$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24153ac8-c42a-3350-ba03-71aa1847a666.roa File: 24153ac8-c42a-3350-ba03-71aa1847a666.roa (raw, json) Hash identifier: bHGg+ZsSC16D2haZf73V2fb9L//7rV2Rn+tkJ3sAjjg= Subject key identifier: 4E:65:8B:A6:9A:E4:86:74:1D:5E:32:B8:9A:D0:8E:02:9A:04:F7:08 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D9755672C373EF0B155C8E380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24153ac8-c42a-3350-ba03-71aa1847a666.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 8069 IP address blocks: 52.122.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:67:2c:37:3e:f0:b1:55:c8:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=32b16c71-fbae-4bb4-874b-eb0d10d6937d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dd:16:dd:89:9b:46:77:07:03:63:21:8b:42: 2b:e6:c7:d7:94:42:7a:3b:f2:15:e1:b1:67:ab:c7: 1b:18:66:9a:23:59:4a:43:e0:87:4c:d3:c8:81:91: db:1a:5e:9b:3f:03:fc:c2:8d:47:d7:b7:5a:c5:08: 08:bd:aa:e6:b3:d7:f0:2a:a6:75:83:f6:f8:69:9a: 3f:62:cd:05:44:77:19:a1:46:26:42:d1:28:e7:8e: c7:7b:58:8c:f6:48:41:45:d1:87:c6:f6:69:a3:06: 42:de:c2:3e:51:6b:19:63:0f:3d:1c:58:7b:12:6e: c2:ae:b8:7f:29:a9:60:98:f8:43:c6:9a:85:49:6b: 4d:4b:9b:c9:9d:e7:bf:99:a5:95:1c:e3:7d:91:78: 93:25:46:b5:1d:08:24:f3:73:a0:2d:bf:1e:17:24: 89:1b:70:54:33:9e:82:88:f4:5a:19:0c:f3:18:5c: 28:01:ae:a4:6f:a9:9c:40:96:4c:71:66:87:1f:c7: a3:c5:bf:9d:9a:85:9b:ca:ac:7c:9b:ba:1e:59:ea: c2:ee:e2:21:e4:7a:43:7f:33:43:f7:6c:9f:20:fa: a7:6f:25:a6:70:36:3b:4d:f9:1a:54:79:92:2b:19: a6:09:f6:54:c5:2e:05:fc:b7:82:82:54:98:bc:0a: 89:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:65:8B:A6:9A:E4:86:74:1D:5E:32:B8:9A:D0:8E:02:9A:04:F7:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24153ac8-c42a-3350-ba03-71aa1847a666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:4d:52:93:ea:55:45:87:25:c7:ec:17:a9:7a:f4:3c:9f:bd: 39:66:c6:2a:12:a1:be:52:7c:00:60:d1:08:9b:78:c4:70:d1: 8d:1c:1e:bb:14:f2:a4:45:e2:56:80:89:34:27:84:88:cf:67: b7:b0:05:58:8d:4a:43:7e:3b:1d:d6:6b:c3:b0:cd:bb:0c:9e: d4:d6:1d:79:46:c9:f2:b6:62:4e:15:44:b9:33:73:aa:82:ac: 2b:a6:26:0f:6c:ee:a7:52:5d:97:18:ec:dd:f0:e8:d8:c1:4d: 45:06:f8:b8:c5:5a:7c:c0:31:27:7d:20:b8:02:51:ed:1d:18: a5:74:3c:58:64:4b:cf:44:60:8a:39:01:67:15:47:5a:25:f7: 1b:a1:8f:d3:e6:f7:69:c6:35:c9:6f:1c:d1:13:a7:ba:ca:b4: f9:31:6e:f8:17:eb:ef:33:1a:1a:52:11:6e:3f:86:db:0c:c8: 4f:06:c2:9e:76:8b:80:1f:d7:9a:d8:d6:81:3b:b8:8b:85:12: 2b:0f:82:57:f6:2f:c4:3a:bf:6d:2e:15:d1:44:7b:1e:58:ea: 62:96:ef:a3:fe:44:be:28:93:97:70:7a:de:2c:0b:cb:d1:e3: 43:b9:78:24:50:f3:bd:d8:fd:97:7a:f6:cf:35:45:5b:e3:d0: a0:7a:3b:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWcsNz7wsVXI44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk MzJiMTZjNzEtZmJhZS00YmI0LTg3NGItZWIwZDEwZDY5MzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu90W3YmbRncHA2Mhi0Ir5sfXlEJ6O/IV4bFn q8cbGGaaI1lKQ+CHTNPIgZHbGl6bPwP8wo1H17daxQgIvarms9fwKqZ1g/b4aZo/ Ys0FRHcZoUYmQtEo547He1iM9khBRdGHxvZpowZC3sI+UWsZYw89HFh7Em7Crrh/ KalgmPhDxpqFSWtNS5vJnee/maWVHON9kXiTJUa1HQgk83OgLb8eFySJG3BUM56C iPRaGQzzGFwoAa6kb6mcQJZMcWaHH8ejxb+dmoWbyqx8m7oeWerC7uIh5HpDfzND 92yfIPqnbyWmcDY7TfkaVHmSKxmmCfZUxS4F/LeCglSYvAqJwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5li6aa5IZ0HV4yuJrQjgKaBPcIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjQxNTNhYzgtYzQyYS0z MzUwLWJhMDMtNzFhYTE4NDdhNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1NUpPqVUWHJcfsF6l69DyfvTlmxioSob5SfABg0QibeMRw0Y0cHrsU 8qRF4laAiTQnhIjPZ7ewBViNSkN+Ox3Wa8OwzbsMntTWHXlGyfK2Yk4VRLkzc6qC rCumJg9s7qdSXZcY7N3w6NjBTUUG+LjFWnzAMSd9ILgCUe0dGKV0PFhkS89EYIo5 AWcVR1ol9xuhj9Pm92nGNclvHNETp7rKtPkxbvgX6+8zGhpSEW4/htsMyE8Gwp52 i4Af15rY1oE7uIuFEisPglf2L8Q6v20uFdFEex5Y6mKW76P+RL4ok5dwet4sC8vR 40O5eCRQ873Y/Zd69s81RVvj0KB6O3A= -----END CERTIFICATE-----Generated at Wed May 13 15:31:35 2026 by rpki-client