$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/05b73228-c57e-3698-868a-0c439bffc8a8.roa File: 05b73228-c57e-3698-868a-0c439bffc8a8.roa (raw, json) Hash identifier: AQY6SiiLzBENETgaMwx2l/hQgAfNt1GjMxqFQdUlq8U= Subject key identifier: 1D:6B:0B:E1:8F:35:A3:83:17:9E:C7:A9:B7:DC:94:8E:FB:A2:82:6E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D95F00D4384B8D9C7F645AD60 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/05b73228-c57e-3698-868a-0c439bffc8a8.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 8069 IP address blocks: 52.122.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:0d:43:84:b8:d9:c7:f6:45:ad:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=fe20c518-bc66-4c21-9baa-1e4db86dffea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b4:a5:46:5e:a2:46:fe:f5:ed:69:08:66:21: 99:de:21:2c:27:78:5e:94:dc:5f:5c:b6:e1:8e:a5: 57:41:23:29:e4:d2:73:1b:33:c8:14:ef:6b:83:e6: 88:61:0b:25:10:f6:9a:02:b5:14:ba:cc:02:32:44: 52:31:28:bb:88:07:81:80:cf:d9:da:1f:df:6c:a3: d4:a8:a7:f8:bc:a1:fe:91:c3:8d:b7:b4:59:e5:fc: 3a:b8:bc:5a:d9:cb:52:3f:a2:0b:91:92:86:f0:69: c7:90:4f:db:56:c6:e9:f4:a6:1d:19:eb:62:54:a8: bf:9a:96:7d:b7:cf:1e:c3:b1:53:d2:75:a1:67:be: d7:70:ba:94:9f:b5:18:65:60:23:e8:42:e0:5f:2a: 25:ef:3d:be:ce:07:63:67:48:b1:07:65:a9:da:e4: 0b:f6:36:61:15:ab:cf:07:e4:34:41:e2:b0:94:17: fa:36:85:f9:36:67:54:12:7c:75:e6:64:a8:b5:bd: 87:da:d5:13:3a:15:b4:8c:e5:f8:1a:08:31:d9:4c: 8a:22:96:0c:04:67:27:3e:db:4f:4a:fd:10:d1:3b: b6:ec:f6:94:e2:91:77:91:d4:2d:86:a3:c5:24:b0: c2:45:1c:17:15:d6:e4:2b:18:91:97:8d:a4:0f:6b: 24:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6B:0B:E1:8F:35:A3:83:17:9E:C7:A9:B7:DC:94:8E:FB:A2:82:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/05b73228-c57e-3698-868a-0c439bffc8a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:4e:ca:18:25:ab:d4:22:14:74:fc:7b:bd:37:f7:8d:d4:a3: 96:eb:8c:2e:16:27:c4:58:71:28:53:62:c8:3e:cc:4a:cd:06: eb:fc:24:68:15:97:2a:5b:c1:65:d9:6f:53:cb:3c:e3:51:44: 06:d1:2d:63:a9:54:0e:7f:3c:90:d9:da:12:60:90:65:9c:0c: d8:f7:c1:9b:ca:9f:5d:07:02:52:6f:7e:b2:4e:d1:9b:c1:c6: 10:4f:d7:2b:1f:9b:14:83:3f:ae:21:74:ae:db:37:78:62:0c: 88:7f:4e:72:a3:e4:35:99:33:ec:d0:dc:4e:20:6f:4d:ba:57: 3a:ab:e0:63:65:fb:71:a8:a5:bb:7c:97:bf:b4:e6:2c:4d:e4: 69:b3:0e:99:a9:26:d8:fa:e1:22:1a:6c:3d:54:3d:dc:82:f6: 30:35:f6:33:8b:e0:36:b4:93:bb:b3:db:38:77:f1:e5:a3:36: 41:38:10:1f:96:da:b6:ad:d6:d8:43:4e:2c:f0:46:9b:26:f5: 6f:be:0b:43:5b:88:ff:fe:d2:b3:04:a9:09:3b:25:d9:2d:bb: 13:69:9d:fc:0b:f4:f3:97:b8:df:14:1d:68:bf:c5:30:ef:fa: d7:cd:48:be:53:08:04:67:bb:af:c9:8e:a2:06:41:87:90:fc: 1d:c1:14:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8A1DhLjZx/ZFrWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk ZmUyMGM1MTgtYmM2Ni00YzIxLTliYWEtMWU0ZGI4NmRmZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7SlRl6iRv717WkIZiGZ3iEsJ3helNxfXLbh jqVXQSMp5NJzGzPIFO9rg+aIYQslEPaaArUUuswCMkRSMSi7iAeBgM/Z2h/fbKPU qKf4vKH+kcONt7RZ5fw6uLxa2ctSP6ILkZKG8GnHkE/bVsbp9KYdGetiVKi/mpZ9 t88ew7FT0nWhZ77XcLqUn7UYZWAj6ELgXyol7z2+zgdjZ0ixB2Wp2uQL9jZhFavP B+Q0QeKwlBf6NoX5NmdUEnx15mSotb2H2tUTOhW0jOX4Gggx2UyKIpYMBGcnPttP Sv0Q0Tu27PaU4pF3kdQthqPFJLDCRRwXFdbkKxiRl42kD2sk8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1rC+GPNaODF57HqbfclI77ooJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDViNzMyMjgtYzU3ZS0z Njk4LTg2OGEtMGM0MzliZmZjOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDNHqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtOyhglq9QiFHT8e703943Uo5brjC4WJ8RYcShTYsg+zErNBuv8JGgV lypbwWXZb1PLPONRRAbRLWOpVA5/PJDZ2hJgkGWcDNj3wZvKn10HAlJvfrJO0ZvB xhBP1ysfmxSDP64hdK7bN3hiDIh/TnKj5DWZM+zQ3E4gb026Vzqr4GNl+3Gopbt8 l7+05ixN5GmzDpmpJtj64SIabD1UPdyC9jA19jOL4Da0k7uz2zh38eWjNkE4EB+W 2rat1thDTizwRpsm9W++C0NbiP/+0rMEqQk7JdktuxNpnfwL9POXuN8UHWi/xTDv +tfNSL5TCARnu6/JjqIGQYeQ/B3BFL0= -----END CERTIFICATE-----Generated at Wed May 13 12:22:26 2026 by rpki-client