$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8ae9718-f55e-3239-a6dd-058166da4e45.roa File: b8ae9718-f55e-3239-a6dd-058166da4e45.roa (raw, json) Hash identifier: qbTVkM/qVpNeA5tWwv6muGuh/3wlA5gD2ejhjfI8b/k= Subject key identifier: 52:D9:F5:1A:A4:BF:91:98:1D:9F:44:9A:9A:B3:81:47:02:A7:EA:F9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F2ABD253F573702AA0B440000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8ae9718-f55e-3239-a6dd-058166da4e45.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 52.122.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:25:3f:57:37:02:aa:0b:44:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=3660834b-90aa-4abd-8b46-532357b0bc73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7a:82:f7:bf:a3:8b:a9:be:2c:ec:e8:19:e3: 6e:fc:01:bb:6a:d5:2d:9d:ce:80:cb:da:84:89:2c: 00:97:19:5c:3e:2b:38:65:ba:97:05:ed:c5:68:bb: df:ea:ed:73:8a:b8:6e:5a:c2:4b:1b:47:46:73:df: 24:b7:f5:dc:d0:0e:bd:1f:45:90:ea:44:61:87:fc: 11:57:57:09:96:97:a9:93:43:4b:f1:c3:90:b1:61: 56:df:a1:a8:8e:94:4c:4c:67:e2:cd:cf:25:fd:2f: f7:86:0d:19:dc:49:a5:7a:e4:27:05:f7:cd:bb:b9: af:40:11:db:84:8e:bc:76:ae:f7:a3:9a:53:b1:e5: f2:70:06:bc:38:80:04:b3:83:1d:c0:cf:46:3e:0f: 84:ab:a5:d3:3d:fe:8b:a1:8a:ed:8d:8c:6f:83:a1: bb:5d:10:e0:ce:25:d1:d5:51:2a:d4:85:ec:ab:0c: a3:4a:05:ed:98:3b:e3:b8:7c:6f:c6:e6:b9:a6:b2: 30:bb:60:94:20:76:eb:a7:1d:ad:73:06:bd:6d:d7: c6:ca:60:08:0e:df:56:1b:1d:0a:5a:68:86:2f:b8: 25:9b:9c:4a:d9:04:f8:32:a9:a6:08:fc:05:40:b7: 90:7f:83:4f:fb:ad:a5:aa:92:41:c2:ea:a6:ae:ef: 5d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D9:F5:1A:A4:BF:91:98:1D:9F:44:9A:9A:B3:81:47:02:A7:EA:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b8ae9718-f55e-3239-a6dd-058166da4e45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:fe:ef:7c:45:60:c9:ab:fc:3a:62:a2:e9:81:4a:97:99:eb: 48:2d:26:6e:de:23:df:03:96:49:6d:ac:d2:04:8c:8a:02:d1: 5f:f4:3f:e3:3e:c1:eb:03:27:f1:4c:d7:43:f8:01:d3:a9:41: b0:b7:32:76:a2:3a:25:cb:2a:b5:89:11:78:08:dc:2a:9e:7b: f5:66:eb:36:d6:e5:fc:9d:fe:0e:e0:47:2c:96:4d:78:6e:4e: da:09:8a:f6:98:85:00:b6:26:72:1e:4b:6b:07:65:6f:6d:b2: 66:94:27:c2:b4:d8:4c:f6:8d:b8:d1:a8:a7:6b:a2:09:4d:91: f2:2d:48:0a:3e:ba:ee:c5:52:dc:e5:7b:a5:31:ba:68:a9:8a: e8:27:0f:37:25:0b:56:bf:72:26:33:d9:d0:0d:23:9d:37:8c: 78:d2:d3:b8:43:4b:93:45:10:a9:d8:6f:84:46:bc:ed:ff:51: 9b:45:cf:78:cb:36:8a:6b:d5:e3:8d:fa:9d:0a:4f:e4:fc:62: e5:3b:7a:61:95:20:1b:f2:ea:de:35:29:e6:3f:4a:fe:66:7d: cb:db:86:ba:de:b4:91:15:ec:66:ac:f9:f3:89:52:d9:bc:47: 84:b8:77:94:d3:61:e6:37:a7:9d:79:0d:17:3f:59:40:43:63: 98:63:ec:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvSU/VzcCqgtEAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MzY2MDgzNGItOTBhYS00YWJkLThiNDYtNTMyMzU3YjBiYzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHqC97+ji6m+LOzoGeNu/AG7atUtnc6Ay9qE iSwAlxlcPis4ZbqXBe3FaLvf6u1zirhuWsJLG0dGc98kt/Xc0A69H0WQ6kRhh/wR V1cJlpepk0NL8cOQsWFW36GojpRMTGfizc8l/S/3hg0Z3EmleuQnBffNu7mvQBHb hI68dq73o5pTseXycAa8OIAEs4MdwM9GPg+Eq6XTPf6LoYrtjYxvg6G7XRDgziXR 1VEq1IXsqwyjSgXtmDvjuHxvxua5prIwu2CUIHbrpx2tcwa9bdfGymAIDt9WGx0K WmiGL7glm5xK2QT4MqmmCPwFQLeQf4NP+62lqpJBwuqmru9dDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLZ9Rqkv5GYHZ9EmpqzgUcCp+r5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjhhZTk3MTgtZjU1ZS0z MjM5LWE2ZGQtMDU4MTY2ZGE0ZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD+73xFYMmr/DpioumBSpeZ60gtJm7eI98DlkltrNIEjIoC0V/0P+M+ wesDJ/FM10P4AdOpQbC3MnaiOiXLKrWJEXgI3Cqee/Vm6zbW5fyd/g7gRyyWTXhu TtoJivaYhQC2JnIeS2sHZW9tsmaUJ8K02Ez2jbjRqKdroglNkfItSAo+uu7FUtzl e6UxumipiugnDzclC1a/ciYz2dANI503jHjS07hDS5NFEKnYb4RGvO3/UZtFz3jL Nopr1eON+p0KT+T8YuU7emGVIBvy6t41KeY/Sv5mfcvbhrretJEV7Gas+fOJUtm8 R4S4d5TTYeY3p515DRc/WUBDY5hj7K4= -----END CERTIFICATE-----Generated at Mon Oct 5 06:14:17 2026 by rpki-client