$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4efe7441-24dd-3caa-8bb9-a58fc7fab228.roa File: 4efe7441-24dd-3caa-8bb9-a58fc7fab228.roa (raw, json) Hash identifier: pcEBL0y/hDpoFUUsZ4/TrML8gL1pZpXGpqFi5AAelG8= Subject key identifier: B3:E1:CE:50:33:52:9D:AE:06:DD:F4:ED:5E:DA:D5:DB:DB:73:9C:92 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A15CA94C4AAB0B854C9BA8D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4efe7441-24dd-3caa-8bb9-a58fc7fab228.roa Signing time: Thu 05 Jun 2025 01:00:51 +0000 ROA not before: Thu 05 Jun 2025 01:00:51 +0000 ROA not after: Wed 03 Sep 2025 01:00:51 +0000 asID: 8069 IP address blocks: 52.122.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:ca:94:c4:aa:b0:b8:54:c9:ba:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 5 01:00:51 2025 GMT Not After : Sep 3 01:00:51 2025 GMT Subject: CN=63e03b89-a82e-4b5e-a5b9-57978d14d7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9d:0f:35:9a:4d:8c:91:35:76:23:3b:7b:ab: 91:7c:95:d2:8f:ae:78:b1:8b:00:50:79:10:38:4d: af:38:6a:c8:11:b7:0e:f9:48:89:cf:2f:be:d2:6a: b4:64:4a:d8:2b:f7:96:72:0a:1b:68:6c:74:ef:ba: 0e:19:25:c6:94:cf:4d:b0:55:da:8f:5e:38:08:c8: 47:2e:71:eb:fb:29:74:70:68:dd:dc:b5:ea:56:bf: 23:2e:35:c4:2a:b4:02:ad:7e:69:18:fb:10:ec:15: 94:6e:7e:dd:c0:c4:f2:e5:9c:d3:12:c7:91:51:75: 18:76:36:83:09:9b:eb:30:f6:59:4e:60:4b:58:92: 2a:64:72:fd:20:af:e0:c3:a8:36:d9:70:83:90:76: 50:bc:05:48:9e:17:ad:9c:dd:9f:e4:1e:70:bf:4c: fb:8c:21:c6:51:54:76:74:8a:32:f0:59:a6:a9:bb: b4:c8:62:9c:af:ae:af:c8:6d:97:79:5c:60:1d:4f: 9c:18:58:60:bf:34:d8:ba:e1:a5:df:49:b3:7b:20: 43:7e:bf:81:9e:9e:d1:55:38:a5:03:04:9b:a8:00: 5c:b8:6e:58:90:ca:01:98:6c:2d:b3:3e:c2:96:fe: db:ce:07:ed:01:24:36:27:2f:77:be:dc:fb:ca:76: 1c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E1:CE:50:33:52:9D:AE:06:DD:F4:ED:5E:DA:D5:DB:DB:73:9C:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4efe7441-24dd-3caa-8bb9-a58fc7fab228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:7e:22:c2:2c:c0:83:f0:b8:99:c0:ad:01:d5:03:e5:b7:57: 51:5d:1a:1b:d7:fb:16:b2:6f:70:2d:b6:0a:26:c1:50:2a:26: 2d:85:cc:ad:63:d8:45:a2:e4:06:c4:a1:a1:76:c1:90:2f:e9: 25:2d:dc:fe:3a:99:dd:0f:f1:ac:f4:8d:28:27:9a:31:4f:7e: 70:21:80:0b:e8:2a:22:a5:96:43:38:ec:de:4c:0e:c4:72:e4: b1:e1:aa:8c:fa:da:b8:2a:e0:d0:3c:62:ff:26:b3:ce:cd:a8: fa:67:53:ed:fe:f8:09:31:6c:f1:73:5d:5a:6a:4b:0f:f0:49: 7c:83:b8:39:21:77:53:24:e3:4e:ee:dc:23:e1:df:07:cf:44: 29:8c:b6:90:f8:4b:79:28:af:86:09:e7:1a:b8:6d:85:9b:45: db:0e:15:d6:f5:e4:96:c5:58:bb:78:c1:f9:b5:07:43:15:bc: 83:39:1b:54:4f:8f:a7:63:73:cd:a8:3c:d9:8e:6a:16:32:12: 7b:c2:5c:86:f7:54:f2:6c:ed:88:66:54:ad:75:17:12:f7:77: 87:8b:7d:18:4f:bf:d7:72:ef:2c:dc:47:c6:0d:e4:8c:36:05: b0:0e:65:00:a2:a5:11:58:1d:11:e2:64:62:75:18:a0:76:e8: cd:d4:7e:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoVypTEqrC4VMm6jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYwNTAxMDA1MVoXDTI1MDkwMzAxMDA1MVowLzEtMCsGA1UEAxMk NjNlMDNiODktYTgyZS00YjVlLWE1YjktNTc5NzhkMTRkN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj50PNZpNjJE1diM7e6uRfJXSj654sYsAUHkQ OE2vOGrIEbcO+UiJzy++0mq0ZErYK/eWcgobaGx077oOGSXGlM9NsFXaj144CMhH LnHr+yl0cGjd3LXqVr8jLjXEKrQCrX5pGPsQ7BWUbn7dwMTy5ZzTEseRUXUYdjaD CZvrMPZZTmBLWJIqZHL9IK/gw6g22XCDkHZQvAVInhetnN2f5B5wv0z7jCHGUVR2 dIoy8Fmmqbu0yGKcr66vyG2XeVxgHU+cGFhgvzTYuuGl30mzeyBDfr+Bnp7RVTil AwSbqABcuG5YkMoBmGwtsz7Clv7bzgftASQ2Jy93vtz7ynYckQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPhzlAzUp2uBt307V7a1dvbc5ySMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGVmZTc0NDEtMjRkZC0z Y2FhLThiYjktYTU4ZmM3ZmFiMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAd+IsIswIPwuJnArQHVA+W3V1FdGhvX+xayb3AttgomwVAqJi2FzK1j 2EWi5AbEoaF2wZAv6SUt3P46md0P8az0jSgnmjFPfnAhgAvoKiKllkM47N5MDsRy 5LHhqoz62rgq4NA8Yv8ms87NqPpnU+3++AkxbPFzXVpqSw/wSXyDuDkhd1Mk407u 3CPh3wfPRCmMtpD4S3kor4YJ5xq4bYWbRdsOFdb15JbFWLt4wfm1B0MVvIM5G1RP j6djc82oPNmOahYyEnvCXIb3VPJs7YhmVK11FxL3d4eLfRhPv9dy7yzcR8YN5Iw2 BbAOZQCipRFYHRHiZGJ1GKB26M3Ufio= -----END CERTIFICATE-----Generated at Mon Jun 30 01:32:17 2025 by rpki-client