$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa File: f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa (raw, json) Hash identifier: g8j77rqXOD9km+bXqbXkX4z01Xi9u2XXNPYiMvn3Sww= Subject key identifier: 63:7A:7C:10:DA:02:84:22:8B:6F:D2:DE:E3:B4:2A:C2:3B:F4:83:B1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584855D5A3887A699BF2EBB838B0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa Signing time: Thu 26 Dec 2024 14:00:52 +0000 ROA not before: Thu 26 Dec 2024 14:00:52 +0000 ROA not after: Wed 26 Mar 2025 13:00:52 +0000 asID: 8069 IP address blocks: 52.122.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:55:d5:a3:88:7a:69:9b:f2:eb:b8:38:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 26 14:00:52 2024 GMT Not After : Mar 26 13:00:52 2025 GMT Subject: CN=7bd46774-ef44-4a97-961c-2866173da09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:92:43:35:ce:9f:97:44:88:ce:68:9a:c8:bc: a1:3a:ae:0f:63:ba:43:70:15:31:d1:ee:ce:66:ba: e4:15:ec:c9:4b:09:e9:b9:29:c6:aa:3b:f2:d4:12: 9c:b9:ad:bd:7f:00:a2:10:2a:bd:1c:1f:a7:da:a5: 45:44:dc:6a:9a:3a:71:b7:c4:bb:4f:1a:33:78:d8: bf:7c:48:0e:d8:47:44:f6:24:eb:f1:d6:50:eb:f1: 8b:6b:dc:1d:14:a7:48:c0:12:3a:10:9d:a2:b0:94: 2b:64:38:c7:cf:24:b1:04:f5:fb:f0:79:23:b6:a0: 79:97:16:c4:cf:e9:92:ba:32:96:cd:77:fd:56:89: 34:e6:37:8d:dc:8c:26:90:1e:e4:ba:55:75:92:cf: b9:4b:d2:a0:85:43:86:ab:41:3b:4b:34:af:b1:10: d0:ce:c8:bb:11:bd:03:f9:66:09:f9:8b:0a:76:1c: 46:d1:fb:ff:16:1a:80:c0:a6:7e:23:29:93:31:15: 11:4e:46:61:cd:0c:72:7c:aa:4c:a6:aa:f3:4f:f9: 1e:5b:0d:c2:e3:69:c9:27:c0:a9:57:3a:b6:9c:cd: 0d:9b:0d:66:60:dc:39:28:6f:86:0c:96:a5:bd:97: e7:11:5a:19:ef:40:5f:35:8f:40:be:de:66:01:10: 94:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7A:7C:10:DA:02:84:22:8B:6F:D2:DE:E3:B4:2A:C2:3B:F4:83:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f5e14638-02d1-3529-bdc6-afa4c7386d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:fd:7e:ac:39:7c:7a:01:9a:a8:2c:23:10:78:c7:0c:e9:eb: 61:60:6c:52:61:4f:61:c5:57:6e:14:66:a3:7e:1e:02:1a:d2: 38:e0:1e:5b:f0:d9:16:db:29:28:72:f7:61:5e:0e:a1:eb:21: ca:b9:7d:5c:5a:26:2f:5f:1d:ef:05:5d:34:dc:58:b2:af:75: 76:2a:3f:36:0e:44:a6:44:60:ef:c8:3b:c7:a6:ff:b1:99:e6: c1:d6:34:64:dd:65:16:9b:fb:c7:38:8d:34:0a:69:73:2f:81: 89:5f:43:8f:7f:a1:b7:60:92:92:1e:f3:ac:f3:0c:d5:fe:87: 39:ef:f3:a2:77:f9:c4:d4:89:52:17:7a:6e:e4:41:dd:ab:96: ef:b6:9f:67:9b:c5:53:ef:78:38:8d:23:6a:21:e3:4d:d1:fa: 60:45:d8:c9:44:3d:7c:49:0f:ee:7e:d2:b5:38:1f:ca:e5:5a: 58:7e:1f:cf:43:73:20:71:5c:92:aa:04:87:e2:fe:76:cd:22: f9:e7:42:ad:9e:72:30:d5:0b:4f:92:f1:d9:5b:a4:56:fe:e6: 75:dd:62:e4:92:ba:42:fc:23:4d:80:d4:fe:e9:67:c0:82:6d: 5c:f0:ce:fe:3f:e3:ae:62:d7:17:11:29:88:e6:db:b1:0c:46: 5e:c0:ab:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1aOIemmb8uu4OLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk N2JkNDY3NzQtZWY0NC00YTk3LTk2MWMtMjg2NjE3M2RhMDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5JDNc6fl0SIzmiayLyhOq4PY7pDcBUx0e7O ZrrkFezJSwnpuSnGqjvy1BKcua29fwCiECq9HB+n2qVFRNxqmjpxt8S7TxozeNi/ fEgO2EdE9iTr8dZQ6/GLa9wdFKdIwBI6EJ2isJQrZDjHzySxBPX78HkjtqB5lxbE z+mSujKWzXf9Vok05jeN3IwmkB7kulV1ks+5S9KghUOGq0E7SzSvsRDQzsi7Eb0D +WYJ+YsKdhxG0fv/FhqAwKZ+IymTMRURTkZhzQxyfKpMpqrzT/keWw3C42nJJ8Cp Vzq2nM0Nmw1mYNw5KG+GDJalvZfnEVoZ70BfNY9Avt5mARCUPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGN6fBDaAoQii2/S3uO0KsI79IOxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjVlMTQ2MzgtMDJkMS0z NTI5LWJkYzYtYWZhNGM3Mzg2ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDNHp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr9fqw5fHoBmqgsIxB4xwzp62FgbFJhT2HFV24UZqN+HgIa0jjgHlvw 2RbbKShy92FeDqHrIcq5fVxaJi9fHe8FXTTcWLKvdXYqPzYORKZEYO/IO8em/7GZ 5sHWNGTdZRab+8c4jTQKaXMvgYlfQ49/obdgkpIe86zzDNX+hznv86J3+cTUiVIX em7kQd2rlu+2n2ebxVPveDiNI2oh403R+mBF2MlEPXxJD+5+0rU4H8rlWlh+H89D cyBxXJKqBIfi/nbNIvnnQq2ecjDVC0+S8dlbpFb+5nXdYuSSukL8I02A1P7pZ8CC bVzwzv4/465i1xcRKYjm27EMRl7Aq9Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:52 2025 by rpki-client