:f2:e7:a4:ab:b2:08:40:5d:c3:e8:94:2b:72: f9:57:2c:dc:f8:bb:af:ce:06:0f:b8:5e:3a:7f:a4: 24:08:a5:e2:91:39:85:0d:2d:b2:60:f5:1b:d0:22: ac:88:06:5f:69:12:4f:f4:98:23:e4:21:51:f1:cc: bd:d0:77:60:4d:74:72:73:8b:cb:db:95:ba:4a:66: 31:7d:f3:62:3b:fc:c1:58:df:24:95:66:da:7c:d0: 3e:40:a6:f8:7b:9a:a5:e5:9b:77:78:2f:4d:f5:8e: e8:c3:46:f9:de:c7:fc:59:69:2d:d9:6f:05:a0:80: 2e:6a:f8:6b:ce:84:04:2b:a8:1b:34:dc:a5:2c:3b: 84:a1:aa:5b:07:f1:f8:89:c7:cd:e3:1a:71:b5:a5: 55:02:a3:90:80:8d:7b:f7:62:01:cb:13:c4:15:26: a7:82:88:54:64:17:a8:56:94:17:6f:cc:32:af:b3: 61:87:db:5c:61:3c:66:53:42:43:fd:eb:90:26:e4: 88:66:02:c2:f9:63:8f:66:79:de:15:c9:23:aa:f0: 77:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:63:92:51:FC:BE:5D:DB:40:7D:89:59:7D:70:16:BE:F6:BF:E4:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:6f:aa:fa:01:48:87:8e:d7:7b:ed:68:b2:89:2c:83:41:99: e4:0e:87:27:92:88:84:96:58:a5:d1:5c:ea:33:95:83:e4:93: 9e:ad:e0:62:77:1c:7e:5a:62:42:17:7e:ee:64:0f:c2:45:a1: a0:cc:9c:a7:79:81:53:1e:cb:97:41:77:9f:01:93:47:1b:4f: 8e:86:50:91:c4:fa:40:37:c7:16:5a:26:6f:b1:43:57:96:6c: 2b:b7:7c:00:e9:e9:da:c4:5c:1d:67:4b:41:00:32:06:13:69: 7c:e3:63:35:b0:10:ce:14:1c:67:3c:1e:59:0a:45:b0:be:e0: 73:26:a7:8f:67:60:7e:84:af:c3:b9:5f:ec:fd:a5:9f:ee:9d: ac:9c:2e:77:88:b6:fc:32:38:12:0f:18:41:aa:90:35:9c:30: d5:4b:10:cf:57:f3:42:1a:0d:f3:60:d3:9c:8a:31:65:04:0b: f9:d8:4f:a4:89:71:b2:ab:19:78:43:f7:2e:30:30:bd:05:bb: 18:19:3d:76:83:8d:ef:3e:1a:b0:0b:85:d8:46:3a:c7:74:e0: ba:77:b8:4d:c1:2e:2d:a7:b8:2c:b5:62:a4:a4:26:81:e3:54: 25:a6:c1:77:78:c1:7c:33:f1:74:82:55:49:29:66:c4:1a:60: 3a:6a:28:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrJpLF6B6rOuZwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NjhhZDQyYWItODBkYS00NTQ3LWFlODYtNGQzYWJjZTY0ODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmamV64j2PfY4RcP5iCH5qICvG/S+Ff+vHzIa N4ZRY6Q41W8EsVvNo11q41WKCPLnpKuyCEBdw+iUK3L5Vyzc+LuvzgYPuF46f6Qk CKXikTmFDS2yYPUb0CKsiAZfaRJP9Jgj5CFR8cy90HdgTXRyc4vL25W6SmYxffNi O/zBWN8klWbafNA+QKb4e5ql5Zt3eC9N9Y7ow0b53sf8WWkt2W8FoIAuavhrzoQE K6gbNNylLDuEoapbB/H4icfN4xpxtaVVAqOQgI1792IByxPEFSangohUZBeoVpQX b8wyr7Nhh9tcYTxmU0JD/euQJuSIZgLC+WOPZnneFckjqvB3XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJjklH8vl3bQH2JWX1wFr72v+RvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjVlMTQ2MzgtMDJkMS0z NTI5LWJkYzYtYWZhNGM3Mzg2ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDNHp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtvqvoBSIeO13vtaLKJLINBmeQOhyeSiISWWKXRXOozlYPkk56t4GJ3 HH5aYkIXfu5kD8JFoaDMnKd5gVMey5dBd58Bk0cbT46GUJHE+kA3xxZaJm+xQ1eW bCu3fADp6drEXB1nS0EAMgYTaXzjYzWwEM4UHGc8HlkKRbC+4HMmp49nYH6Er8O5 X+z9pZ/unaycLneItvwyOBIPGEGqkDWcMNVLEM9X80IaDfNg05yKMWUEC/nYT6SJ cbKrGXhD9y4wML0FuxgZPXaDje8+GrALhdhGOsd04Lp3uE3BLi2nuCy1YqSkJoHj VCWmwXd4wXwz8XSCVUkpZsQaYDpqKM0= -----END CERTIFICATE-----Generated at Thu Apr 17 09:01:55 2025 by rpki-client