$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5951a557-2405-3a54-aed0-03f0f4e73edc.roa File: 5951a557-2405-3a54-aed0-03f0f4e73edc.roa (raw, json) Hash identifier: sBYSJkOa7rzFGJnjd4SlQLaJ3me+MwQ1pe/k9gw94hA= Subject key identifier: B1:6F:FA:FE:12:2F:C8:5F:E2:00:4C:F0:09:81:4D:1B:6F:8A:76:14 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D95F00D4EEA6202FD4DD6AB00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5951a557-2405-3a54-aed0-03f0f4e73edc.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 8069 IP address blocks: 52.122.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:0d:4e:ea:62:02:fd:4d:d6:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=05339d14-7548-44fe-8562-730a64de99f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:92:00:32:f1:d5:fd:ec:a9:f2:d8:52:9c:20: 86:fe:f6:6e:9b:b0:9c:3c:71:85:5c:df:77:90:6d: 45:af:14:56:5d:f9:42:63:07:51:22:11:9d:de:3f: a8:30:c5:94:2a:05:0c:29:fb:d5:51:35:9c:f6:9b: f4:65:0d:eb:75:7e:8e:c8:89:66:11:7b:03:9c:63: 38:53:56:28:14:c7:12:c6:f1:52:af:1a:a6:09:93: dd:00:32:ea:46:f7:cd:2b:05:87:ce:ee:fc:73:9a: 7b:0d:fa:7d:4f:02:77:3b:ca:9f:82:70:23:08:25: 21:ad:59:26:bb:79:fe:9e:2e:d0:ce:31:e8:35:25: a3:49:50:01:e7:05:c5:29:5d:93:b6:db:f4:47:1b: 47:1a:c7:5b:d7:1b:57:50:cb:6d:1c:c9:41:fc:95: bf:c0:15:f8:16:4a:76:d1:3f:47:1a:fe:11:90:b0: e3:e2:09:89:5f:45:99:6c:18:ec:52:bd:5f:8e:d2: ee:29:89:57:aa:15:b2:63:58:cc:75:d6:5c:47:37: 05:26:04:e7:e3:21:cf:b5:90:77:d3:78:01:9a:ad: a7:1e:f6:81:d4:29:9f:f9:ad:6c:ce:1f:79:19:fa: d7:19:f3:15:52:20:f3:89:da:ac:99:94:d3:0d:a1: 8a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6F:FA:FE:12:2F:C8:5F:E2:00:4C:F0:09:81:4D:1B:6F:8A:76:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5951a557-2405-3a54-aed0-03f0f4e73edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:13:95:97:6d:4a:7e:cc:e4:26:4b:62:10:b6:f0:7d:fa:09: 76:bb:30:db:18:5c:f4:96:61:81:2c:1c:ec:7a:e7:78:46:09: 3f:2b:69:df:a2:7e:37:00:69:66:c7:00:30:a8:29:7f:31:37: 81:d4:d5:e2:5f:01:47:c8:61:82:41:8d:9f:ec:00:dd:99:f6: 73:c2:bf:1d:ed:34:fa:0a:b0:1f:fb:17:e5:d4:e6:f0:34:92: f6:a4:ff:3f:84:30:c7:55:86:55:09:02:8d:19:8c:b6:76:e1: f1:c0:c3:e5:84:c2:c3:d0:86:da:66:e4:77:bb:66:0d:8a:ff: c8:c9:a5:d7:99:25:8f:b6:56:d5:70:b8:50:2a:d1:1a:39:21: 84:00:15:80:15:31:e2:5a:1d:79:90:4a:e8:a7:fe:a2:c4:a5: 9e:79:e5:c8:49:d5:a8:f1:2f:35:a2:ff:c0:17:b8:71:9a:d3: 48:62:1e:79:a7:86:9a:6c:fd:77:44:fc:d1:71:ee:72:81:72: b9:a2:23:2e:47:c0:e1:13:08:81:a0:fb:44:a6:2b:e5:f0:5e: c4:fd:2d:f2:03:e1:b4:65:d8:5e:89:42:cb:29:1e:d2:2c:3b: 2f:7f:1a:f2:dc:22:f8:da:d8:4a:4d:89:43:92:71:74:52:5f: 37:f2:07:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8A1O6mIC/U3WqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk MDUzMzlkMTQtNzU0OC00NGZlLTg1NjItNzMwYTY0ZGU5OWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZIAMvHV/eyp8thSnCCG/vZum7CcPHGFXN93 kG1FrxRWXflCYwdRIhGd3j+oMMWUKgUMKfvVUTWc9pv0ZQ3rdX6OyIlmEXsDnGM4 U1YoFMcSxvFSrxqmCZPdADLqRvfNKwWHzu78c5p7Dfp9TwJ3O8qfgnAjCCUhrVkm u3n+ni7QzjHoNSWjSVAB5wXFKV2Tttv0RxtHGsdb1xtXUMttHMlB/JW/wBX4Fkp2 0T9HGv4RkLDj4gmJX0WZbBjsUr1fjtLuKYlXqhWyY1jMddZcRzcFJgTn4yHPtZB3 03gBmq2nHvaB1Cmf+a1szh95GfrXGfMVUiDzidqsmZTTDaGK/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFv+v4SL8hf4gBM8AmBTRtvinYUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTk1MWE1NTctMjQwNS0z YTU0LWFlZDAtMDNmMGY0ZTczZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDNHqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGITlZdtSn7M5CZLYhC28H36CXa7MNsYXPSWYYEsHOx653hGCT8rad+i fjcAaWbHADCoKX8xN4HU1eJfAUfIYYJBjZ/sAN2Z9nPCvx3tNPoKsB/7F+XU5vA0 kvak/z+EMMdVhlUJAo0ZjLZ24fHAw+WEwsPQhtpm5He7Zg2K/8jJpdeZJY+2VtVw uFAq0Ro5IYQAFYAVMeJaHXmQSuin/qLEpZ555chJ1ajxLzWi/8AXuHGa00hiHnmn hpps/XdE/NFx7nKBcrmiIy5HwOETCIGg+0SmK+XwXsT9LfID4bRl2F6JQsspHtIs Oy9/GvLcIvja2EpNiUOScXRSXzfyB1c= -----END CERTIFICATE-----Generated at Wed May 13 11:43:57 2026 by rpki-client