$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fd19eca7-8757-38b2-8589-014c0ebec590.roa File: fd19eca7-8757-38b2-8589-014c0ebec590.roa (raw, json) Hash identifier: UpPxSPvOMHAQ2wMwr4t9I3Xx90C4gaZclPaS1nidN/s= Subject key identifier: 41:E8:AE:CE:F4:11:96:33:D6:7E:AD:C8:4A:45:D4:1D:40:0E:BD:03 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584A3B7B05927EF1482865BF2380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fd19eca7-8757-38b2-8589-014c0ebec590.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 8069 IP address blocks: 52.122.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:05:92:7e:f1:48:28:65:bf:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=b8937e88-eea3-4501-8a54-7cc0108b450d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:dd:68:d0:80:d5:a9:78:4c:f9:ea:4b:53: 9d:39:b8:b2:09:29:34:d3:fd:16:f4:bb:77:a8:ce: ba:82:5e:e6:a9:22:9e:71:9f:5d:45:f4:e7:63:c4: de:7e:f2:d9:72:ef:65:ff:89:b2:ee:07:3e:36:d7: 39:21:18:ea:82:72:73:f4:78:fc:fa:cd:07:ce:35: 63:06:af:25:86:59:32:b5:7a:5c:09:38:88:9d:af: b5:2d:92:a9:71:6b:62:85:0b:d4:62:87:f9:62:09: d1:a2:b3:f0:dc:53:a2:a3:c9:9e:e2:4d:22:c5:51: a2:3b:b7:8a:9b:d1:d0:f8:50:af:4f:03:b2:d6:b4: b6:eb:60:1b:2e:bb:bb:dd:71:e4:44:c0:a2:b9:a0: 00:93:7f:62:d6:e1:09:80:1d:24:bf:1f:15:e1:98: 9d:f2:6d:c9:94:05:ba:7b:c1:0f:6c:6f:6d:6e:9e: 26:ad:77:86:0f:34:76:b1:3f:7d:66:b5:d1:16:2e: 37:7e:79:9c:07:2e:7c:bf:65:2e:24:ab:e2:1b:64: 03:7c:0f:9a:40:f4:1f:48:fa:82:b2:d9:ee:66:e1: e1:25:33:2a:e3:77:87:69:38:44:9c:23:3d:8e:c2: b3:b5:48:b8:db:19:49:a4:7b:e2:29:6a:ee:e7:d0: c7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E8:AE:CE:F4:11:96:33:D6:7E:AD:C8:4A:45:D4:1D:40:0E:BD:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/fd19eca7-8757-38b2-8589-014c0ebec590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:77:03:4b:6b:6a:e7:6a:39:af:01:80:b4:16:9e:33:07:57: 72:85:b2:d8:d0:4b:56:d1:26:61:4b:9c:58:12:02:c9:d8:58: 24:de:67:b2:e7:c6:e5:89:1f:be:1d:27:33:fd:6f:ce:39:ff: 40:da:ae:e2:1b:71:82:55:c4:76:f1:fc:59:89:a2:cf:09:05: dc:0a:6d:33:1a:b6:d0:0c:e9:14:c9:74:21:1f:20:a7:f7:02: 69:4c:82:9e:67:99:a9:62:98:6b:e9:c8:3f:2b:d2:3c:4b:0d: ae:e5:a7:39:9e:97:96:1d:4d:e5:f1:b7:54:4d:4f:92:52:2e: 37:23:e2:bd:84:ad:8e:c1:7f:69:9b:74:90:d7:14:fe:05:b7: fd:4e:3e:09:28:06:ee:f9:1f:19:cb:c7:e2:7f:35:62:f7:49: 18:7d:1d:48:0f:bf:f8:63:99:ec:28:c2:0e:65:c3:6c:be:6d: 96:41:6d:3e:a7:18:fd:ad:82:91:b4:97:24:b6:96:ae:e1:46: fd:46:64:69:8c:ab:f1:24:e7:6d:8b:20:43:e0:ae:3e:87:65: fa:64:d8:93:23:49:0a:44:81:dc:e8:20:77:ec:70:c2:c5:07: 6c:e1:87:1b:5d:91:87:0d:9a:3e:72:25:d9:d3:93:99:0e:03: c7:b5:f7:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewWSfvFIKGW/I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk Yjg5MzdlODgtZWVhMy00NTAxLThhNTQtN2NjMDEwOGI0NTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOvdaNCA1al4TPnqS1OdObiyCSk00/0W9Lt3 qM66gl7mqSKecZ9dRfTnY8TefvLZcu9l/4my7gc+Ntc5IRjqgnJz9Hj8+s0HzjVj Bq8lhlkytXpcCTiIna+1LZKpcWtihQvUYof5YgnRorPw3FOio8me4k0ixVGiO7eK m9HQ+FCvTwOy1rS262AbLru73XHkRMCiuaAAk39i1uEJgB0kvx8V4Zid8m3JlAW6 e8EPbG9tbp4mrXeGDzR2sT99ZrXRFi43fnmcBy58v2UuJKviG2QDfA+aQPQfSPqC stnuZuHhJTMq43eHaThEnCM9jsKztUi42xlJpHviKWru59DH0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHors70EZYz1n6tyEpF1B1ADr0DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZmQxOWVjYTctODc1Ny0z OGIyLTg1ODktMDE0YzBlYmVjNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN3A0traudqOa8BgLQWnjMHV3KFstjQS1bRJmFLnFgSAsnYWCTeZ7Ln xuWJH74dJzP9b845/0DaruIbcYJVxHbx/FmJos8JBdwKbTMattAM6RTJdCEfIKf3 AmlMgp5nmalimGvpyD8r0jxLDa7lpzmel5YdTeXxt1RNT5JSLjcj4r2ErY7Bf2mb dJDXFP4Ft/1OPgkoBu75HxnLx+J/NWL3SRh9HUgPv/hjmewowg5lw2y+bZZBbT6n GP2tgpG0lyS2lq7hRv1GZGmMq/Ek522LIEPgrj6HZfpk2JMjSQpEgdzoIHfscMLF B2zhhxtdkYcNmj5yJdnTk5kOA8e191Q= -----END CERTIFICATE-----Generated at Mon Jun 30 18:14:15 2025 by rpki-client