$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bbc9f42-7900-3623-a6f5-85cdf27a17de.roa File: 7bbc9f42-7900-3623-a6f5-85cdf27a17de.roa (raw, json) Hash identifier: Vv7cYB3YLAQaSKa6aDzaJoEPdKrnWeUqhoVujG4LWXg= Subject key identifier: A0:F7:54:68:AB:9E:3E:64:4F:D1:8C:0A:E5:8E:F9:85:2A:C6:5A:D7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A5B95B693E88E90572398A580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bbc9f42-7900-3623-a6f5-85cdf27a17de.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 8069 IP address blocks: 52.122.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b6:93:e8:8e:90:57:23:98:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=0386f3df-1d9d-435a-963e-62b44d695e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:df:7e:dd:1c:ba:58:96:d0:59:59:f5:b1:80: 3e:d1:5c:31:89:ba:0e:e0:d3:59:2e:e2:81:ac:a2: 93:e5:32:e3:6b:be:d4:c2:09:68:13:5b:e9:a0:44: 43:50:af:7a:c5:02:9a:f2:62:d5:3c:a3:26:ff:e8: 4e:19:81:bb:32:ec:2b:fd:8d:1a:d7:44:58:34:9b: 6e:f7:a9:7f:2d:44:8d:00:4c:32:70:0a:b5:4c:24: e1:4c:f8:c7:f7:5f:58:90:9a:e8:b4:04:03:8c:bd: 69:9b:98:78:1c:57:1d:4a:7d:a2:5f:5f:13:4c:21: 1a:96:8b:8b:9d:78:61:61:2b:86:5e:3e:02:ec:21: f5:1d:e8:d5:d1:af:ed:65:24:03:8f:07:76:a4:1e: e2:0a:c9:5a:94:3e:16:18:79:e3:0e:af:c7:34:57: 28:75:b2:3a:ef:25:98:98:45:37:65:e0:1f:13:4f: 45:7b:63:b6:b1:3f:9d:a2:6d:51:7f:be:6c:b7:50: 2f:7c:3e:43:23:f8:dc:29:d1:8c:ce:0d:d2:ad:40: 4a:96:99:22:24:f7:e4:d2:8e:72:f1:cd:71:12:54: 9f:33:fc:42:ba:76:7c:2f:65:90:f6:66:37:dd:45: 4f:98:7f:77:90:9c:99:f8:92:1e:75:11:3d:e6:65: 14:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F7:54:68:AB:9E:3E:64:4F:D1:8C:0A:E5:8E:F9:85:2A:C6:5A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bbc9f42-7900-3623-a6f5-85cdf27a17de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:8c:72:bb:8f:c6:fb:fa:cb:17:dd:26:e6:c0:d8:14:7b:ec: 0e:76:4f:c4:66:21:2b:c1:0a:dd:7a:e7:f0:36:0e:30:b6:2f: a9:8a:ae:50:f8:5c:71:38:75:7b:e5:bb:e3:ac:47:61:c4:c1: 96:99:d1:65:3e:ed:e3:69:08:aa:c1:ae:30:1f:fa:4b:f3:dd: 13:2a:e9:aa:e8:f5:96:8e:fa:f0:36:33:4a:86:a6:19:62:bd: 30:e1:1e:89:1b:8a:a9:2c:04:ce:34:d9:ec:2c:92:49:b5:4c: 79:b1:fd:9e:d9:15:6b:11:af:63:27:23:6f:61:5c:3c:e3:2a: fe:89:ff:bf:1e:01:be:e4:1b:00:ff:10:5e:39:ec:e6:d5:a0: d0:f1:05:8d:3f:8e:36:39:94:01:80:64:64:ca:95:fc:2b:b9: c0:e0:77:d3:b5:e8:8d:7b:a0:62:2e:7e:a2:61:4a:d8:7d:91: 67:df:3f:6d:e1:35:36:4f:6b:b9:6b:04:fd:ba:a5:3a:2b:74: 57:8c:ea:ae:9e:8f:a4:29:75:0a:44:51:af:9d:b6:89:9d:8c: d9:21:f6:f6:a1:d3:93:3e:ac:33:8e:d1:78:6a:10:ad:6f:42: 59:a3:a5:e2:02:80:60:e1:07:28:0d:25:ee:62:86:c7:68:4a: 44:32:42:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbaT6I6QVyOYpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk MDM4NmYzZGYtMWQ5ZC00MzVhLTk2M2UtNjJiNDRkNjk1ZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld9+3Ry6WJbQWVn1sYA+0VwxiboO4NNZLuKB rKKT5TLja77UwgloE1vpoERDUK96xQKa8mLVPKMm/+hOGYG7Muwr/Y0a10RYNJtu 96l/LUSNAEwycAq1TCThTPjH919YkJrotAQDjL1pm5h4HFcdSn2iX18TTCEalouL nXhhYSuGXj4C7CH1HejV0a/tZSQDjwd2pB7iCslalD4WGHnjDq/HNFcodbI67yWY mEU3ZeAfE09Fe2O2sT+dom1Rf75st1AvfD5DI/jcKdGMzg3SrUBKlpkiJPfk0o5y 8c1xElSfM/xCunZ8L2WQ9mY33UVPmH93kJyZ+JIedRE95mUUswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKD3VGirnj5kT9GMCuWO+YUqxlrXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2JiYzlmNDItNzkwMC0z NjIzLWE2ZjUtODVjZGYyN2ExN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWMcruPxvv6yxfdJubA2BR77A52T8RmISvBCt165/A2DjC2L6mKrlD4 XHE4dXvlu+OsR2HEwZaZ0WU+7eNpCKrBrjAf+kvz3RMq6aro9ZaO+vA2M0qGphli vTDhHokbiqksBM402ewskkm1THmx/Z7ZFWsRr2MnI29hXDzjKv6J/78eAb7kGwD/ EF457ObVoNDxBY0/jjY5lAGAZGTKlfwrucDgd9O16I17oGIufqJhSth9kWffP23h NTZPa7lrBP26pTordFeM6q6ej6QpdQpEUa+dtomdjNkh9vah05M+rDOO0XhqEK1v QlmjpeICgGDhBygNJe5ihsdoSkQyQgM= -----END CERTIFICATE-----Generated at Mon Jun 30 06:52:52 2025 by rpki-client