$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4efe7441-24dd-3caa-8bb9-a58fc7fab228.roa File: 4efe7441-24dd-3caa-8bb9-a58fc7fab228.roa (raw, json) Hash identifier: 7Lp281XLfXl3Rs0FBxOqJyCmKj1mOVNqggHe2N7GFtI= Subject key identifier: 2C:2B:74:DB:5C:41:BD:05:07:47:C6:7D:57:37:0A:49:F0:75:52:14 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D975567B444C5B47C993C8400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4efe7441-24dd-3caa-8bb9-a58fc7fab228.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 8069 IP address blocks: 52.122.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:67:b4:44:c5:b4:7c:99:3c:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=3fbf3451-d29d-4d63-aa63-ba8cd97487f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9b:d2:5c:09:d0:a0:b2:61:40:00:2d:75:75: 0e:8b:45:c4:0e:30:7f:16:15:49:44:a0:52:84:e5: 9e:04:b2:14:83:e1:13:35:aa:e0:f0:0e:fd:ce:a3: d1:af:50:8e:03:42:d7:5a:30:da:da:9d:ec:d6:1d: b6:33:27:8b:67:99:a6:dd:3e:72:fc:9f:9c:7b:ec: e7:0d:10:88:ac:ae:05:54:43:47:bf:73:ad:ff:5f: 69:5a:f1:36:8a:53:e7:01:a4:bd:37:78:aa:e8:e2: 6c:f5:ce:79:cf:37:79:6e:55:d3:8d:9b:29:a6:d0: 01:a4:d6:aa:dd:6c:57:f6:b4:69:74:8c:19:ad:14: d7:14:d9:4a:84:6c:c6:09:f4:ea:e6:b7:bf:d1:c1: 1b:d2:af:f0:a0:76:55:d1:ec:fb:34:a1:5c:49:64: ec:e3:6e:8f:f0:22:bd:23:4c:5b:e7:20:19:40:36: df:c3:5e:bb:fb:3a:33:be:71:4c:3b:b1:2c:9a:7d: f6:4d:0d:c0:03:37:a5:b1:61:e9:05:9b:ba:a8:16: 05:b2:65:20:ed:f0:14:a5:54:a6:10:c0:9d:19:81: c8:82:d7:e1:21:59:fc:4f:15:d5:a4:dc:29:58:f7: dc:aa:b6:bf:f0:2a:c8:37:b9:9a:3e:39:d4:87:f9: 93:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2B:74:DB:5C:41:BD:05:07:47:C6:7D:57:37:0A:49:F0:75:52:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4efe7441-24dd-3caa-8bb9-a58fc7fab228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ee:50:6f:b5:56:9e:c8:89:95:30:35:f7:74:b5:6a:56:a8: 9d:68:83:3b:65:9d:92:41:9d:de:53:c5:bd:f7:e5:85:8a:ed: 56:7b:b8:dd:ce:9c:df:09:c6:da:d3:89:f6:ff:29:84:77:83: 4f:25:a6:4d:33:d5:36:1b:38:da:4b:e7:a0:5a:64:f2:69:3a: e1:0f:a2:67:b4:08:63:da:3b:7d:7b:83:dd:de:9d:d9:c0:88: 1e:30:51:18:1f:e5:84:fd:45:eb:e9:5f:c5:33:d4:85:83:ba: a4:87:c4:ef:41:eb:81:fa:15:a4:47:16:d2:44:ab:39:8d:f9: 49:44:71:1d:d5:4b:75:f6:91:1e:e9:93:d3:bb:a5:23:52:1c: b6:45:ae:55:f0:85:08:b1:59:b5:32:31:77:7d:08:03:3b:5b: ab:b0:31:66:23:70:03:ac:92:3b:c1:de:a4:05:37:68:a7:c8: 9e:5d:36:0c:d0:59:e1:fb:53:3b:e3:c6:ec:11:18:69:06:19: 0f:77:ed:03:68:99:35:c1:23:f1:f2:54:f5:92:cb:90:4e:76: 0f:12:c3:aa:59:81:22:40:11:d8:20:9d:6c:7f:ca:d3:65:6c: 03:67:42:d2:58:7b:ba:7d:eb:46:60:9d:1e:75:c2:7a:f6:ae: ee:90:60:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWe0RMW0fJk8hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk M2ZiZjM0NTEtZDI5ZC00ZDYzLWFhNjMtYmE4Y2Q5NzQ4N2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JvSXAnQoLJhQAAtdXUOi0XEDjB/FhVJRKBS hOWeBLIUg+ETNarg8A79zqPRr1COA0LXWjDa2p3s1h22MyeLZ5mm3T5y/J+ce+zn DRCIrK4FVENHv3Ot/19pWvE2ilPnAaS9N3iq6OJs9c55zzd5blXTjZspptABpNaq 3WxX9rRpdIwZrRTXFNlKhGzGCfTq5re/0cEb0q/woHZV0ez7NKFcSWTs426P8CK9 I0xb5yAZQDbfw167+zozvnFMO7Esmn32TQ3AAzelsWHpBZu6qBYFsmUg7fAUpVSm EMCdGYHIgtfhIVn8TxXVpNwpWPfcqra/8CrIN7maPjnUh/mTQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwrdNtcQb0FB0fGfVc3CknwdVIUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGVmZTc0NDEtMjRkZC0z Y2FhLThiYjktYTU4ZmM3ZmFiMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTuUG+1Vp7IiZUwNfd0tWpWqJ1ogztlnZJBnd5Txb335YWK7VZ7uN3O nN8JxtrTifb/KYR3g08lpk0z1TYbONpL56BaZPJpOuEPome0CGPaO317g93endnA iB4wURgf5YT9RevpX8Uz1IWDuqSHxO9B64H6FaRHFtJEqzmN+UlEcR3VS3X2kR7p k9O7pSNSHLZFrlXwhQixWbUyMXd9CAM7W6uwMWYjcAOskjvB3qQFN2inyJ5dNgzQ WeH7UzvjxuwRGGkGGQ937QNomTXBI/HyVPWSy5BOdg8Sw6pZgSJAEdggnWx/ytNl bANnQtJYe7p960ZgnR51wnr2ru6QYOc= -----END CERTIFICATE-----Generated at Wed May 13 09:28:44 2026 by rpki-client