$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b330196c-6f21-379d-b6e0-7f192e1dd93e.roa File: b330196c-6f21-379d-b6e0-7f192e1dd93e.roa (raw, json) Hash identifier: 6FZ98LpU3Is/UJrHEJbI/mQX3mTflYDsRGka8O3eeTc= Subject key identifier: 63:68:EA:A3:D3:C1:97:1E:56:84:D1:44:12:BB:D5:D4:DC:63:AB:34 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2957C90ED5C1E9B22A96E080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b330196c-6f21-379d-b6e0-7f192e1dd93e.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 8069 IP address blocks: 52.122.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:c9:0e:d5:c1:e9:b2:2a:96:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=6f0a04b7-7897-4dad-a606-2570f4a0d178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:6f:90:c7:c5:f6:b8:79:b4:8b:90:62:1e: c3:11:47:3f:1f:cf:f7:24:d3:86:0b:e8:a4:dd:3e: 6b:a6:25:98:db:92:f1:2e:6f:ef:56:f7:0b:60:3f: f5:74:10:d0:74:ce:88:61:e8:db:51:18:5f:21:f9: 81:c0:ce:2c:d3:85:37:77:b4:a1:37:c7:30:f6:42: d8:d0:ff:63:8d:2f:f6:86:e9:ff:25:8c:50:c1:68: 87:03:f9:54:f1:df:76:34:ab:bc:1e:65:44:d1:20: 3b:0a:1a:4d:12:1c:2b:b1:c4:d8:56:6c:12:cf:c4: b2:8d:47:a1:4c:de:48:f4:ae:63:88:39:4f:49:ef: af:93:53:15:23:02:8f:80:ba:a6:6a:96:a7:8a:1d: 0a:b0:b6:78:a0:d4:2f:36:12:51:75:b5:c3:2f:53: 12:18:c4:6b:fb:86:9a:6f:6b:29:e8:82:c8:ac:9a: 3e:8e:d5:21:77:eb:58:f7:40:a2:7a:ee:3b:d1:1d: 61:0c:35:b4:a6:89:e1:55:fa:92:68:e4:80:44:d0: ce:75:cf:47:70:8c:df:63:ca:13:ca:99:44:b3:f5: f8:95:a2:c9:75:5c:f9:5c:a5:af:54:68:9a:7a:49: 13:dd:65:a3:6a:f8:6f:95:84:90:81:44:86:89:6a: 34:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:68:EA:A3:D3:C1:97:1E:56:84:D1:44:12:BB:D5:D4:DC:63:AB:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b330196c-6f21-379d-b6e0-7f192e1dd93e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:de:e2:90:b1:2a:0d:ad:f1:ba:00:e2:09:00:61:f2:05:b0: b3:c6:67:52:97:59:37:c5:78:37:16:bf:ac:81:5c:4f:95:46: a5:8b:c9:5a:52:c8:ff:ca:3f:56:31:68:95:3f:38:9f:31:db: 00:f4:38:16:80:42:9f:6a:51:f8:ac:24:07:06:a7:29:ec:fb: a8:97:e4:4b:2a:92:06:e2:46:b6:ba:c1:17:bc:06:e6:12:ca: 42:69:7d:2c:df:14:89:08:be:72:ba:5e:9c:9c:c4:d3:2f:80: 3b:00:6f:83:b8:d4:6f:7c:6f:0a:da:dc:62:8d:c8:17:45:d9: 4b:d5:6b:9b:ea:dd:b8:2f:99:a0:5f:20:2e:bf:2b:11:f0:e2: 0b:d0:15:ad:f2:ed:08:20:1b:c5:1b:51:42:ad:2e:ce:cb:40: a3:11:59:d3:8d:fe:9b:71:52:e2:40:e2:2b:c2:64:f7:56:77: f3:3f:9f:b2:07:3e:75:b3:9a:86:a5:0c:51:09:35:c6:cc:19: 88:bc:d1:2a:c8:74:5d:e8:36:4c:21:45:1f:d3:6b:03:0f:da: b2:01:b9:0c:59:cd:c5:90:e8:0e:0b:79:f9:17:85:ca:a0:73: 8c:b3:59:8b:15:61:6e:0b:e6:36:ef:83:78:6a:1a:b9:76:37: e8:ba:45:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV8kO1cHpsiqW4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk NmYwYTA0YjctNzg5Ny00ZGFkLWE2MDYtMjU3MGY0YTBkMTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywJvkMfF9rh5tIuQYh7DEUc/H8/3JNOGC+ik 3T5rpiWY25LxLm/vVvcLYD/1dBDQdM6IYejbURhfIfmBwM4s04U3d7ShN8cw9kLY 0P9jjS/2hun/JYxQwWiHA/lU8d92NKu8HmVE0SA7ChpNEhwrscTYVmwSz8SyjUeh TN5I9K5jiDlPSe+vk1MVIwKPgLqmapanih0KsLZ4oNQvNhJRdbXDL1MSGMRr+4aa b2sp6ILIrJo+jtUhd+tY90Cieu470R1hDDW0ponhVfqSaOSARNDOdc9HcIzfY8oT yplEs/X4laLJdVz5XKWvVGiaekkT3WWjavhvlYSQgUSGiWo05wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNo6qPTwZceVoTRRBK71dTcY6s0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjMzMDE5NmMtNmYyMS0z NzlkLWI2ZTAtN2YxOTJlMWRkOTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLe4pCxKg2t8boA4gkAYfIFsLPGZ1KXWTfFeDcWv6yBXE+VRqWLyVpS yP/KP1YxaJU/OJ8x2wD0OBaAQp9qUfisJAcGpyns+6iX5EsqkgbiRra6wRe8BuYS ykJpfSzfFIkIvnK6XpycxNMvgDsAb4O41G98bwra3GKNyBdF2UvVa5vq3bgvmaBf IC6/KxHw4gvQFa3y7QggG8UbUUKtLs7LQKMRWdON/ptxUuJA4ivCZPdWd/M/n7IH PnWzmoalDFEJNcbMGYi80SrIdF3oNkwhRR/TawMP2rIBuQxZzcWQ6A4LefkXhcqg c4yzWYsVYW4L5jbvg3hqGrl2N+i6Rdw= -----END CERTIFICATE-----Generated at Mon Sep 28 21:15:40 2026 by rpki-client