$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f69f5c59-1458-383b-9b14-330d83b3699f.roa File: f69f5c59-1458-383b-9b14-330d83b3699f.roa (raw, json) Hash identifier: NsYtKKrucInBkxGrs9FnbrvSUc2k0wenna/iMrwE+/g= Subject key identifier: 33:D4:E2:6E:01:62:78:88:48:85:95:36:76:AA:AF:7D:07:24:FF:F8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A3B7B0583D91A274486227600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f69f5c59-1458-383b-9b14-330d83b3699f.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 8069 IP address blocks: 52.122.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:05:83:d9:1a:27:44:86:22:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=d5bf72a4-bf53-463f-aa8a-a0a3d563ceae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:69:dd:e5:86:9e:6c:fb:bf:9a:2f:e1:1d:f0: 39:a3:7d:ab:c4:af:da:b7:eb:f3:66:28:2b:90:68: c2:bf:a0:51:d1:fa:0e:61:95:14:4e:d8:89:50:d3: fa:a0:9e:25:d4:b6:96:ff:7d:75:06:99:09:2b:26: cd:85:73:2c:25:89:89:9a:96:2d:97:3d:e0:1d:e6: e3:d0:12:df:cc:65:b9:47:3c:6a:55:5a:11:ca:69: cd:7e:8c:ce:e9:a3:4c:53:d0:f1:be:f9:58:c9:a8: 5b:d7:c8:ab:2f:cf:19:29:5a:21:ac:3f:d2:a4:e4: ac:6a:19:96:14:4f:c9:91:9a:d6:ac:79:ac:5e:24: c6:d8:9a:09:e1:bb:17:52:8c:35:31:bb:a3:5f:6f: d5:bf:8d:e2:8a:84:fc:4f:3e:1a:82:4d:37:01:4b: 16:1c:c6:cf:1f:b2:a0:cf:e0:4a:4e:e9:18:95:bd: ab:2d:dd:06:ca:43:32:b3:de:30:31:41:2e:17:a2: fd:76:a0:0c:68:2f:eb:7a:2b:b3:ee:b6:46:49:ab: d2:71:87:30:1a:70:f3:bf:c2:99:7b:a9:10:d0:72: fc:35:0d:2a:d7:02:cb:71:ce:5e:6d:4d:25:32:c7: 34:03:bf:bb:d2:20:7c:d1:13:4e:b4:a0:83:46:a5: 51:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D4:E2:6E:01:62:78:88:48:85:95:36:76:AA:AF:7D:07:24:FF:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f69f5c59-1458-383b-9b14-330d83b3699f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e1:25:e7:8b:7b:7a:2a:36:f7:8b:98:b5:cf:1c:71:96:10: 8a:f4:f7:8b:3b:09:f4:06:ec:fd:50:87:e9:29:60:82:2b:74: 2b:f0:cf:23:20:42:c3:a3:6f:69:08:de:b9:22:94:69:59:7b: 72:66:93:34:a0:69:9e:4f:e1:a8:3a:cc:89:de:0a:78:2f:30: 87:d7:48:0e:85:47:7e:8a:d6:78:00:92:40:a9:62:b9:c9:7a: a1:c7:d6:d0:e8:0e:a9:4b:5e:1e:52:03:4d:8c:43:6d:d0:00: 41:94:2e:37:10:c2:6a:59:8c:88:f9:4b:61:5c:7c:97:04:a0: 46:9e:6f:3f:fd:3a:90:06:73:51:d0:3a:94:cf:0f:76:f9:07: f5:18:5b:9c:e5:8e:93:bc:1f:84:3a:d7:b0:cd:77:10:a6:ab: a4:5c:ca:33:0e:9d:73:b6:b4:7c:8b:5b:61:a6:8c:cd:39:f7: 8c:80:d3:ab:50:68:40:ce:08:5b:58:d1:19:d7:4c:f8:9b:eb: 47:8d:fe:16:45:b1:94:17:d2:ea:a6:ed:21:31:bc:b0:5e:5d: f3:d9:2a:16:85:69:26:c9:27:68:5d:e8:59:bf:05:a3:0c:6c: c2:2c:f4:9a:54:86:9d:66:1b:30:12:6f:0f:b1:1a:40:cd:4d: ba:08:12:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewWD2RonRIYidgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk ZDViZjcyYTQtYmY1My00NjNmLWFhOGEtYTBhM2Q1NjNjZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGnd5YaebPu/mi/hHfA5o32rxK/at+vzZigr kGjCv6BR0foOYZUUTtiJUNP6oJ4l1LaW/311BpkJKybNhXMsJYmJmpYtlz3gHebj 0BLfzGW5RzxqVVoRymnNfozO6aNMU9DxvvlYyahb18irL88ZKVohrD/SpOSsahmW FE/JkZrWrHmsXiTG2JoJ4bsXUow1MbujX2/Vv43iioT8Tz4agk03AUsWHMbPH7Kg z+BKTukYlb2rLd0GykMys94wMUEuF6L9dqAMaC/reiuz7rZGSavScYcwGnDzv8KZ e6kQ0HL8NQ0q1wLLcc5ebU0lMsc0A7+70iB80RNOtKCDRqVRIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPU4m4BYniISIWVNnaqr30HJP/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjY5ZjVjNTktMTQ1OC0z ODNiLTliMTQtMzMwZDgzYjM2OTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDhJeeLe3oqNveLmLXPHHGWEIr094s7CfQG7P1Qh+kpYIIrdCvwzyMg QsOjb2kI3rkilGlZe3JmkzSgaZ5P4ag6zIneCngvMIfXSA6FR36K1ngAkkCpYrnJ eqHH1tDoDqlLXh5SA02MQ23QAEGULjcQwmpZjIj5S2FcfJcEoEaebz/9OpAGc1HQ OpTPD3b5B/UYW5zljpO8H4Q617DNdxCmq6RcyjMOnXO2tHyLW2GmjM0594yA06tQ aEDOCFtY0RnXTPib60eN/hZFsZQX0uqm7SExvLBeXfPZKhaFaSbJJ2hd6Fm/BaMM bMIs9JpUhp1mGzASbw+xGkDNTboIEuU= -----END CERTIFICATE-----Generated at Mon Jun 30 14:09:31 2025 by rpki-client