$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ef293231-873b-3358-8b93-472eb143f670.roa File: ef293231-873b-3358-8b93-472eb143f670.roa (raw, json) Hash identifier: tS649uN0rR+7rGkoY5JJ7QQitKRw1aZ95lnWc0wNR9A= Subject key identifier: DB:67:05:FF:2C:FC:8A:77:2C:CA:FB:EC:D1:69:10:EB:8B:AA:A1:65 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B047C1E284C43AF62A6F6F1C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ef293231-873b-3358-8b93-472eb143f670.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 8069 IP address blocks: 52.122.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:1e:28:4c:43:af:62:a6:f6:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=743bf167-e09d-49dc-b736-dbe71b2bea65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:83:7d:20:ae:13:c1:a4:69:87:53:0b:8e:c8: 4f:b8:bb:98:0c:5c:1e:68:91:2b:77:94:dd:7d:af: 2e:b9:11:6d:4d:c2:f8:22:63:0a:c5:ed:76:a3:84: 9d:54:91:04:43:84:28:06:f0:b1:5f:12:d9:67:77: 31:ec:69:70:42:4a:44:62:46:bb:70:c7:80:37:4c: 2e:58:5e:f8:06:b7:64:94:b5:95:f9:a6:74:c4:ec: b4:b7:4b:88:44:7b:02:07:48:51:78:2a:d6:e5:24: ff:dd:ec:04:0e:58:98:70:59:b2:9a:1b:92:15:a0: b8:0c:ad:69:9e:24:85:5b:33:be:7b:73:a1:85:98: 9b:a3:84:f2:ca:8a:ba:6f:e0:30:66:6b:02:91:01: 21:8d:45:a8:8e:ac:12:b6:f9:4d:36:4e:69:cd:c8: fd:a3:6b:13:6d:c0:ab:53:40:1d:6c:93:9a:f8:25: b9:70:bc:fd:ea:99:cd:91:b4:1f:17:00:ed:a1:c1: 34:82:b4:14:e7:bd:19:65:26:5f:f2:c2:b8:39:9c: 10:0e:ce:34:16:75:24:9a:f0:80:c6:fd:af:61:e9: 74:b4:58:71:2d:3a:2f:c4:b8:f1:c0:2c:37:79:ea: 6e:d5:e2:7d:d1:a7:f4:ab:12:0f:dd:ee:17:e5:39: 7c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:67:05:FF:2C:FC:8A:77:2C:CA:FB:EC:D1:69:10:EB:8B:AA:A1:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ef293231-873b-3358-8b93-472eb143f670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:7c:28:a0:7c:37:05:a9:30:4c:a1:36:b0:fb:51:f8:ae:b9: d0:88:4c:9c:dc:f7:81:5a:f2:55:f3:95:8b:99:88:46:28:6d: 74:d1:15:70:9e:e1:e2:d6:52:07:6b:ba:ae:87:17:1d:2c:4b: 10:27:b9:01:25:a5:96:7e:91:36:d1:07:77:c6:04:87:d9:8b: 47:c5:d7:4b:96:56:87:6c:dc:e3:be:38:94:4e:7b:64:1e:ad: 8d:3e:f2:b7:f8:52:57:6c:e8:2f:d8:95:b8:ee:93:fe:84:87: b7:9e:d5:2b:bd:51:6a:c4:4c:70:49:f7:cd:b7:51:72:0b:bb: 04:90:1c:d5:45:c0:18:2e:ae:d3:92:30:ea:54:e6:49:96:c9: 80:8c:9e:db:17:3f:e6:36:a2:cc:f0:58:e9:6a:9d:1b:10:86: 9d:32:b9:4e:af:aa:3c:d4:cd:fa:36:4c:57:1c:f9:51:28:fd: 14:a6:d7:7e:68:84:8e:c4:30:a0:08:60:18:2d:a2:96:44:8a: b2:8d:67:5e:e4:4b:97:45:fe:35:b2:41:c6:6f:45:f9:b6:23: c2:a7:91:59:33:a2:fe:d1:ce:ca:aa:6b:b3:b6:36:a2:2c:45: cc:e7:ff:f7:b2:9b:a7:76:08:72:9d:26:03:16:f1:76:b3:ac: 23:a3:2c:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfB4oTEOvYqb28cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NzQzYmYxNjctZTA5ZC00OWRjLWI3MzYtZGJlNzFiMmJlYTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYN9IK4TwaRph1MLjshPuLuYDFweaJErd5Td fa8uuRFtTcL4ImMKxe12o4SdVJEEQ4QoBvCxXxLZZ3cx7GlwQkpEYka7cMeAN0wu WF74BrdklLWV+aZ0xOy0t0uIRHsCB0hReCrW5ST/3ewEDliYcFmymhuSFaC4DK1p niSFWzO+e3OhhZibo4Tyyoq6b+AwZmsCkQEhjUWojqwStvlNNk5pzcj9o2sTbcCr U0AdbJOa+CW5cLz96pnNkbQfFwDtocE0grQU570ZZSZf8sK4OZwQDs40FnUkmvCA xv2vYel0tFhxLTovxLjxwCw3eepu1eJ90af0qxIP3e4X5Tl86wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtnBf8s/Ip3LMr77NFpEOuLqqFlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWYyOTMyMzEtODczYi0z MzU4LThiOTMtNDcyZWIxNDNmNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDNHq4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp8KKB8NwWpMEyhNrD7UfiuudCITJzc94Fa8lXzlYuZiEYobXTRFXCe 4eLWUgdruq6HFx0sSxAnuQElpZZ+kTbRB3fGBIfZi0fF10uWVods3OO+OJROe2Qe rY0+8rf4Ulds6C/Ylbjuk/6Eh7ee1Su9UWrETHBJ9823UXILuwSQHNVFwBgurtOS MOpU5kmWyYCMntsXP+Y2oszwWOlqnRsQhp0yuU6vqjzUzfo2TFcc+VEo/RSm135o hI7EMKAIYBgtopZEirKNZ17kS5dF/jWyQcZvRfm2I8KnkVkzov7Rzsqqa7O2NqIs Rczn//eym6d2CHKdJgMW8XazrCOjLMs= -----END CERTIFICATE-----Generated at Mon Oct 20 10:40:16 2025 by rpki-client