$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bbc9f42-7900-3623-a6f5-85cdf27a17de.roa File: 7bbc9f42-7900-3623-a6f5-85cdf27a17de.roa (raw, json) Hash identifier: vvoJgJsAmidchfwBtTVofdoKSxEqds7IcNzY+Bd9ZHM= Subject key identifier: 7B:D2:6E:3E:43:A3:02:93:74:6F:54:28:54:0E:E4:BC:84:9B:52:1C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B3C51B18CB4C3119F6E92EA00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bbc9f42-7900-3623-a6f5-85cdf27a17de.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 8069 IP address blocks: 52.122.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b1:8c:b4:c3:11:9f:6e:92:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=c90fa947-93ab-43af-aa01-12d5d253c8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:8c:c3:67:c5:9a:98:4a:85:45:9e:73:45: 39:76:c6:c2:ff:8d:3c:db:3f:d7:5b:ef:67:a4:a5: 29:28:3c:de:c6:05:59:3b:fd:6a:5c:a5:b8:e7:5d: 47:78:1e:ab:9b:96:4a:e8:69:a2:53:22:4d:6f:fd: 5b:f6:b2:7b:bb:15:07:6f:d3:63:e2:f5:d5:79:b5: 7b:1b:0b:05:ea:b1:92:2a:d5:b1:9e:8c:89:b0:73: d4:b1:fa:a6:e1:ab:fa:83:13:c3:59:dc:24:29:47: d6:a4:4e:86:8c:19:e0:dc:cd:ac:75:d4:97:dd:34: 3a:63:0b:10:05:b1:3d:07:f5:a7:21:80:75:a1:fb: 42:74:da:91:90:35:b6:d1:fb:18:ca:b3:8e:59:24: 45:5d:e1:74:ad:7e:4d:2b:a2:dd:2a:10:52:8e:8e: a2:4c:63:9e:3e:3e:1d:0b:ea:5e:08:cb:17:94:64: 8b:b9:67:84:61:34:94:df:da:0d:77:b8:42:c8:29: dc:14:3f:f3:8a:b2:77:c8:3c:45:cb:5e:10:e1:6e: d0:96:43:13:71:d3:cf:02:ed:8d:e7:00:5a:32:39: eb:32:90:9f:b5:76:57:d3:f1:e6:d6:32:e4:f0:09: 6d:82:ce:54:e5:98:88:f4:3f:22:c0:85:f7:7d:f6: 94:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D2:6E:3E:43:A3:02:93:74:6F:54:28:54:0E:E4:BC:84:9B:52:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bbc9f42-7900-3623-a6f5-85cdf27a17de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a1:10:b7:b5:25:ca:4d:e4:37:21:25:22:fa:ee:6d:f7:25: e4:ac:6b:81:c4:36:43:d5:95:77:81:4b:8d:9d:af:e0:13:46: be:30:64:01:34:2e:7f:ec:41:73:4b:15:92:c2:bb:49:c7:fe: 3b:a1:29:ac:26:9f:45:1d:fc:c4:66:00:50:e5:d3:84:02:12: 92:2d:59:da:db:2f:aa:78:4f:71:5e:21:48:82:02:89:f7:08: f8:9b:b7:80:b4:29:f6:87:ae:69:8a:0d:98:03:ca:a0:ae:46: aa:82:52:00:50:dd:70:8a:bd:a8:e2:24:38:38:d9:e0:5e:41: 4b:05:b3:96:63:f8:42:52:aa:bb:c5:dc:c3:d7:b1:a2:42:da: 38:aa:dd:de:43:3e:53:ed:8d:56:70:c4:71:bf:4d:53:01:1d: ba:b1:81:c4:f0:e4:7c:0b:b6:9b:9c:37:70:5a:44:5d:cf:ce: da:b2:c2:15:e8:9d:70:9e:8c:e4:af:6b:7b:d9:06:4b:aa:6e: d8:48:e3:b4:0e:ec:d4:9b:e3:b3:9a:1f:30:49:32:13:da:9e: ab:21:f6:68:1b:14:aa:13:0e:0a:2f:14:8f:59:d0:fa:9e:c5: 8c:38:a2:d3:6e:de:0d:f7:d4:f0:c9:54:fd:d8:99:7b:56:35: e0:ef:30:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UbGMtMMRn26S6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk YzkwZmE5NDctOTNhYi00M2FmLWFhMDEtMTJkNWQyNTNjOGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwCMw2fFmphKhUWec0U5dsbC/4082z/XW+9n pKUpKDzexgVZO/1qXKW4511HeB6rm5ZK6GmiUyJNb/1b9rJ7uxUHb9Nj4vXVebV7 GwsF6rGSKtWxnoyJsHPUsfqm4av6gxPDWdwkKUfWpE6GjBng3M2sddSX3TQ6YwsQ BbE9B/WnIYB1oftCdNqRkDW20fsYyrOOWSRFXeF0rX5NK6LdKhBSjo6iTGOePj4d C+peCMsXlGSLuWeEYTSU39oNd7hCyCncFD/zirJ3yDxFy14Q4W7QlkMTcdPPAu2N 5wBaMjnrMpCftXZX0/Hm1jLk8Altgs5U5ZiI9D8iwIX3ffaUdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvSbj5DowKTdG9UKFQO5LyEm1IcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2JiYzlmNDItNzkwMC0z NjIzLWE2ZjUtODVjZGYyN2ExN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKihELe1JcpN5DchJSL67m33JeSsa4HENkPVlXeBS42dr+ATRr4wZAE0 Ln/sQXNLFZLCu0nH/juhKawmn0Ud/MRmAFDl04QCEpItWdrbL6p4T3FeIUiCAon3 CPibt4C0KfaHrmmKDZgDyqCuRqqCUgBQ3XCKvajiJDg42eBeQUsFs5Zj+EJSqrvF 3MPXsaJC2jiq3d5DPlPtjVZwxHG/TVMBHbqxgcTw5HwLtpucN3BaRF3PztqywhXo nXCejOSva3vZBkuqbthI47QO7NSb47OaHzBJMhPanqsh9mgbFKoTDgovFI9Z0Pqe xYw4otNu3g331PDJVP3YmXtWNeDvMEg= -----END CERTIFICATE-----Generated at Mon Oct 20 04:42:44 2025 by rpki-client