$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fd19eca7-8757-38b2-8589-014c0ebec590.roa File: fd19eca7-8757-38b2-8589-014c0ebec590.roa (raw, json) Hash identifier: bp89hwzCYLYehK/iFL5iGxLjcC4QBBQZUKKRFnb81cg= Subject key identifier: 0A:1E:93:BC:59:11:0A:AA:8D:82:40:72:CB:1E:54:23:E6:3E:8A:FE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858495C244874033ED0AD2DA99CC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fd19eca7-8757-38b2-8589-014c0ebec590.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 8069 IP address blocks: 52.122.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:48:74:03:3e:d0:ad:2d:a9:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=0dfca8c7-fd3f-4501-904a-7a4c37f90f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:55:b1:64:df:2f:f9:f6:d7:be:c8:b3:bf:16: 49:bc:52:4f:d9:38:d5:26:b9:c0:73:5c:47:6f:98: 8d:ce:fb:76:7a:50:01:c5:e8:f4:89:42:81:d5:a6: 7e:4f:81:16:bc:4d:65:b3:3a:c4:7f:3c:b0:69:86: 3e:b8:74:ac:cc:72:2f:f8:e8:db:22:57:fb:81:11: b4:d2:ba:ee:c9:71:94:dd:5d:55:d5:17:75:bf:69: 99:c2:70:cb:5d:33:63:61:fc:91:63:40:ad:0b:31: a1:54:17:66:9d:4a:77:a0:ac:a2:11:5e:8b:2e:77: 8b:23:b8:2a:24:71:d8:00:d2:0a:75:ad:46:72:69: 76:58:1f:9c:53:b5:7c:11:11:08:de:e0:90:2e:35: 03:8c:94:4c:3f:05:7e:23:32:e6:7e:5a:41:8a:a9: 9b:6a:0b:af:d7:ac:ca:a4:91:34:41:13:e1:a9:e4: 44:f2:2d:66:cf:4f:e7:69:9f:77:83:0e:72:d2:34: a8:70:74:11:02:20:05:1c:c3:f9:a0:b2:44:ca:93: 81:5d:5b:97:16:92:58:33:f1:52:8e:2e:26:f6:42: c1:f7:20:7d:2d:7a:c6:28:20:36:07:dc:7f:c1:e8: 85:c9:0b:6e:7d:f0:cb:bc:ff:d0:b4:bc:d3:b5:af: a2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1E:93:BC:59:11:0A:AA:8D:82:40:72:CB:1E:54:23:E6:3E:8A:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fd19eca7-8757-38b2-8589-014c0ebec590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6f:f7:45:92:a7:a1:45:b4:4e:bf:fe:af:da:bd:56:39:6e: 1d:5b:68:50:67:9e:c0:20:fe:04:6f:28:b9:63:47:f3:c3:fc: c1:3e:38:c1:fc:9d:f5:3c:19:e7:50:bb:62:24:5b:cc:32:2f: da:fe:29:05:a7:30:e7:41:bc:de:c7:fc:ea:c0:4f:8d:4f:75: 14:c8:11:db:96:b4:ce:b2:65:ea:02:40:92:ef:7a:93:e1:d2: 55:41:ce:8a:e4:63:27:f8:ee:2e:44:f7:70:69:78:f0:38:61: b4:ff:e1:38:e9:0b:8e:be:f6:a2:b4:e0:ac:45:b6:b2:0c:c9: 99:87:6c:b8:8f:54:e1:6a:a9:ea:16:1d:c5:63:1c:e6:10:d0: ee:6a:bd:d3:e8:fc:ff:56:5a:ea:11:07:8c:6f:e7:c2:aa:a5: 04:e8:74:1c:5e:b9:18:74:60:13:0e:3c:d7:6d:d1:79:2a:69: d1:22:47:69:12:4a:54:11:f3:97:68:91:87:10:0d:58:f2:ba: 03:8b:44:a3:a3:16:73:53:97:10:ad:fe:c5:21:8b:d3:23:02: 13:d4:d9:ba:3f:4e:59:97:71:d5:a1:59:c4:8c:56:25:a7:df: c2:bc:d2:f0:69:b6:56:5e:8d:e0:66:53:7f:e2:70:f7:7b:00: 12:ae:a5:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEh0Az7QrS2pnMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MGRmY2E4YzctZmQzZi00NTAxLTkwNGEtN2E0YzM3ZjkwZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVWxZN8v+fbXvsizvxZJvFJP2TjVJrnAc1xH b5iNzvt2elABxej0iUKB1aZ+T4EWvE1lszrEfzywaYY+uHSszHIv+OjbIlf7gRG0 0rruyXGU3V1V1Rd1v2mZwnDLXTNjYfyRY0CtCzGhVBdmnUp3oKyiEV6LLneLI7gq JHHYANIKda1Gcml2WB+cU7V8EREI3uCQLjUDjJRMPwV+IzLmflpBiqmbaguv16zK pJE0QRPhqeRE8i1mz0/naZ93gw5y0jSocHQRAiAFHMP5oLJEypOBXVuXFpJYM/FS ji4m9kLB9yB9LXrGKCA2B9x/weiFyQtuffDLvP/QtLzTta+iowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoek7xZEQqqjYJAcsseVCPmPor+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZmQxOWVjYTctODc1Ny0z OGIyLTg1ODktMDE0YzBlYmVjNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJv90WSp6FFtE6//q/avVY5bh1baFBnnsAg/gRvKLljR/PD/ME+OMH8 nfU8GedQu2IkW8wyL9r+KQWnMOdBvN7H/OrAT41PdRTIEduWtM6yZeoCQJLvepPh 0lVBzorkYyf47i5E93BpePA4YbT/4TjpC46+9qK04KxFtrIMyZmHbLiPVOFqqeoW HcVjHOYQ0O5qvdPo/P9WWuoRB4xv58KqpQTodBxeuRh0YBMOPNdt0XkqadEiR2kS SlQR85dokYcQDVjyugOLRKOjFnNTlxCt/sUhi9MjAhPU2bo/TlmXcdWhWcSMViWn 38K80vBptlZejeBmU3/icPd7ABKupTA= -----END CERTIFICATE-----Generated at Sat Apr 5 09:57:11 2025 by rpki-client